Privacy Policy

Last updated: 15 September 2026

The short version

We use no analytics, no advertising and no third-party trackers. There is one cookie and it only keeps you logged in.
We never see your Kick password or your card number.
Chat messages are kept for 30 days, then deleted automatically.
Your nick, level and stats are public on your profile page and in the rankings.
Email markclothes.cs@gmail.com and we will delete everything we hold about you.

1. Who is responsible for your data

The data controller is Grindare Studio Ltd, company number 16941033, registered office in Leeds, LS25 1NB, United Kingdom.

For anything about your data, write to markclothes.cs@gmail.com.

2. What we collect and why

Data	Where it comes from	Why
Kick user id, username, avatar image URL	Kick, when you log in	To identify your critter and show it on stream
Kick access and refresh tokens	Kick, when you log in	So we can read chat events and post chat replies for your channel
Chat messages sent in channels running Chat Arena, plus follow / subscription / Kicks events	Kick webhooks	To show speech bubbles, award XP, run boss fights, and stop the same event being counted twice
Gameplay data: XP, level, evolution, gold, day streak, cosmetics owned and equipped, achievements, quests, giveaway entries and wins, minutes watched per channel	Your use of the service	To run the game and the rankings
Subscription data: Stripe customer id, subscription id, status, renewal date	Stripe	To know whether your Chat Arena+ cosmetics should be active
Technical data: IP address, browser user agent, timestamps in server logs	Your browser	Security, abuse prevention and diagnosing faults

We never receive your card details. Payment card data goes straight to Stripe and never touches our servers.

3. What is public

Chat Arena is designed to be shown on a live stream, so some of your data is public by nature. Anyone can see, without logging in:

On your profile page at chatarena.win/u/<your nick>: your Kick nick, level, total XP, evolution stage, day streak, your critter's look, badges, giveaways you have won (prize, channel and date), and the three channels you watch most, with hours watched.
In the rankings at chatarena.win/top.
On the streamer's overlay while you are on the stands: your nick, level and critter - visible to everyone watching the stream and in any recording or clip of it.

If you would rather not be listed publicly, do not type !join, or ask us to delete your account.

4. Legal bases

Performance of a contract - running your account, your critter and your Chat Arena+ subscription.
Legitimate interests - keeping the service secure, preventing cheating and abuse, and fixing faults. We balance this against your rights and keep the data minimal.
Legal obligation - keeping invoices and tax records for payments.

5. Cookies

We use exactly one cookie, named sess. It stores a signed reference to your account so you stay logged in. It is HttpOnly, Secure, SameSite=Lax and expires after 30 days.

It is strictly necessary to provide the service you asked for, so it does not require consent. We use no analytics, advertising, profiling or third-party tracking cookies of any kind, which is why you will not see a cookie banner here.

Your language choice is stored in your browser's local storage and never leaves your device.

6. Who we share data with

We do not sell your data and we do not share it for advertising. We use a small number of processors:

Stripe - payments and subscription management, through Stripe Managed Payments. Stripe's payment entity Onelink is the merchant of record for your purchase and issues your receipt or tax invoice, so it holds your billing details as a separate controller; see stripe.com/privacy.
Kick - the source of your identity and of the chat events. Your activity in a streamer's chat is already visible to Kick and to that chat.
Our hosting provider - a virtual server in the European Union that runs the application and database.

Stripe may transfer data outside the UK/EEA. Where that happens it is covered by the safeguards Stripe uses, such as Standard Contractual Clauses.

We may also disclose data where the law requires it, or to establish or defend legal claims.

7. How long we keep it

Chat messages and other raw Kick events: 30 days, then deleted automatically by a scheduled job.
Account and gameplay data: while your account exists. If you ask us to delete it, we do so within 30 days.
Kick tokens: until you disconnect or your account is deleted.
Invoices and payment records: kept as long as tax and accounting law requires, even after account deletion. This is a legal obligation we cannot waive.
Server logs: rotated by the operating system, typically within a few weeks.

8. Your rights

Under UK and EU data protection law you can ask us to:

Access - get a copy of everything we hold about you.
Rectify - correct anything wrong.
Erase - delete your account and data.
Restrict or object - to processing based on legitimate interests.
Portability - receive your data in a machine-readable format.

Email markclothes.cs@gmail.com from an address we can tie to your account, or message us from the Kick account in question. We answer within 30 days, free of charge.

Deleting your account removes your profile, gameplay data, cosmetics and stored chat events. Bear in mind it also removes your XP, levels and anything you bought, and it cannot be undone. If you have an active Chat Arena+ subscription, cancel it first or it will keep billing you.

If you think we have handled your data badly, please tell us first. You also have the right to complain to a supervisory authority - the ICO in the UK (ico.org.uk), the UODO in Poland (uodo.gov.pl), or the authority where you live.

9. Children

Chat Arena is not intended for children under 13. We do not knowingly collect their data. If you believe a child under 13 has an account, contact us and we will delete it.

10. Security

The site is served over HTTPS. Login sessions are signed so they cannot be forged, and are marked HttpOnly and Secure so scripts and unencrypted connections cannot read them. Access to the server and database is restricted to the operator.

No service can promise perfect security. If a breach ever affects your data, we will notify you and the relevant authority as the law requires.

11. Changes

If we change this policy we will update the date at the top and, for significant changes, post a notice on the site.

12. Language

This policy is published in several languages. The English version prevails if any translation differs from it.

13. The Twitch extension

Chat Arena has an optional Twitch extension that shows a card on top of a stream, where viewers can join the stands, vote in polls and change their critter's look.

Twitch gives the extension an anonymous viewer id and the id of the channel. We use them only to show the card and to slow down repeated clicks, and we do not save the anonymous id.
Your Twitch user id and display name reach us only if you agree to share your identity when Twitch asks, which happens the first time you click to join, vote or open your critter. We use them exactly like a !join typed in chat: to put your critter on the stands, count your vote and save the look you pick.
The extension sets no cookies and loads no scripts from anyone but Twitch and chatarena.win.
You can take back the shared identity at any time in the extension's menu on Twitch. What you already did stays in your Chat Arena account, which you can have deleted as described in section 8.