Privacy Policy

Account information. If you sign up with email and password, we store your email address, a securely hashed password (we never store your plaintext password), and any name you provide.

TikTok Login Kit information. If you sign in with TikTok, we receive your TikTok open ID, display name, and profile picture URL. TikTok's Login Kit does not provide your email address, and we never receive it through this method.

Google information (if enabled). If you sign in with Google, we receive your name, email address, and profile picture as provided by Google.

TikTok LIVE connection data. When you connect a TikTok username to power your overlays, we read public TikTok LIVE event data for that stream while it is live — gifts, likes, follows, comments, and the nicknames, usernames and avatar images of participating viewers — solely to display it back to you through your dashboard and overlay widgets. We retain a short-lived in-memory and Redis-cached snapshot of this session activity (cleared shortly after your stream ends) and a persisted log of cumulative supporter totals tied to your account.

Billing information. Subscription payments are processed entirely by PayPal. We store your subscription status and plan, but we never receive or store your card or bank details.

Technical information. We use session cookies/tokens to keep you signed in, and signed tokens to authorize your OBS overlay URLs. We may log basic technical data (such as IP address and request metadata) for security and abuse prevention.

We use the information above to: operate and maintain your account and dashboard; authenticate you via email/password, TikTok, or Google; bridge your TikTok LIVE events to the overlay widgets you configure; process subscription billing through PayPal; secure the Service against abuse; and communicate with you about your account when necessary.

We do not use your data for advertising, and we do not sell your personal information.

OverlayLive integrates with TikTok's Login Kit and LIVE services under TikTok's Developer Terms of Service and Developer Policies. We use TikTok user data solely to operate the features described in this policy: signing you in, and bridging your own LIVE stream's public events to your own overlays. We do not share, sell, or use TikTok user data for any purpose unrelated to providing the Service, and we do not use it for advertising or pass it to third parties for their own purposes.

You may request deletion of any data obtained via TikTok at any time, either by deleting your account from the dashboard or by contacting us at jankenmatene933@gmail.com. You can also revoke OverlayLive's access to your TikTok account at any time from TikTok's own account settings.

We share information only with the service providers that operate OverlayLive on our behalf, each acting under their own privacy and security terms: TikTok (Login Kit and LIVE data), Google (optional sign-in), PayPal (subscription billing), and our infrastructure providers (database, cache and hosting). We do not sell personal information, and we do not share it with third parties for their own marketing purposes.

We may disclose information if required by law, or to protect the rights, safety, or property of OverlayLive, our users, or others.

We retain account information for as long as your account is active. Live-session snapshots are short-lived and cleared shortly after a stream ends; cumulative supporter totals persist until you delete them or your account. You can request deletion of your account at any time by emailing jankenmatene933@gmail.com — we will delete your personal data within a reasonable time, except where we are required to retain limited records (e.g., billing records) for legal or accounting purposes.

OverlayLive is not directed at children under 13, and TikTok itself requires users to meet its own minimum age requirements. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us at jankenmatene933@gmail.com and we will delete it.

We use industry-standard measures to protect your information, including password hashing, signed/encrypted session tokens, and encrypted connections to our database and cache providers. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Depending on your location, you may have the right to access, correct, or delete your personal information, or to object to or restrict certain processing. You can exercise most of these rights directly from your dashboard; to have your account and personal data deleted, contact us at jankenmatene933@gmail.com.

We may update this Privacy Policy from time to time. We will update the effective date above when we do, and material changes will be communicated through the Service or by email where appropriate.

Questions about this Privacy Policy, or requests to access or delete your data, can be sent to jankenmatene933@gmail.com.