Privacy Policy & Cookies

1. Introduction

StreamYourSport operates a platform that lets racket-sport clubs and organizers broadcast, manage and supervise livestreams of their matches from streamyoursport.tv.

This policy explains what personal data we process, why, with whom we share it, how long we keep it and your rights under the GDPR. Section 4 covers data obtained through the Google and YouTube APIs.

2. Who we are

The data controller is SAS STREAMYOURSPORT.TV (SIREN 930628870), 38 rue du Rocher Cornet, 22190 Plérin, France. Contact: contact@streamyoursport.tv.

We are the data controller for account and service data. For match footage of players and spectators, the broadcasting club or person is the controller and StreamYourSport acts as their processor (see Section 11).

You can lodge a complaint with the French supervisory authority, the CNIL (https://www.cnil.fr), or with your local EU authority.

4. YouTube and Google API data

StreamYourSport uses YouTube API Services. By connecting a YouTube account, you agree to the YouTube Terms of Service and the Google Privacy Policy.

With your authorization we request two scopes:

• https://www.googleapis.com/auth/youtube – to create and manage the livestreams, broadcasts and videos of the channel you connect (including, on your explicit request, deleting a replay or uploading a highlight).
• https://www.googleapis.com/auth/yt-analytics.readonly – to show you the audience statistics of your livestreams and videos (views, watch time).

We use this data only to provide these features inside your account. StreamYourSport’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: we do not transfer it to third parties except to provide these features, for security or to comply with the law; we do not let humans read it; and we never use it for advertising.

OAuth tokens are stored securely, are accessible only to the services that need them, and are deleted within 30 days of you revoking access or deleting your account. You can revoke StreamYourSport’s access at any time at https://myaccount.google.com/permissions. Match video does not pass through Google APIs on our side: it is sent directly from the club server to YouTube over the standard RTMP protocol. The same connection mechanism applies to Twitch.

• Essential: session management and security (no personal data; no consent required).
• Statistics: number of visitors, pages viewed, traffic sources.
• Functional: non-essential features such as video embedding or social sharing.
• Preferences: language and browsing preferences.

Third-party cookies may also measure performance and serve advertising. Non-essential cookies (statistics, functional, preferences and advertising) are set only with your consent. You can withdraw consent and block or delete cookies at any time through your browser; see the CNIL website for guidance.

6. Who we share data with

We do not sell or rent your personal data. We share it only with service providers that process it on our behalf, and only as needed to run the service:

Provider	Role	Location
Neon	Database hosting (PostgreSQL)	European Union
OVH	Hosting of the back-end API	France
Brevo (Sendinblue)	Transactional email delivery	France / EU
Google / YouTube	Live broadcasting, OAuth, channel data	United States
Twitch (Amazon)	Live broadcasting, OAuth, channel data	United States
Cloudinary	Hosting of club logos and advertising images	United States
Cloudflare	Anti-bot, WebRTC connectivity, secure tunnel	United States (global edge network)
Axiom	Log aggregation	United States
Cloudflare R2	Storage of stream overlay images	United States (global edge network)

We also disclose data to YouTube and Twitch through the API calls needed for the features you use, and to public authorities when required by law.

7. International data transfers

Some providers above process data outside the European Economic Area, in particular in the United States. Such transfers are covered by an appropriate GDPR safeguard: the European Commission’s Standard Contractual Clauses and/or an adequacy decision (such as the EU-US Data Privacy Framework where the provider is certified).

8. How long we keep data

• Account data: while your account is active; deleted within 30 days after you close it, unless the law requires us to keep it longer.
• OAuth tokens: deleted within 30 days of you revoking access or deleting your account.
• Contact form data: kept as long as needed to handle your request.
• Logs: 30 days.

9. Security

Passwords are stored only as bcrypt hashes; OAuth tokens are accessible only to the services that need them; all communication uses HTTPS/TLS; and internal access to personal data is limited to staff who need it.

10. Your rights

Under the GDPR you can access, rectify, erase, restrict or object to the processing of your data, request portability, and withdraw consent at any time. To exercise these rights, write to contact@streamyoursport.tv; we respond within one month. You can also lodge a complaint with the CNIL (see Section 2), revoke Google access at https://myaccount.google.com/permissions, and revoke Twitch access in your Twitch connections settings.

11. Filming of players and spectators

When a club broadcasts a match, people on or around the court may appear in the video, which may be publicly accessible on YouTube or Twitch unless the stream is private. For this footage the broadcasting club or person is the data controller: they are responsible for informing the people filmed and for having a valid legal basis (for example their consent) before broadcasting. If you appear in a stream and want it removed, contact the club or person that owns the channel that hosts the stream.

12. Children

StreamYourSport accounts are intended for clubs and their representatives, not for individuals under 16. Where filmed players may be minors, the broadcasting club is responsible for obtaining parental consent.

13. Changes to this policy

We may update this policy to reflect technical, legal or functional changes. The “last updated” date above shows the latest version, and we will notify active account holders by email of material changes.