1. Introduction

katanatw.com (“we”, “our”, or “the platform”) is an interactive platform for streamer viewers. katanatw.com is part of the StreamerPlatform multi-tenant platform. We take the protection of your personal data seriously. This Privacy Policy explains what data we collect, how we use, store, and protect it.

2. Data We Collect

2.1 Telegram Authentication

When logging in via Telegram (including Telegram Mini App), we receive and store:

• Telegram ID (numeric identifier)
• First and last name from your Telegram profile
• Username, if provided
• Profile avatar URL

2.2 Kick, Twitch & YouTube Authentication

When logging in or linking your Kick, Twitch, or YouTube account, we receive and store:

• Platform user ID (Kick/Twitch/YouTube)
• Username and display name
• Profile avatar URL
• Email address associated with your account

2.3 Data You Provide

During your use of the platform, you may provide:

• Partner platform logins (for task verification)
• Email address (when paying via Cryptadium)

2.4 Automatically Collected Data

When visiting the platform, we automatically collect:

• IP address
• Browser type, version, and language
• Device information
• Platform activity data (participation in raffles, predictions, games, tasks)
• Login history (time, IP address, authentication method)
• Chat activity (Kick/Twitch/YouTube) (for watch reward coin accrual)

2.5 Payment Data

When paying via Cryptadium, we receive:

• Payment identifier
• Transaction amount and currency
• Email provided during payment
• Payment status

We do not have access to your crypto wallet data. All payment transactions are processed by Cryptadium.

3. How We Use Data

We use the collected data to:

• Provide access to the platform and its features
• Track and award coins (for stream viewing, tasks, raffles, mini-games)
• Process participation in activities, raffles, predictions, and mini-games
• Verify Telegram channel subscriptions and task completion
• Process payments and manage subscriptions
• Send notifications about raffle and activity results via Telegram bot
• Prevent fraud and abuse (multi-accounts, bots)
• Determine interface language from browser language
• Improve the platform and user experience

4. Data Storage

Your data is stored in a secure PostgreSQL database. Sensitive data (OAuth tokens, bot secrets) is encrypted using AES-256-GCM before being written to the database. Authentication sessions are stored as tokens in browser cookies (valid for 30 days). Temporary Telegram authentication sessions are automatically deleted 5 minutes after creation.

5. Third-Party Data Sharing

We do not sell your personal data. We may share data with:

• Kick.com — for authentication and subscription status verification
• Twitch.tv — for authentication and subscription status verification
• YouTube (Google) — for authentication and channel subscription verification
• Telegram — for authentication, channel subscription verification, and notifications
• Cloudflare — for bot protection (Turnstile CAPTCHA), DNS, and SSL
• Cryptadium — for processing cryptocurrency payments (email and amount)
• Namecheap — for domain registration (only platform owner contact details)
• Law enforcement — as required by law

6. Data Security

We employ technical and organizational measures to protect your data: encryption of tokens and secrets (AES-256-GCM), CSRF protection, authentication verification via HMAC (Telegram) and OAuth 2.0 (Kick, Twitch, YouTube), role-based access control for admin panels, and login attempt rate limiting. However, no method of internet data transmission is completely secure.

7. Data Retention

We retain your data while your account is active or as needed to provide services. Activity logs are stored for up to 90 days. You may request account and data deletion at any time by contacting us.

8. Your Rights

You have the right to:

• Access information about your stored data
• Correct inaccurate data
• Request deletion of your account and data
• Withdraw consent for data processing
• Unlink your Kick, Twitch, or Telegram account

9. Age Restrictions

The platform is intended for persons aged 18 and over. We do not knowingly collect data from minors. If we become aware of a minor's registration, the account will be deleted.

10. Policy Changes

We may update this Privacy Policy. We will notify of changes by posting the updated version on this page with a new date.

11. Contact

For privacy questions and data deletion requests, contact us via Telegram bot @katanatw_bot.