StreamWP — Privacy Policy
(Effective 2 June 2025)
1 Who We Are
StreamWP UG (haftungsbeschränkt) (“StreamWP,” “we,” “us”) provides a WordPress plugin that embeds live-stream content. We are the data controller under the EU GDPR. EUR-Lex
2 What Data We Collect
Context | Categories | Purpose | Legal Basis* |
---|---|---|---|
Website visits | IP address, pages viewed, cookies | Site analytics, security | Legitimate interest (GDPR Art 6 (1)(f)) EUR-Lex |
Plugin activation | Domain, licence key, WordPress version | Licence validation, update delivery | Contract (GDPR Art 6 (1)(b)) |
Plugin runtime | Channel status, stream thumbnails, API keys stored locally only | Display streams, performance optimisation | Contract; Legitimate interest |
Purchases | Name, email, VAT ID, billing address (handled by Stripe/PayPal) | Fulfil transaction, accounting | Contract; Legal obligation (GDPR Art 6 (1)(c)) |
*California residents: these purposes align with “business purpose” definitions in CCPA §1798.140(d). leginfo.legislature.ca.gov
3 Cookies & Tracking
We use functional cookies (to remember licence state) and optional analytics cookies. Consent for analytics is obtained via a banner in accordance with the EU ePrivacy Directive. EUR-Lex
4 Data Sharing
We share data only with:
- Payment processors (Stripe, PayPal)
- Infrastructure providers (Hetzner, Cloudflare) — hosting & CDN
All vendors sign GDPR-compliant Data Processing Agreements.
5 International Transfers
Where data leaves the EEA, transfers rely on the EU Standard Contractual Clauses (2021/914) or an adequacy decision.
6 Retention
- Licence & billing records — 10 years (German tax law).
- Server logs — 30 days.
- Cached stream data — ≤ 5 minutes by default; configurable.
7 Security
We implement encryption (TLS 1.3), strict role-based access, and annual penetration tests. Users must keep their own WordPress installation patched.
8 Your Rights
Under GDPR you may access, correct, delete, or port your personal data and object to or restrict processing (Arts 15-21). EUR-Lex
California residents have rights to know, delete, and opt out of “sale” of personal information under CCPA §1798.100–1798.130. Findlaw
Requests: email privacy@streamwp.com; response within 30 days.
9 Children
Our Services are not directed to children under 13 (COPPA). We do not knowingly process such data.
10 Changes
Material changes will be posted on this page and, for Pro customers, notified via email at least 14 days in advance.
11 Contact
Uncertainties & Local Variations
The above documents follow GDPR, CCPA, and EU ePrivacy requirements, but local legislation (e.g., PIPEDA, LGPD) may impose additional duties. Consult counsel before publishing.
One-sentence summary: Full, standards-referenced Terms of Service and Privacy Policy for StreamWP, ready to paste into your site and compliant with GDPR, CCPA, and ePrivacy requirements.