Privacy Policy

Last updated

StreamSpook Privacy Policy

Masashi Akisue (trading as Fortyworks; hereinafter referred to as the "Operator") sets forth this Privacy Policy (hereinafter referred to as the "Policy") regarding the handling of information in the software "StreamSpook" (hereinafter referred to as the "Software") and on the official website (https://streamspook.app/; hereinafter collectively referred to as the "Service").

Article 1 (Basic Policy)

  1. The Operator shall comply with the Act on the Protection of Personal Information of Japan, the EU General Data Protection Regulation (GDPR), the UK General Data Protection Regulation (UK GDPR), and other applicable laws and regulations, and shall handle personal information appropriately.
  2. Information collected or generated by the Software in connection with streaming is, as a rule, processed and stored locally on the User's device and is not transmitted to the Operator's servers. When the Software is integrated with Twitch, authentication is performed by Twitch, and the Software obtains information from Twitch to the extent authorised by the User. When using Microsoft Edge's online speech recognition feature, voice data is transmitted to Microsoft's servers, and when using Steam Cloud provided by Valve Corporation (hereinafter referred to as "Valve"), visual effects and other application settings are saved and synchronised.

Article 2 (Information Handled Locally on the Device)

  1. To the extent necessary to provide the features, the Software handles Steam IDs, Twitch account information and authentication details required for integration, usernames and other identifying information relating to streamers and viewers, actions such as chats, follows, subscriptions, Bits, and Channel Points, streaming dates and times, stream history, viewing information, VOD-related information, blocklists, notes, voice, recorded voice data, speech recognition results, translation results, volume, PC resource usage, network status, analysis results, as well as visual effects and other settings.
  2. The information referred to in the preceding paragraph is processed locally on the User's device, and when saved, it is stored on the same device. The Operator does not collect, view, or store such information. However, processing when using Microsoft Edge's online speech recognition feature is set forth in Article 3, Paragraph 2.
  3. When using Steam Cloud, only visual effects and other app settings are saved and synchronised. The in-device data mentioned in the preceding paragraph is not saved on Steam Cloud. The handling of information on Steam Cloud is subject to Valve's privacy policy and other applicable terms and conditions.

Article 3 (Speech Recognition, Translation, and Speech Synthesis)

  1. When using the speech recognition function of Google Chrome, processing is performed locally on the User's device, and voice data as well as recognition results are not transmitted to external servers.
  2. When using Microsoft Edge's online speech recognition feature, voice data is transmitted to Microsoft's servers for recognition processing. The Operator does not collect or store such voice data or recognition results.
  3. For translation, the Translator and LanguageDetector features built into Google Chrome or Microsoft Edge are used. Translation processing is performed locally on the User's device, and information to be translated is not transmitted to external servers.
  4. For speech synthesis, VOICEVOX installed on the User's device is used. Text and voice data used for speech synthesis are not transmitted to external servers.

Article 4 (Information Collected by the Operator)

  1. When the User contacts the Operator with an enquiry, the Operator collects the User's name, email address, details of the enquiry, and information necessary to respond to the enquiry.
  2. The purchase, payment, and refund of the Software are processed by Valve, which operates Steam. Personal information collected by Valve in connection with these procedures is handled in accordance with Valve's privacy policy. The Operator does not collect credit card numbers, bank account details, or any other information regarding payment methods.
  3. The provision of information necessary for enquiries is voluntary; however, if not provided, the Operator may be unable to respond. The Operator does not conduct "automated decision-making" as defined in the GDPR using the collected personal information.

Article 5 (Purposes of Use)

  1. The Operator uses the information collected for the following purposes: (1) Responding to enquiries (2) Communicating with the User (3) Providing, maintaining and improving the Service (4) Addressing bugs or unauthorised use of the Service (5) Fulfilling legal obligations and responding to requests under applicable laws and regulations (6) Exercising or defending the rights of the Operator or third parties
  2. In the event of changing the purposes of use, the Operator shall publish or notify such changes via this Policy or other appropriate methods, only to the extent reasonably related to the original purposes.

Article 6 (Handling Based on GDPR, etc.)

  1. Where the GDPR or UK GDPR applies to Users in the EEA or the UK, the Operator processes personal data based on the following legal grounds: (1) Provision of the Service, responding to enquiries, and communicating with Users: Necessary for the performance of a contract or to take steps at the request of the User prior to entering into a contract (2) Improvement and security of the Service, addressing bugs or unauthorised use, and handling legal claims: Necessary for the legitimate interests pursued by the Operator (3) Responses based on laws and regulations: Necessary for compliance with a legal obligation to which the Operator is subject (4) Processing not falling within the preceding items: The User has given consent
  2. The legitimate interests referred to in Item 2 of the preceding paragraph include maintaining the quality and safety of the Service, preventing and addressing bugs or unauthorised use, and exercising or defending the rights of the Operator or third parties.
  3. Where personal data is processed based on consent, the User has the right to withdraw their consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Article 7 (Disclosure to Third Parties and Outsourcing)

  1. The Operator shall not disclose collected personal information to third parties, except where required by applicable laws and regulations or where the User has given consent.
  2. The Operator may entrust the handling of personal information to service providers, such as email service providers, to the extent necessary for responding to enquiries and operating the Service. In such cases, the Operator shall appropriately select and supervise the service providers.
  3. The privacy policies and terms and conditions of the respective providers shall apply to processing involving External Services such as Steam, Twitch, and Microsoft Edge.

Article 8 (Processing Outside Japan)

  1. When the User uses Steam, Twitch, or Microsoft Edge's online speech recognition, information may be processed outside Japan. Such processing is subject to the privacy policies and terms and conditions of the respective providers.
  2. If the Operator entrusts the handling of personal data to a business operator located outside Japan, the Operator shall take necessary measures, such as entering into Standard Contractual Clauses, in accordance with applicable laws and regulations.

Article 9 (Retention Period)

  1. Enquiry information collected by the Operator shall be retained for as long as necessary to respond to enquiries, comply with laws and regulations, and prepare for disputes, after which it shall be deleted or anonymised.
  2. The retention period and deletion of information saved on the User's device or Steam Cloud shall depend on the User's actions and the settings and terms of the respective services. The Operator cannot remotely view or delete such information.

Article 10 (Security Measures)

  1. The Operator shall implement access controls and other necessary and appropriate security measures to prevent unauthorised access to, leakage, loss or damage of collected personal information.
  2. The specific details of the security measures implemented by the Operator shall be disclosed without delay upon the request of the individual concerned; provided, however, that matters that may adversely affect the security of personal data held by the Operator are excluded.

Article 11 (Rights of the User)

  1. The User may exercise rights such as access, rectification, erasure, restriction of processing, data portability and objection, as well as other rights regarding their personal information in accordance with applicable laws and regulations.
  2. Requests to exercise these rights may be submitted to the contact details specified in Article 16. The Operator shall respond in accordance with laws and regulations after verifying the identity of the requester.
  3. Users in the EEA or the UK have the right to lodge a complaint with a supervisory authority with jurisdiction over their place of residence or place of work.

Article 12 (California Residents)

  1. Where the California Consumer Privacy Act (CCPA) applies, Users have the right to know, the right to delete, the right to correct inaccurate personal information, the right to opt out of the sale or sharing of personal information, the right to limit the use or disclosure of sensitive personal information, and the right not to be discriminated against for exercising these rights, as well as other rights provided under the CCPA.
  2. Personal information that the Operator may collect from Users includes names, email addresses, other information that may identify the User, and enquiry details. This information is used for the purposes set forth in Article 5.
  3. The Operator does not sell personal information and does not share it for cross-context behavioural advertising. Furthermore, the Operator does not engage in any processing that would require the right to limit the use or disclosure of sensitive personal information.
  4. Requests under the CCPA shall be accepted at the contact point specified in Article 16. The Operator shall verify the identity of the requester to the extent required by law, and for requests made by an authorised agent, the Operator may require documentation verifying the agent's authority to act on behalf of the User.

Article 13 (Cookies and External Services)

  1. The Operator may use the following External Service to analyse and improve the use of the official website: Vercel Web Analytics (Provider: Vercel Inc. / Information Transmitted: Information relating to browsing and use of the official website / Purpose of Use: Understanding and improving the usage status of the official website / Use of Cookies: None)
  2. The Operator does not conduct cross-site tracking or behavioural advertising. Therefore, the operation of the official website is not changed in response to browser Do Not Track (DNT) signals.
  3. The privacy policy of the relevant external site shall apply to the handling of information on external sites accessed from the official website.

Article 14 (Minors' Information)

  1. The Service is not directed at children under 13 years of age.
  2. If the Operator becomes aware that it has collected personal information from a child under 13 years of age, the Operator shall take necessary measures in accordance with applicable laws and regulations.

Article 15 (Amendments and Governing Language)

  1. The Operator may amend this Policy as necessary due to changes in laws and regulations, changes to the Service, or other circumstances.
  2. Material changes shall be notified in advance on the official website, within the Software, or on Steam, and consent shall be obtained from Users if required by law. Unless otherwise specified, the amended Policy shall take effect upon publication.
  3. If there are translated versions of this Policy, the Japanese-language version of this Policy on which the translation is based shall be the authoritative version. In the event of any discrepancy in content or interpretation, the Japanese-language version shall prevail. However, the precedence given to the Japanese version shall not restrict any rights of the User under applicable laws and regulations.

Article 16 (Operator and Contact Information)

  1. Operator and Data Controller: Masashi Akisue (trading as Fortyworks)
  2. Contact Email: forty@fortyworks.jp
  3. Address: Disclosed without delay upon request in relation to the handling of personal information.

Date of Enactment: 28 September 2026