Privacy Policy

SimplyNickish ("we", "us", "our") operates the website simplynickish.com and associated sub-domains. The data controller for your personal information is Nick Fraser, trading as SimplyNickish.

If you have any questions about this policy or how we handle your data, contact us at simplynickish@gmail.com.

We collect the following categories of personal data:

Account data: when you create an account, we collect your email address, display name, and OAuth profile data (name, avatar) from the provider you sign in with (Google, Discord, Twitch or X/Twitter). We never see or store your password for any of these providers.

Connected platform accounts: if you choose to connect TikTok, YouTube, Twitch, Kick, Discord, Instagram or X/Twitter to your account, we receive limited data from that platform. Exactly what we receive, why, and how to remove it is set out in section 10.

Subscription & billing data: if you subscribe, payment is processed by Stripe. We receive your subscription status and plan tier. We do not store your full card details.

Usage data: our hosting provider (Vercel) generates standard connection logs (IP address, browser type, timestamps) as part of running the site. We do not run any separate analytics or tracking system, and we record IP addresses ourselves only in narrow cases: when you redeem an early access code, or when you apply as a marketplace seller, to prevent abuse.

Communications: if you contact us or join our waitlist, we store your email and the content of your message.

Early access codes: if you redeem an access code, we record that redemption against your account to prevent re-use.

• To provide, operate, and improve the SimplyNickish platform and its apps
• To authenticate you and manage your account and subscription
• To run the features that use your connected platform accounts, such as showing which accounts are connected on your dashboard and replying to chat commands in your own channel
• To process payments and fulfil your subscription plan
• To send transactional emails (account confirmation, subscription receipts, password resets)
• To send you platform updates and launch announcements, if you opted in
• To detect and prevent fraud, abuse, and security incidents
• To comply with legal obligations

We do not sell your personal data to third parties. We do not use your data for advertising.

We process your personal data on the following legal bases under the UK GDPR and GDPR:

• Contract: to provide services you have requested (account creation, subscription)
• Legitimate interests: for security and fraud prevention
• Consent: for marketing emails, which you may withdraw at any time
• Legal obligation: where required by applicable law

We share your data only with trusted third-party service providers required to operate the platform:

• Supabase: authentication and database hosting (EU/US infrastructure)
• Stripe: payment processing (PCI-DSS compliant)
• Vercel: hosting and edge delivery
• Sentry (Functional Software, Inc.): error monitoring, hosted in Sentry's EU data region (Germany). When something breaks, it receives technical details of the error and basic browser and device information, and your IP address may be processed when a report is sent. We do not attach your account details to these reports and we do not record your screen or sessions
• Resend: transactional email delivery (account confirmation, receipts, password resets)
• Google/YouTube, TikTok, Twitch, Kick, Discord, Instagram, X/Twitter: platforms you sign in with or choose to connect, used only as described in section 10
• Google Fonts: loads the fonts used on this site. Your browser contacts Google's servers directly to fetch them, which shares your IP address with Google, for every visitor, regardless of whether you sign in
• YouTube (Google): used to embed videos on some pages. Playing a video shares your IP address with Google

Each provider processes data under their own privacy policies and data processing agreements. We do not share your data with advertisers, data brokers, or any other parties.

We use cookies and similar technologies to operate the site. See our Cookie Policy for full details.

Essential cookies (authentication sessions, CSRF protection) are required for the site to function. Preference cookies are optional. You can manage them via your browser settings.

We retain your account data for as long as your account is active.

When you delete your account, you can choose between two options. By default, your account is deactivated immediately and your personal data is held for 30 days before permanent erasure, so an accidental or unauthorised deletion request can be undone by simply logging back in during that window. You can also choose to skip this window and have your data permanently erased right away instead.

Some things happen immediately either way, regardless of the option you choose: connected third-party accounts are disconnected, marketing communications stop, and any content you had made public (such as adoption stories) is taken down.

Purchase, order, and payment records are kept longer where we are required to retain them for legal compliance (e.g. tax and accounting records, retained for 7 years), with the personal details on those records removed at the time of deletion.

Standard connection logs generated by our hosting provider are retained according to their own infrastructure policies, not a fixed period we set ourselves.

You have the following rights regarding your personal data:

• Access: request a copy of the data we hold about you
• Rectification: request correction of inaccurate data
• Erasure: request deletion of your data ("right to be forgotten")
• Portability: receive your data in a machine-readable format
• Restriction: request we limit how we process your data
• Objection: object to processing based on legitimate interests
• Withdraw consent: for marketing emails, unsubscribe at any time

To exercise any of these rights, email simplynickish@gmail.com. We will respond within 30 days.

If you are located in the European Union or the United Kingdom, you have additional rights under the GDPR and UK GDPR respectively. The above rights section applies in full. You also have the right to lodge a complaint with your local data protection authority. In the UK, this is the Information Commissioner's Office (ICO) at ico.org.uk.

Where data is transferred outside the UK/EEA, we rely on Standard Contractual Clauses or adequacy decisions to ensure it remains protected.

You can choose to connect accounts from other platforms to your SimplyNickish account from your dashboard. Connecting is always optional, you approve it on the platform's own sign-in screen, and you can disconnect at any time.

For every platform you connect, we store the account ID and name the platform gives us, plus the access tokens that let our products work within the permissions you approved. Tokens are encrypted before they are stored. We never see or store your password for any platform.

TikTok: we request basic profile access only (user.info.basic). We receive your TikTok user ID (open ID) and display name, and use them only to show that your TikTok account is connected and which account it is. We do not access your videos, followers, messages, or any other TikTok data, and we never post to TikTok.

YouTube (Google): we request read-only access to your YouTube account (youtube.readonly) and your basic Google profile (userinfo.profile). We use this to read your channel ID and channel name, so we know which channel is yours, and to read your channel's subscriber count and live status, including the live viewer count, so our products can show them to you. Read-only access means we cannot upload, edit, delete, or comment on anything on your channel.

Twitch: we receive your Twitch user ID, username, and email address. Depending on which products you use, we also read your channel's moderator, VIP, and subscriber lists, and read and post chat messages in your own channel so our chat commands can reply to your viewers.

Kick: we receive your Kick user ID and username, and read and post chat messages in your own channel so our chat commands can reply to your viewers.

Discord, Instagram, X/Twitter: we receive your user ID and username (plus your email address from Discord), and use them only to show which account is connected.

Chat messages in your channel are checked for our commands as they arrive. We do not keep a log of your chat, and we do not save who used a command. We only save counts of how often each command is used. During a chat vote, your overlay briefly remembers each voter's platform ID so the same person cannot vote twice, and this is never saved to our database.

Data from connected platforms is used only to provide the features you use. It is never sold, never used for advertising, never used to train AI models, and never shared with anyone except the hosting and database providers listed in section 5.

SimplyNickish's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Our YouTube features use YouTube API Services. By connecting a YouTube account you also agree to the YouTube Terms of Service, and Google handles your data under the Google Privacy Policy.

Removing access: when you disconnect a platform from your dashboard, we delete its stored tokens and account details straight away and, where the platform supports it, revoke our access on the platform too. Deleting your SimplyNickish account does the same for every connected platform. You can also remove our access directly on each platform at any time, for Google and YouTube at myaccount.google.com/permissions, and for TikTok from the list of connected apps in your TikTok account settings.

For any privacy-related enquiries, data subject requests, or complaints, contact:

Nick Fraser, SimplyNickish
simplynickish@gmail.com

We aim to respond to all requests within 30 days.