Privacy policy

1. Who is responsible for your data

OneStreamPass, onestreampass@gmail.com is the "controller" of the personal data described here, under the UK GDPR and the Data Protection Act 2018. This policy covers onestreampass.com and the games and tools that use a SuperPass login.

2. What we collect

• Account: your username and a scrambled (hashed) version of your password. We never store your password in readable form.
• Optional details you add: a Roblox username, a TikTok username, and your public profile (short bio, colour, mascot or picture).
• Purchases: which pass you bought, dates, and payment confirmations from PayPal such as the subscription reference and amount. We do not receive your card number.
• Game activity: scores, settings, and gift layouts you save.
• Technical data: your IP address and browser details in our server logs, and the cookies described in our Cookie policy.
• Messages: anything you send us, for example by email or Discord.

3. Why we use it, and our legal reason

• To create your account and give you the games and your pass (contract).
• To take payment, keep records and meet tax and accounting rules (contract and legal obligation).
• To show scoreboards and public profiles, to keep the site secure, stop cheating and abuse, and fix problems (legitimate interests).
• To credit the player who referred you, using the referral cookie, only if you accept it (consent).

4. What other people can see

Your username and your scores appear on public scoreboards. Your public profile (bio, colour, mascot or approved picture) can be seen by other players. You can switch your profile to private in the profile editor. Please do not put personal details such as your real name, address or phone number in your bio or picture.

5. Who we share it with

• PayPal, to take payments and manage subscriptions. PayPal is a separate controller and has its own privacy policy.
• Our hosting provider, which runs our servers.
• TikTok LIVE connection services, only when you use Streamer Mode: the TikTok username you give us is used to connect to your LIVE session.
• Authorities or advisers, where the law requires it or to protect our rights.

We do not sell your data and we do not use it for advertising. We host our own fonts and files so your browser does not contact Google or other third parties just to load our pages.

6. How long we keep it

We keep your account data for as long as your account exists. Payment records are kept for six years because of tax and accounting rules. Server logs are kept only as long as needed for security and fixing problems. You can ask us to delete your account at any time.

7. Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to move it to another service. Where we rely on consent, you can withdraw it at any time. Contact us through our Discord server or by email at onestreampass@gmail.com. If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

8. Children

Our games are enjoyed by young people. You must be at least 13 to have an account. If you are under 18, please ask a parent or guardian before buying a pass or posting a profile picture. If you think a child under 13 has given us their details, email us and we will delete them.

9. Security

We use sensible technical measures to protect your data, including hashed passwords and encrypted connections. No system is perfectly secure, so please choose a strong, unique password.

10. Changes

We may update this policy and will change the date at the top when we do.