Privacy Policy

Overview

ARStreamer ("we," "us," "our") operates arstreamer.com, a live news media aggregation platform. This Privacy Policy applies to all users of our website and services. By using the Service, you agree to the collection and use of information as described in this Policy.

ARStreamer is committed to protecting your personal information and your right to privacy. We collect only the minimum data necessary to operate the Service effectively, and we do not sell, rent, or trade your personal information to third parties for marketing purposes.

Information We Collect

We collect information in the following ways:

We do not collect: your social media passwords, payment information, government-issued ID, or sensitive personal categories of data.

How We Use Your Information

We use the information we collect for the following purposes:

• Service delivery: To display personalised social media feeds and news content
• Authentication: To manage your OAuth connections to social platforms securely
• Analytics: To understand how the Service is used and improve its performance
• Security: To detect and prevent fraud, abuse, and unauthorised access
• Legal compliance: To comply with applicable laws and respond to lawful requests
• Communications: To respond to your enquiries and support requests

Sharing of Information

We do not sell, rent, or share your personal data with third parties for their marketing purposes. We may share data in the following limited circumstances:

• Service providers: We share data with trusted service providers who assist in operating the Service (hosting, analytics), subject to strict confidentiality agreements
• API partners: Search queries may be shared with NewsAPI to fetch relevant news results
• Social platforms: OAuth tokens are used to fetch data from Meta and TikTok APIs on your behalf
• Legal requirements: We may disclose data when required by law, court order, or government authority
• Business transfers: In the event of a merger or acquisition, your data may be transferred as part of business assets, subject to the same privacy commitments

Social Media Data

When you connect a social media account (Facebook, Instagram, TikTok), we handle your data as follows:

• Access tokens are stored in a server-side encrypted configuration file with permissions restricted to the server owner only (chmod 0600)
• Social profile data (name, avatar, username) is stored alongside the token to display your connected account
• Feed content (posts, images) is fetched in real time from the respective platform API and is not permanently stored on our servers
• We never store your social media password — OAuth 2.0 is used exclusively
• You may disconnect any platform at any time, which immediately deletes the stored access token and associated data from our server

Our use of data obtained from Meta APIs is additionally governed by Meta's Data Policy. TikTok data use is governed by TikTok's Privacy Policy.

Cookies & Tracking

ARStreamer uses the following types of cookies:

You can control cookies through your browser settings. Disabling session cookies will prevent social media login functionality from working correctly.

We do not use advertising cookies, tracking pixels, or cross-site tracking technologies.

Data Retention

We retain your data only as long as necessary for the purposes described in this Policy:

• OAuth access tokens: Retained until you disconnect the platform, the token expires, or you request deletion
• Usage/analytics data: Retained in anonymised form for up to 12 months
• Search query logs: Not retained after the API request is fulfilled
• Server logs: Retained for up to 30 days for security and debugging purposes, then automatically deleted

Security

We implement industry-standard technical and organisational measures to protect your data:

• HTTPS encryption for all data in transit (TLS 1.2+)
• Server-side storage of OAuth tokens in files with restricted system permissions (chmod 0600)
• No client-side storage of sensitive credentials
• OAuth 2.0 with PKCE for TikTok authentication, providing enhanced security
• Regular security reviews of our server configuration

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

To exercise any of these rights, contact us at privacy@arstreamer.com. We will respond within 30 days. We may need to verify your identity before processing your request.

If you believe we have not handled your data appropriately, you have the right to lodge a complaint with your local data protection authority.

Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13 without parental consent, we will take immediate steps to delete that information.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@arstreamer.com.

International Transfers

ARStreamer operates servers that may process data in various jurisdictions. By using the Service, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.

When transferring data internationally, we ensure appropriate safeguards are in place, including standard contractual clauses where required by applicable law. Third-party services we use (NewsAPI, Meta APIs, TikTok APIs) may also process data in their respective operating jurisdictions.

Third-Party Services

ARStreamer integrates with the following third-party services, each with their own privacy practices:

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page.

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after any changes constitutes your acceptance of the updated Policy.

Contact & Data Protection

For any privacy-related questions, requests, or concerns, please contact us:

• Privacy enquiries: privacy@arstreamer.com
• Legal matters: legal@arstreamer.com
• Website: arstreamer.com
• Response time: We aim to respond to all privacy requests within 30 days