Privacy Policy

SLOT1 (“we”, “us”) is responsible for the personal information described in this policy (its “controller”).

This policy covers the SLOT1 website, its Twitch chat bot and its streaming features (together, “SLOT1”). To reach us about privacy, use the contact form.

• We don’t sell your personal information or share it for advertising. SLOT1 shows no ads and runs no ad trackers.
• Visitor statistics use no cookies. Visits are counted with an ID that changes every day and can’t be traced back to you.
• SLOT1’s only cookie keeps you signed in and protects forms. It is not used for tracking.
• Creators decide what is analyzed, recorded and public, how long it is kept, and can delete it at any time in Studio.
• SLOT1 receives a creator’s whole stream, including any webcam, overlays and microphone. It goes to an outside AI service only when the operator has switched one on; section 6 lists what is switched on right now.

Everyone who visits

How the visitor ID works. It is a SHA-256 hash of a random value, your IP address, your browser’s User-Agent and the site’s host name, shortened. The random value is new every day (UTC), is kept only in memory on our server and is deleted after 48 hours, so the same visitor gets a different ID every day and the ID can’t be reversed to an IP address. Your IP address and full User-Agent are never stored with your visits.

Not counted at all: browsers that send Do Not Track or Global Privacy Control, known bots, and the operator’s admin pages.

If you sign in with Twitch

If you stream or upload as a creator

SLOT1 receives your whole stream, not just the game. Whatever your streaming software (for example OBS) sends is what SLOT1 gets: the gameplay plus your webcam or facecam, overlays and alerts if they are in your scene, and the sound, including your microphone. That full picture and sound is what is analyzed, shown to viewers of public sessions, recorded, forwarded to other platforms you add and, when the operator has switched an AI service on, sampled and sent to it (section 6). You decide what is in your stream. People who can be seen or heard in it are part of your content, and you need their permission where the law requires it.

In Twitch chat

The bot’s replies are ordinary public Twitch chat messages.

Questions and messages

If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on these legal bases:

• Contract: providing the features you sign up for and switch on.
• Legitimate interests: security, preventing abuse, cookieless visitor statistics, improving SLOT1 and answering messages. You can object to these (see section 10).
• Consent: recording your stream and using it for training. You can withdraw consent at any time in Studio; that doesn’t affect what happened before.
• Legal obligation: when the law requires us to keep or hand over information.

SLOT1 sets one cookie, and it is strictly necessary:

We don’t use analytics, advertising or social media cookies, and SLOT1’s pages don’t use local storage or similar technologies to track you. Twitch’s embedded player and chat may set Twitch’s own cookies (see section 3).

We use these service providers, only for the purposes described here:

• Hetzner Online GmbH hosts SLOT1’s server in its data center in Helsinki, Finland (EU), along with the server’s backups when they are switched on.
• Twitch (Twitch Interactive, Inc.) for sign-in, chat, clips and stream status, when you use those features.
• AI services, only when the operator switches them on. None is switched on right now: frames are analyzed only on SLOT1’s own server (on-screen text reading and video measurements). If the operator switches one on, such as Anthropic or OpenAI for AI vision or a speech-to-text service, it will be listed here and receive only the sampled frames, audio or evidence needed for that. A sampled frame is the whole stream picture, so it would include a creator’s webcam, overlays and alerts when those are in the stream, and audio would include the creator’s microphone.
• Let’s Encrypt issues the site’s HTTPS certificates. It receives only the site’s domain name, no personal information.
• A GPU provider for training, only for frames from creators who consented to training. We will name it here before any such data is sent.

When you forward your stream to Twitch, YouTube, Kick or another server, SLOT1 sends your whole stream there, exactly as it received it, because you asked it to; those platforms handle it under their own policies. Sharing a clip to TikTok, YouTube or Instagram happens in your own device’s share sheet: SLOT1 doesn’t send anything to those apps.

We may disclose information when the law requires it, to protect people’s safety or SLOT1’s security, or as part of a merger or sale of SLOT1, in which case this policy continues to apply. We don’t sell or rent personal information.

SLOT1’s data is stored in the EU (Finland). Twitch and AI services may process information in the United States or other countries. When personal information leaves the EEA, the UK or Switzerland, we rely on the safeguards the provider offers, such as the European Commission’s Standard Contractual Clauses or an adequacy decision (for example the EU–US Data Privacy Framework, where the provider takes part in it).

The periods for each kind of information are in section 3. In short:

• Stream analysis and evidence: your setting, 30 days by default. Recordings: your setting, 14 days by default.
• Library items, settings and forwarding destinations: until you delete them or your account.
• Page views: 90 days, then only daily totals. Contact messages: up to 24 months.
• Server logs: overwritten as they rotate, usually within days.
• Backups: when server backups are switched on, Hetzner keeps up to seven daily backups, so deleted information can remain in a backup for about a week before it is overwritten.

• Make your channel, its analysis and each session or clip public or private.
• Give or withdraw consent to recording, set how long recordings and analysis are kept, and switch training consent on or off.
• Delete a single session, or delete every session’s media, frames, transcripts and analysis, and your library, at once.
• Disconnect Twitch, which revokes SLOT1’s Twitch tokens, removes you from On Air, turns the bot off and revokes your stream keys.
• To delete your SLOT1 account entirely, including your profile, settings and the records in section 3, use the contact form.

Everywhere. You can ask us what personal information we hold about you, to correct it, to delete it, or to stop using it. We answer these requests wherever you live.

EEA, UK and Switzerland. You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests, and to withdraw consent at any time. You can also complain to a data protection supervisory authority, in particular where you live or work (in the UK, the Information Commissioner’s Office).

United States. Depending on your state (for example California under the CCPA as amended by the CPRA), you may have the right to know what personal information we collect and how we use it, to get a copy, to correct it and to delete it. We don’t sell personal information or share it for cross-context behavioral advertising, and we don’t use sensitive personal information to infer characteristics about you. We won’t treat you differently for using your rights. In the last 12 months, SLOT1 collected identifiers (such as Twitch user IDs, login names and IP addresses), internet activity (pages visited, counted without cookies) and, from creators, the audio and video they chose to send. An authorized agent may make a request for you.

How to ask. Use the contact form. We may ask you to confirm the request by signing in with the Twitch account it concerns. We reply within one month, or within the time your local law sets (for example 45 days in California), and tell you if we need longer.

SLOT1 is not for children under 13, and Twitch’s own age rules apply to everyone who signs in with Twitch. Where local law sets a higher age for consenting to online services (up to 16 in some European countries), people under that age need a parent’s or guardian’s consent. If we learn that a child under 13 has given us personal information, we delete it.

SLOT1 is served only over HTTPS. Twitch tokens and stream keys are encrypted at rest, and session IDs and SLOT1 stream keys are stored only as hashes. Access to the servers is limited to the operator. No system is perfectly secure; if a breach affects your information, we will tell you and the authorities as the law requires.

When this policy changes, the date at the top changes too. For significant changes we will show a notice on the site before they take effect. The current version is always at /privacy.

Questions or requests about privacy: use the contact form.