Privacy Policy

1. Introduction

PogPoll ("PogPoll," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our interactive polling platform, including our website, Twitch Extension, developer API, and related services (collectively, the "Service"). PogPoll is the controller of the personal information processed through the Service, except where we act as a processor on behalf of a content creator or developer.

By using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, do not use the Service. This Privacy Policy is incorporated into and subject to our Terms of Service.

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: When you create an account or link your Twitch account, we collect your username, display name, email address, avatar URL, and, for accounts that use a password, a securely hashed password. We also store your account type (standalone, Twitch, or hybrid).
• Poll Content: Poll titles, descriptions, options, settings, and any other content you create through the Service.
• Voting and Activity Data: Your votes and poll actions, including free votes, paid votes using Poggles, and Twitch Bits votes, and related metadata.
• Payment and Payout Information: Records of transactions when you purchase Poggles, subscribe to PogPoll Pro, or use Twitch Bits, and — if you are a creator receiving payouts — information you provide to our payment processor to set up payouts (see Section 2.3). We do not store full payment-card numbers.
• Communications: Messages, support requests, and feedback you send to us.

2.2 Information Collected Automatically

• Usage Data: How you interact with the Service, including pages visited, features used, and time spent.
• Device and Connection Information: IP address, browser type, operating system, device identifiers, and user-agent strings.
• Anonymous Vote-Integrity Data: For votes cast without an account, we record the IP address and user-agent associated with the vote in order to prevent duplicate and fraudulent voting and to enforce poll limits.
• Session Data: Authentication tokens, session identifiers, and login/logout timestamps.
• Analytics and Diagnostic Data: Aggregated usage statistics, performance metrics, and error logs.
• Approximate Location: General location (such as country or region) derived from your IP address, for analytics and security.

2.3 Information from Third Parties

• Twitch: When you authenticate with or use the Service through Twitch, we receive your Twitch user ID, an Extension-scoped opaque viewer identifier, display name, channel information, and Bits transaction data, in accordance with your Twitch authorization.
• Stripe (Payments and Payouts): For purchases, we receive transaction confirmations and limited payment metadata. For creators who enable payouts via Stripe Connect, Stripe collects and verifies identity, banking, and tax information (such as name, address, bank-account details, and tax identifiers) directly as part of its "Know Your Customer" (KYC) and onboarding process; we receive verification status and limited account details (such as the last four digits of a bank account) but not full sensitive financial credentials.
• Authentication Providers: OAuth data from Twitch used for account linking and authentication.

2.4 Developer and API Information

If you use our developer API or webhooks, we process your API keys, key metadata, request logs, and the configuration of any webhook endpoints you create, in order to provide, secure, and monitor the integration.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Provision: To provide, maintain, and improve the Service and its features.
• Account Management: To create and manage your account, authenticate you, and provide support.
• Poll Functionality: To display polls, process votes and poll actions, calculate results, and provide real-time updates.
• Monetization and Payouts: To process payments and subscriptions, manage Poggles, calculate revenue sharing, and distribute creator payouts.
• Analytics: To analyze usage patterns, improve the Service, and provide insights to content creators.
• Security and Fraud Prevention: To detect, investigate, and prevent fraud, abuse, vote manipulation, chargebacks, and unauthorized access, including automated checks that may use IP address, user-agent, and account signals.
• Communications: To send transactional messages, important updates, and responses to your inquiries.
• Legal Compliance: To comply with applicable laws, tax obligations, regulations, and legal processes, and to enforce our Terms.

4. Legal Bases for Processing (EEA/UK)

If you are in the European Economic Area or the United Kingdom, we process your personal information under the following legal bases:

• Performance of a contract: to provide the Service you request, including accounts, polls, purchases, subscriptions, and payouts.
• Legitimate interests: to secure the Service, prevent fraud and abuse, analyze and improve the Service, and operate our business, balanced against your rights.
• Legal obligation: to comply with tax, accounting, and other legal requirements.
• Consent: where required, for example for certain cookies or marketing communications. You may withdraw consent at any time without affecting prior processing.

5. Information Sharing and Disclosure

We do not sell your personal information, and we do not "sell" or "share" it for cross-context behavioral advertising as those terms are defined under U.S. state privacy laws. We disclose information only as described below.

5.1 Public Information

The following may be publicly visible on the Service or in places where a poll is displayed (such as a creator's stream or an embedded display):

• Poll titles, descriptions, and options (for public polls)
• Aggregated vote counts and results
• Creator usernames and display names
• Display names associated with certain poll actions
• Public poll creation and activity timestamps

5.2 Service Providers

We share information with trusted service providers who process it on our behalf and under contractual obligations to protect it:

• Stripe: payment processing, subscriptions, and creator payouts (including identity/KYC verification)
• Twitch: authentication, Bits integration, and Extension functionality
• Hosting and Database Providers: secure data storage, infrastructure, and backups (including our database and authentication provider, Supabase)
• Analytics and Monitoring Providers: usage analytics, performance, and error monitoring
• Communication Providers: transactional email and notifications

5.3 Creators and Developers

When you participate in a creator's poll or interact through a developer integration, certain information (such as aggregated results and limited interaction data) may be available to that creator or developer, who is responsible for its use under their own policies.

5.4 Legal and Safety

We may disclose information if we believe it is reasonably necessary to:

• Comply with valid legal process (subpoenas, court orders, warrants) or applicable law
• Respond to government, regulatory, or law-enforcement requests
• Protect the rights, property, or safety of PogPoll, our users, or the public
• Detect, prevent, or address fraud, security, or technical issues
• Enforce our Terms or other agreements

5.5 Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, your information may be transferred as part of that transaction, subject to this Privacy Policy or a successor policy.

6. Data Security

We implement appropriate technical and organizational security measures to protect your information, including:

• Encryption: Data encrypted in transit using HTTPS/TLS and at rest using industry-standard encryption
• Credential Protection: Passwords stored using salted, one-way hashing
• Access Controls: Strict access controls and authentication for our systems
• Data Minimization: Collecting only the information necessary for the Service
• Secure Infrastructure: Hosting on secure, monitored infrastructure with regular updates
• Rate Limiting and Abuse Protection: Safeguards against automated attacks and abuse

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify you and the relevant authorities as required by applicable law.

7. Data Retention

We retain your information for as long as necessary to provide the Service and for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law:

• Account Data: Retained while your account is active and for a reasonable period after closure
• Poll Data: Public polls may be retained indefinitely; non-public polls may be deleted after account closure
• Vote and Vote-Integrity Data: Retained for analytics, fraud-prevention, and audit purposes, typically for 2–3 years
• Payment and Payout Data: Retained as required by financial, tax, and accounting laws
• Logs and Analytics: Retained for security and performance monitoring, typically for 1–2 years

When information is no longer needed, we delete or de-identify it. We may retain de-identified or aggregated data indefinitely.

8. Your Privacy Rights and Choices

Depending on your jurisdiction, you may have some or all of the following rights regarding your personal information:

• Access / Know: Request access to, or information about, the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information, subject to legal and operational exceptions
• Portability: Request a copy of your data in a structured, machine-readable format
• Objection / Restriction: Object to or request restriction of certain processing
• Withdraw Consent: Withdraw consent where processing is based on consent
• Opt Out: Opt out of any "sale" or "sharing" of personal information or targeted advertising (note: we do not sell or share your personal information)
• Non-Discrimination: Not be discriminated against for exercising your rights

To exercise these rights, contact us at privacy@pogpoll.com. We will respond within the time required by applicable law (generally within 30–45 days). We may need to verify your identity before fulfilling your request, and you may use an authorized agent where the law permits. If you are unsatisfied with our response, you may have the right to appeal or to lodge a complaint with your local data-protection or consumer-protection authority.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to operate and improve the Service:

• Essential Cookies: Required for basic functionality, authentication, and security (including session and CSRF protection)
• Performance Cookies: Help us understand how the Service is used so we can improve it
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Provide insights into usage patterns

You can control cookies through your browser settings, though disabling certain cookies may affect functionality. Because there is no common industry standard for "Do Not Track" signals, we do not currently respond to them; however, we honor recognized opt-out preference signals (such as Global Privacy Control) where required by law.

10. International Data Transfers

Your information may be transferred to and processed in the United States and other countries that may have different data-protection laws than your own. Where we transfer personal information internationally, we rely on appropriate safeguards, such as:

• Standard Contractual Clauses approved by the relevant authorities
• Adequacy decisions by the relevant authorities
• Other appropriate safeguards required by applicable law

11. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Users under 13 are not permitted to use the Service. Users between 13 and the age of majority in their jurisdiction may use free features only with the consent and supervision of a parent or guardian, and may not make purchases; any payment must be made or authorized by a parent or guardian (see our Terms of Service).

If you are a parent or guardian and believe a child under 13 has provided us with personal information, please contact us at privacy@pogpoll.com, and we will take steps to delete it.

12. Third-Party Services

The Service integrates with third-party services that have their own privacy policies:

• Twitch: Twitch Privacy Policy
• Stripe: Stripe Privacy Policy

We encourage you to review the privacy policies of these third-party services. We are not responsible for their practices.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated Privacy Policy with a new "Last Updated" date
• Sending an email notification (if you have provided an email address)
• Displaying a notice within the Service

Your continued use of the Service after changes take effect constitutes acceptance of the updated Privacy Policy.

14. Jurisdiction-Specific Disclosures

14.1 European Union / United Kingdom (GDPR)

If you are in the EEA or UK, you have the rights described in Section 8 and the legal bases described in Section 4, including the right to lodge a complaint with your local supervisory authority. Where we rely on consent, you may withdraw it at any time. Where we rely on legitimate interests, you may object to processing.

14.2 California (CCPA/CPRA)

If you are a California resident, you have the rights to know, access, correct, and delete your personal information, to opt out of the "sale" or "sharing" of personal information, and to limit the use of sensitive personal information. We do not sell or share personal information as those terms are defined under California law, and we do not use or disclose sensitive personal information for purposes that require an opt-out. We will not discriminate against you for exercising your rights. In the prior 12 months, we have collected the categories of personal information described in Section 2 (such as identifiers, internet/usage activity, approximate geolocation, commercial/transaction information, and account credentials) and disclosed certain categories to service providers for the business purposes described in Section 3 and 5. California's "Shine the Light" law permits California residents to request information about disclosures to third parties for their direct-marketing purposes; we do not share personal information for third-party direct marketing.

14.3 Other U.S. State Privacy Laws

If you are a resident of a U.S. state with a comprehensive consumer-privacy law (such as Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and others), you may have rights to access, correct, delete, and obtain a portable copy of your personal information, and to opt out of targeted advertising, the sale of personal data, and certain profiling. To exercise these rights, contact us at privacy@pogpoll.com. Where the law provides, you may appeal a denial of your request by replying to our response.

14.4 Other Jurisdictions

We comply with applicable privacy laws in the jurisdictions where we operate. If you have questions about your specific rights, please contact us.

15. Contact Information

If you have questions about this Privacy Policy or our privacy practices, please contact us: