Privacy policy

Effective October 28, 2026.

Who we are

XNN LLC, a Delaware limited liability company doing business as streamsonline, publishes the streamsonline browser extension, runs this website, streamsonline.live, and runs the streamsonline hub at hub.streamsonline.live. Send questions and requests to [email protected].

What stays in your browser

The extension keeps, in your browser's extension storage:

the plugins and hubs you install, each with its declaration, whether it is enabled and the page it was offered on;
each plugin's favorite, removed and hidden rooms, and the favorites waiting to be sent to their platform;
each record of an action that spends value which its hub has not yet taken;
your layout, workspaces, panels, tag choices, ranges, rules, sort order, theme and other settings;
the last 500 rooms you played, with the cell and the time;
the shows you hold open.

In your browser's IndexedDB it keeps the time each room was first played, previewed and shown.

None of it is sent to the streamsonline company, except that a waiting record of an action that spends value is sent to the hub it is kept for, which may be the streamsonline hub. Removing a plugin or hub removes what is kept for it, and removing the extension removes all of it.

What the extension sends and to whom

Each platform you enable, and each server you add

Each platform whose plugin you enable, and each server you add to a plugin that plays servers you name by address, such as an Owncast server, receives the requests that plugin declares: its listings, room status, stream addresses, and your account name and referral on that platform. Your own browser makes them, with your cookies for that platform or server, carrying the rooms, search terms and pages you choose. It also receives the actions you press, with the values you enter and the cookie value the platform's form requires, sent only to that platform. Video, audio and preview images load from the platform's or server's own addresses.

The address echo at api.ipify.org

api.ipify.org receives a request carrying no cookie and no referrer only when an enabled plugin's request needs your public IP address, and that address is put into that plugin's request to its platform.

The server of a plugin's publisher

When you press the extension's button on a plugin's page, the server of its publisher receives a request for the plugin's declaration, and for the declaration of the hub offered with it, carrying no cookie. For an installed plugin whose declaration names an update feed, the extension holds a connection to that server, sending only "keepalive" every 20 seconds, and a request for the current declaration when the extension's viewer opens.

Each hub you install

Each hub you install receives, with that hub's own sign-in cookie, the calls the hub declares, each listed here with the data it carries:

account: nothing
targets: the platform's publisher key and the names of the rooms shown, hidden rooms left out
groups: nothing
group: the group
group.create: the group's name
group.add: the group, the publisher key and the room
group.remove: the group and the member
group.move: the group, the member and its position
access: the publisher key and your local date
access.use: the publisher key and your local date
access.token: the publisher key
access.consent: the publisher key
access.associate: the publisher key, your account name on that platform, whether the account was created through the walkthrough or claimed, the referral state found, and the date
spend: for each action you press that spends value, your account name on that platform, the publisher key, the room, the action's label, the values you entered, the time you pressed it, the identity given the record, and the platform's reply with its status and answer
directory: no data the extension supplies

It also receives requests carrying no cookie for the images its listings name and for the current declaration of each installed plugin it publishes. Each hub's operator states its own policy.

No one else

The extension sends no analytics, telemetry, crash report or advertising identifier, and contacts no server of the streamsonline company other than a hub or a plugin publisher's server you install.

The streamsonline hub

The hub at hub.streamsonline.live keeps, for each account:

your email address
your name
your password, stored only as a bcrypt hash
your account's role
the time your account was created

For each of your groups of rooms:

its owner
its name
the time it was created
each room it holds
which room that is
the room's position
who added the room
when the room was added

For each action you press that spends value, the record the extension sends it:

the hub account it is kept under
your account name on that platform
the platform's publisher key
the room
the action's label
the values you entered
the time you pressed it
the identity given the record
the platform's reply
its status
its answer
the time the hub kept the record

Linked to no account, each room it is asked about:

the room's name
the platform it is on
that platform's publisher key
that platform's name
the name it is shown under
that name
the time that name was first kept
the time the room was first asked about

The hub keeps no tracking token, referral confirmation, platform account association, day of use or subscription.

The hub sets one cookie, hub_session, a signed token naming your account, marked HttpOnly, Secure and SameSite Lax. The hub's web server logs each request's time, IP address, requested address, status, size, duration and request headers other than cookies and authorization, in files rotated at 50 MiB with the 10 newest kept.

This website

streamsonline.live sets no cookie, runs no script, loads nothing from another site and keeps no log of visits.

Where data is kept

Cloudflare, Inc. carries every request to streamsonline.live and to the streamsonline hub, and sees each request's IP address and headers. The hub's server and its database run at Hetzner Online GmbH in Germany, where a nightly copy of the hub's database is kept for 14 days.

Your choices and rights

Remove a plugin, a hub or the extension to remove what your browser keeps for it. If you hold an account on the streamsonline hub, write to [email protected] to receive, correct or delete what the hub keeps for your account; it is done within 30 days. If you live in the EU or the UK, you may also complain to your data protection authority.

Children

Neither the extension nor the streamsonline hub is directed to children under 13.

Changes

A change to this policy is published on this page with its new effective date.