Who we are
StreamLink ("we", "us") is a live camera streaming service. This policy explains what we store when you use the website, the dashboard, or watch a camera shared through StreamLink. For questions, use the address on our contact page.
Account holders
When you create an account we store:
- your email address, a user ID, and whether your email is verified;
- the time you last used the dashboard;
- if you turn on two-factor sign-in, the authenticator registration (its name and date). The secret key is held by our sign-in provider, not on our servers.
Sign-in is handled by Google Firebase Authentication. If you sign in with Google, we receive your name, email address and Google user ID from Google, and use only the email and ID. We use this data to run your account, keep it secure, and contact you about the service.
Cameras and video
- Camera settings: name, tag, the camera's RTSP link (including its login), access rules (viewer password stored only as a one-way hash, working hours, allowed sites, IP blacklist) and player options.
- Live video passes through our servers on its way to viewers. We don't record it.
- Thumbnails: every few minutes we keep one still image per camera for your dashboard. Each new image replaces the last, and it's deleted with the camera. Viewers never see it.
Cameras may film people. As the account holder, you decide what your cameras show and who can watch. You are responsible for doing this lawfully, including telling people they are being filmed where the law requires it. See our terms of use.
Viewers
When someone watches a camera, we record its IP address, the time, a connection ID and the playback method (WebRTC or HLS). We use this to:
- enforce the camera owner's rules (password, working hours, IP blacklist);
- show the camera owner how many people watched and from which IP addresses, so they can block unwanted viewers;
- protect the service from abuse, e.g. by limiting repeated wrong password attempts.
Viewers don't need an account, and we don't use advertising or tracking on player pages.
Cookies and browser storage
- This website uses no cookies and no analytics.
- The dashboard stores your sign-in session in your browser (through Firebase Authentication) so you stay signed in.
- The player keeps a short-lived unlock token for password-protected cameras in the browser tab's session storage. It is gone when the tab is closed.
- Pages load the Manrope font from Google Fonts, so Google receives your IP address when you open a page.
Service providers
We don't sell personal data or share it for advertising. We use these providers to run StreamLink:
- Google (Firebase): sign-in and hosting of this website and the dashboard;
- DigitalOcean: the servers that store camera settings, statistics and thumbnails, and relay the video.
We may disclose data when the law requires it, for example to comply with a valid order from authorities.
How long we keep data
- Viewer records: deleted automatically after 400 days, or straight away when the camera is deleted.
- Camera settings and thumbnails: until you delete the camera.
- Account data: until you ask us to close your account.
Your rights
Depending on where you live, laws such as India's Digital Personal Data Protection Act, 2023 or the EU GDPR give you the right to see, correct and delete your personal data and to complain to a regulator. To use these rights, contact us from the email address on your account.
If you watched a camera shared by someone else, the camera's owner decides what is shown. Contact them first. We'll help where we can.
We may update this policy. The date at the top shows the latest version. If a change is significant, we'll tell account holders by email.