Privacy Policy

StreamQuest is the controller of the personal data described in this Privacy Policy when we decide why and how that data is processed.

This policy applies to visitors to the StreamQuest website, creators using the Creator Dashboard, clients or prospective clients, and other users who contact us or interact with our services.

• website visits and contact forms;
• Creator Dashboard sign-in and connected accounts;
• Quest applications, Mission Brief participation, submissions, payouts, and reporting;
• client onboarding, campaign setup, and campaign communication;
• support, security, analytics, and legal compliance activities.

For all users

• website usage, visit history, cookies, language settings, and site interaction data;
• support requests, emails, messages, and account communications;
• fraud-prevention, abuse-prevention, and security logs.

We collect personal data from different sources depending on how you interact with StreamQuest.

• Directly from you, such as when you sign in, fill out forms, contact us, apply to a Quest, or send campaign materials.
• From connected platforms, such as Twitch, when you authorize a connection and the platform makes data available to us through permitted APIs or OAuth.
• From public sources, such as publicly visible channel data, VODs, clips, public metrics, or publicly posted campaign content.
• From clients or partners, for example where a client gives us campaign-specific information or approved creator-related context needed to operate a campaign.
• From processors and service providers, such as payment providers, analytics providers, support tools, or hosting services.

We only process personal data where we have a valid legal basis.

Some personal data is necessary for us to provide the service or enter into a contract with you.

• If you do not provide required account, contact, or connected-platform data, you may not be able to sign in, access the Creator Dashboard, apply to Quests, participate in campaigns, or receive payouts.
• If a client does not provide sufficient contact, billing, campaign, or legal information, we may not be able to launch or manage the requested campaign.
• Other data is optional and may only be provided if you choose to share it.

We may share personal data with the following categories of recipients where necessary:

• Clients / brands, for campaign execution, review, reporting, and payment reconciliation;
• processors and service providers, such as hosting, cloud storage, analytics, support, communications, and payment tools;
• platform partners, such as Twitch or other supported services, where the integration requires data exchange;
• professional advisers, such as accountants, auditors, legal advisers, or insurers where needed;
• public authorities or regulators, where required by law, court order, or regulatory request;
• business transaction counterparties, if StreamQuest is involved in a merger, transfer, restructuring, or sale of assets.

Brands may receive limited creator data where reasonably necessary for campaign execution, review, reporting, and commercial reconciliation. This may include creator display names, public channel information, content links, screenshots, timestamps, language, campaign performance data, and payout or completion status where relevant.

• Brands may use creator information only for campaign execution, campaign review, campaign reporting, and closely related operational follow-up.
• Brands may not use creator data for unrelated marketing or outreach unless they have a separate lawful basis to do so, such as direct consent.
• Where a brand receives creator data for its own purposes, it may act as a separate controller and is responsible for complying with applicable privacy laws.

Some of our providers or partners may process personal data outside the European Economic Area.

• Where personal data is transferred outside the EEA, we aim to use an appropriate transfer mechanism such as an adequacy decision or Standard Contractual Clauses.
• We may also use supplementary technical and organizational measures where appropriate.
• You may contact us if you would like more information about applicable transfer safeguards.

We use cookies and similar technologies to operate the website and understand how it is used.

• Essential cookies help keep the site working, remember basic settings, and support sign-in or session functionality where needed.
• Limited analytics cookies may be used where permitted to understand traffic and performance in a privacy-conscious way.
• Non-essential analytics, tracking, or similar cookies should only be placed after consent where required by applicable law.

You can manage cookie preferences through any cookie banner or settings tool we provide, and you can also manage cookies through your browser settings. Blocking certain cookies may affect site functionality.

• Account and profile data: generally retained while the account is active and for a reasonable period afterward if needed for support, security, fraud prevention, or disputes.
• Campaign records and financial records: retained for as long as needed for contractual, legal, tax, accounting, or audit purposes, and in many cases up to 7 years or longer if required by law or an ongoing dispute.
• Analytics data: retained only as long as reasonably needed for analytics purposes, for example up to 14 months where that aligns with your settings and lawful basis.
• Deleted accounts: generally removed or anonymized within approximately 90 days, except where we need to retain certain information longer for legal, security, anti-fraud, or bookkeeping reasons.

We use appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.

• Examples may include access controls, least-privilege practices, encryption in transit where appropriate, secure hosting, authentication controls, logging, backups, and provider vetting.
• Access to personal data is limited to people and providers who need it for legitimate operational purposes.

Depending on the circumstances and applicable law, you may have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request deletion of personal data;
• request restriction of processing;
• object to certain processing, especially where based on legitimate interests;
• request data portability where the legal conditions are met;
• withdraw consent at any time where processing is based on consent, without affecting processing already carried out before withdrawal;
• lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

Rights are not absolute and may be limited where an exception applies, for example to protect the rights of others, comply with law, or preserve legal claims.

StreamQuest may use data-driven sorting, campaign-fit checks, fraud signals, or prioritization logic to help operate the platform and campaigns.

• This may include considering factors such as connected account status, public metrics, language, geography, prior completion history, timing, and campaign fit.
• At the time of this policy, StreamQuest does not intend to rely on solely automated decision-making that produces legal effects or similarly significant effects on individuals without meaningful human involvement.

StreamQuest is not intended for children under 18. We do not knowingly collect personal data from children under 18 for platform use. If you believe a minor has provided personal data to us in breach of this rule, please contact us and we will investigate and take appropriate steps.

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or operational practices.

• The latest version will be posted on this page with an updated “Last updated” date.
• Where appropriate, we may also provide additional notice through the platform or by email.
• If a processing activity requires consent, we will seek that consent separately where required rather than relying on this policy alone.

For privacy questions, data subject requests, or complaints about how we handle personal data, contact us using the details below.