Privacy Policy

L1T Labs Inc., the corporation operating the Solana.Stream platform ("Company", "we", "our", "us") values your privacy and the importance of protecting your data. This Privacy Policy (the "Policy") describes our practices for the activities set out below. As per your rights, we inform you how we collect, store, access, and otherwise process information relating to individuals. In this Policy, personal data ("Personal Data") refers to any information that on its own, or in combination with other information, can identify an individual.

Scope

This policy applies to the Solana.Stream platform, including any products, services, and features offered to you as part of the platform (the "Service"). This Policy does not apply to third- party platforms that may be accessed through links that we may provide to you. These sites are owned and operated independently from us, and they have their own separate privacy and data collection practices. Any Personal Data that you provide to these websites will be governed by the third-party’s own privacy policy. We cannot accept liability for the actions or policies of these independent sites, and we are not responsible for the content or privacy practices of such sites.

We collect different types of Personal Data depending on how you interact with our Service— such as making a payment, creating content, or using features on our platform.

Types of Personal Data We Collect

•

Account: username, email address;

•

Payment: digital asset wallet;

•

Social Media: When you connect or log in via social media platforms;

•

Content: likes, follows, messages, tips, images, videos, and other media you share;

•

Device: Information about the device you use and how you interact with our website;

•

Other: Information related to incomplete interactions, such as failed transactions.

Where We Store Personal Data

Depending on the feature you use, Personal Data and related account data may be processed in: Firebase (Firestore, Authentication, and Storage) for profiles, chat, and media; PostgreSQL databases hosted on our application infrastructure for coin and market records; Privy for wallet authentication; Livepeer for streaming infrastructure; and analytics or error-monitoring providers (such as Google Analytics and Sentry) as described elsewhere in this Policy. Access and deletion requests are handled manually — see our privacy contact below and the internal privacy runbook used by support.

How We Collect Your Personal Data

1. Directly from You: You may provide data by filling out forms, using our Service, or contacting us via email, post, social media, or other channels. This includes when you:

•

Create an account;

•

Use our Service;

•

Create or upload content;

•

Subscribe to newsletters;

•

Complete surveys or forms;

•

Download our mobile app;

•

2. Through Technology: As you interact with our site, we automatically collect certain data using cookies, server logs, and similar technologies. This includes Device Data, Usage Data, and Other Data. See the Cookies section for more details.

3. From Third Parties: We may receive Personal Data from trusted third-parties:

•

Individuals purchasing gifts for you via our Service;

•

Analytics providers (such as Google);

•

Social media platforms, if you log in using them;

•

Communication services with your permission;

•

Fraud prevention or credit risk partners;

•

Law enforcement or other legal entities;

•

Technical and delivery service providers.

When you sign in with Google or connect YouTube, we receive your basic profile information (name, email address, profile picture). If you grant YouTube permissions, we may also access channel information, livestream status, live stream ingestion details (RTMP URL and stream key) for Livepeer → YouTube restream, and—when authorized—create, bind, and transition live broadcasts so a public watchable stream exists for embeds. Stream keys and OAuth tokens are stored server-side for that creator only, transmitted over HTTPS, protected with cloud encryption at rest, shown only in masked form in the creator UI, and deleted when YouTube is disconnected. We use this information only to provide Solana.Stream features and do not sell it or share it with unauthorized third parties. See our Google OAuth disclosure for the scopes we request and why.

Device and Usage Data

When you visit Solana.Stream, we automatically collect and store certain information using browser cookies or similar technologies. These may be set by us or by trusted third parties such as analytics providers. You can instruct your browser to refuse all cookies or notify you when a cookie is being sent. Most browsers include a help feature that explains how to manage cookies, including how to disable them. Please note that some features of our Service may not function properly if cookies are disabled. For the best experience, we recommend keeping cookies enabled.

We also process information when you use our Service, which may include:

•

Device IDs;

•

IP Address;

•

Time stamps;

•

Authentication records;

•

Location information;

•

Time zone;

•

Other operational data;

•

Data we collect from third parties.

We may receive your Personal Data from third parties, who collect and control it in accordance with their own privacy policies. As we do not govern how this data is handled, we recommend contacting the relevant third party directly if you have questions or wish to request corrections.

Our Service may also contain links to third-party websites, applications, or platforms. These external services are governed by their own independent privacy policies, which we strongly encourage you to review to better understand their personal data practices.

Why We Process Your Personal Data

We collect and use your Personal Data in one of the following ways:

•

To deliver and improve the Service;

•

To complete blockchain transactions;

•

To build a safe and secure environment;

•

To verify or authenticate your identity;

•

To investigate security incidents.

We process your Personal Data when necessary to fulfill our contractual obligations, such as providing you with the Service. Other processing activities, including those listed above, are carried out based on our legitimate interests. In some cases, we may rely on your consent— particularly when initiating specific services or when there are changes to the type of data we collect. If you do not provide consent where required, certain features or services may be unavailable to you. You may withdraw your consent at any time by deleting your account.

International Data Transfer and Storage

Your Personal Data may be transferred to, and maintained on, servers residing outside of your state, province, country or other governmental jurisdiction where the data laws may differ from those in your jurisdiction. We will take appropriate steps to ensure that your Personal Data is treated securely and in accordance with this Policy as well as applicable data protection law.

Sharing and Disclosure

We will share your Personal Data with third parties only in the ways clearly set out in this Policy or set out at the point when the Personal Data is collected.

Legal Requirement

We may use or disclose your Personal Data in the following ways:

•

To comply with a legal obligation;

•

In response to a government request;

•

In connection with court proceedings;

•

To prevent loss of life or serious injury;

•

To protect our rights or property.

Service Providers and Other Third Parties

We may use a third-party service provider to deliver and help us improve the Service. We may share your Personal Data with database service providers, backup and disaster recovery service providers, email service providers and others but only to maintain and improve the Service.

What are cookies?

A cookie is a small file with information that your browser stores on your device. Information in this file is typically shared with the site owner, as well as potential partners and third parties. This information may be used to operate the site and/or improve your experience.

How we use cookies

To provide you with the best possible experience, we use the following types of cookies:

•

Strictly Necessary: These cookies are essential for our website to function properly. Without them, our Service wouldn’t work as intended.

•

Preferences: These cookies remember your preferences and settings so you don’t have to reconfigure them each time you use our Service.

•

Personalization: Some cookies help personalize your experience, such as tailoring content recommendations based on your location or past activity.

•

Analytics: Some cookies help us understand how visitors use the site. This data helps us understand usage patterns and improve our Service.

We will only retain your Personal Data for as long as necessary for the purpose for which that data was collected and to the extent required by applicable law. When we no longer need Personal Data, we will remove it from our systems and/or take steps to anonymize it, except as described in this section.

Google and YouTube user data obtained through OAuth (including refresh tokens and live stream ingestion credentials) is stored only as long as necessary to provide the Service and is deleted when you disconnect YouTube/Google or delete your Solana.Stream account.

What account deletion removes

Deleting your account removes your profile, settings, connected platforms, stream keys, and chat on your channel. Chat you sent in other channels stays and is labeled Deleted user. Your handle is held for 30 days so someone else cannot take it immediately; you can reclaim it.

What account deletion keeps

Tips, subscriptions, and on-chain transactions stay. Leaderboards keep their totals. People you referred or gifted will still see your username as text, not as a profile. Ban and mute records where you are the subject stay so deletion cannot evade enforcement. If you signed in with Google, signing in with that Google account again uses the same wallet: you create a new profile, but tip and ranking history stay on that wallet. If you launched a coin — streamer or meme — you cannot delete this account; holders still need you on that coin.

A launched coin — streamer or meme — blocks account deletion. Support cannot override that lock. Contact support@solana.stream for other privacy requests.

If we are involved in a merger, acquisition or asset sale, your Personal Data may be transferred. We will provide notice before your Personal Data is transferred and becomes subject to a different Privacy Policy. Under certain circumstances, we may be obligated to disclose your personal information by law or in response to valid requests by public authorities.

General Safeguards

We implement organizational and technical safeguards to protect your Personal Data from loss, unauthorized access, misuse, alteration, or disclosure.

Secure Communication

When your Personal Data is involved in our Service, communication between your browser and our website is secured through encrypted connections.

Third-Party Responsibilities

Any third party we engage to process Personal Data on our behalf must maintain robust security measures and comply with applicable data protection laws.

Breach Notification

In the event of a Personal Data breach, we will promptly notify you and any applicable regulator, where feasible, when we are legally required to do so.

We do not knowingly collect Personal Data from children under the age of 18. If we become aware that we have collected Personal Data from a child under 18 without verified parental consent, we will take steps to delete that information as soon as possible.

Depending on your geographical location and citizenship, your rights may be subject to local data privacy regulations. These rights may include:

Right to Access

You have the right to know whether we are processing your Personal Data and to request a copy of the data we hold about you.

Right to Rectification

You have the right to request the correction of any incomplete or inaccurate Personal Data that we process about you.

Right to be Forgotten

You have the right to request the deletion of your Personal Data that we process, unless we need to retain it to comply with a legal obligation, to establish, exercise, or defend legal claims, or as described in Retention & Deletion: tips, subscriptions, on-chain records, and enforcement records where you are the subject stay. If you launched a coin, we cannot delete the account while holders still need that creator on the coin.

Right to Restrict Processing

You have the right to restrict our processing of your Personal Data under certain circumstances. In this case, we will not use your Personal Data for any purpose other than storing it.

Right to Portability

You have the right to obtain the Personal Data we hold about you in a structured, commonly used, machine-readable format, and to transmit that data to another data controller. This applies where: (a) the Personal Data was provided by you, and (b) we are processing it based on your consent or for the performance of a contract with you or a third party who subscribed to our Service.

Right to Opt Out

You have the right to opt out of the processing of your Personal Data for purposes such as (1) targeted advertising, (2) the sale of Personal Data, or (3) profiling that results in decisions producing legal or similarly significant effects about you. Under the California Privacy Rights Act (CPRA), you also have the right to opt out of: (a) the sharing of your Personal Data with third parties, and (b) the use or disclosure of your Sensitive Personal Data for purposes beyond those necessary to deliver the Service you reasonably expect.

Right to Object

Where the legal basis for our processing of your Personal Data is our legitimate interest, you have the right to object to such processing on grounds relating to your particular situation. We will comply with your request unless we have compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or where the processing is necessary for the establishment, exercise, or defense of legal claims.

Right to Non-Discrimination and Non-Retaliation

You have the right not to be denied service or treated differently for exercising your rights.

File an Appeal

You have the right to appeal our response to your request to exercise your rights.

File a Complaint

You have the right to file a complaint to a competent data protection authority.

Withdrawing Consent

You may withdraw your consent to our processing of your Personal Data at any time, free of charge. To do so, please contact us.

How to Exercise Your Rights

You can exercise your rights regarding your Personal Data by contacting us. For security, we may require identity verification before fulfilling your request.

You can exercise your rights or ask questions about this Policy by contacting us at support@solana.stream

We may revise and update this Policy from time to time in our sole discretion. All changes are effective immediately when we post them and apply to all access to and use of the Service thereafter. Continuing to use the Service following the posting of revised Policy means that you accept and agree to the changes. You are expected to check this page each time you access the Service so you are aware of any changes, as they are binding on you.

The data controller responsible for your Personal Data under this Policy is:

L1T Labs Inc.
Email: support@solana.stream

For any questions about this Policy, to exercise your rights, or to submit a privacy-related request, please contact us using the email address above.