Legal

Privacy policy

Last updated: July 4, 2026.

This page explains what personal data PX Studio processes, why, and what your rights are. The short version: we run no analytics, no ads and no social media embeds. We store what your account needs to work, and nothing else.

Controller

Danny Harms & Steffen Meurer GbR
Wittener Bruch 42
58453 Witten, Germany
Email: mail@pxstudio.cloud

Hosting and technical logs

This site is hosted on a server operated by IONOS SE, Germany. When you visit, the server processes the technical data your browser transmits (IP address, date and time, requested URL, user agent) in server logs. We use these logs solely to operate the site, to diagnose faults and to defend against abuse. Legal basis: Art. 6 (1) (f) GDPR. Connections are encrypted with TLS; certificates are issued by Let's Encrypt (ISRG).

Accounts and login

You can create an account in two ways:

• Email magic link. You enter your email address and we send you a one-time login link. We store your email address and a short-lived login token.
• Twitch login. You authorize us through Twitch. We store your Twitch user ID, login name and display name. If you additionally connect your channel for widget data, we also store the login credentials ("OAuth tokens") Twitch issues for that connection and periodically fetch channel data (such as follower or subscriber counts) from Twitch on your behalf.
• Kick login. You authorize us through Kick. We store your Kick user ID and display name. If you additionally connect your channel for widget data, we also store the login credentials ("OAuth tokens") Kick issues for that connection, read your channel's title and category, and receive follow, subscription and gift notifications for your channel automatically (Kick's "webhook" system) on your behalf.

Legal basis: Art. 6 (1) (b) GDPR (providing the service you signed up for).

Cookies and local storage

We only set cookies the site needs to function, none of them for tracking:

• usess keeps you logged in to your account.
• oauth_state exists for a few minutes during a Twitch login to protect the login flow against forgery, then expires.
• kick_oauth exists for up to 10 minutes during a Kick login, for the same login-forgery protection, then expires.

There are no third-party cookies, no analytics cookies and no advertising cookies.

What we store for your account

• Email address and/or Twitch/Kick identity (ID, login name, display name)
• Your widget and overlay configurations
• Redeemed unlock codes and the resulting entitlements
• Mod access grants you create or accept, and the related audit log of mod actions
• If you connect Ko-fi: the webhook data Ko-fi sends for your page (such as supporter names and amounts), used only to drive your widgets

Purchases on Etsy

Unlock codes are sold through Etsy. The purchase itself takes place on Etsy under Etsy's terms and privacy policy; we only learn the code you redeem here, never your payment data.

Data deletion

You can have your account deleted at any time by emailing mail@pxstudio.cloud from the address linked to it. Deleting the account removes your stored user data: identity, configurations, entitlements, grants and connection tokens. Server logs rotate independently on a short schedule.

Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability and objection, and the right to lodge a complaint with a supervisory authority.