FabcomStudios
ENDEFabStream
Privacy

Privacy Policy

This policy applies to the website fabstream.fabcomstudios.com / fabcomstudios.com, the license server and the FabStream desktop app. It is based on the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Controller

Fabcom, owner Fabrizio Grande
Oberdorfstrasse 14
5415 Nussbaumen
Switzerland
Email: support@fabcomstudios.com

2. What the desktop app processes

  • Scenes, settings, recordings and logs stay locally on your PC (%APPDATA%\FabStream). There is no telemetry and no tracking.
  • Camera, microphone and screen content is processed locally and only sent to the streaming servers you enter yourself. Stream keys are stored encrypted with Windows DPAPI and are never transmitted to us.
  • License check (paid plans only): on activation and then roughly every 12 hours, the app sends your license key, a random installation ID, the computer name and the app version to our license server. Purpose: performance of the contract (unlocking your plan, limiting it to the number of PCs your plan allows).
  • Update check: on start, the app checks whether a new version is available (this technically transmits your IP address). You can switch this off under Settings → Advanced.
  • Bug reports and ideas (voluntary): when you send a report via the bug or light-bulb icon, we receive your text, the email address you enter and only the attachments you select – an excerpt of the log files (stream keys, license keys and sign-in tokens are removed beforehand), a system summary (Windows version, processor, graphics card, memory, encoders, video settings) and a screenshot of the FabStream window. The report is delivered by email to our support team; we use it only to handle your request.

2a. FabStream account (voluntary)

  • FabStream works without an account. With an account you can use your plan on all your PCs, keep scenes and settings in the cloud and use Twitch features.
  • Sign-in with an email code: we store your email address and send you one-time codes (delivered via Resend). Codes are valid for 10 minutes and are stored only as a hash.
  • Sign-in with Twitch, Kick, TikTok, Discord or Google: the provider confirms your identity to us. We store your account ID at the provider, the user/display name, the profile picture URL and – if the provider confirms it – the email address. For Twitch, Kick and YouTube (Google) we additionally store the access permission in encrypted form when you choose "Connect", so FabStream can fetch your stream key, change title and category, show your new Twitch followers as alerts, find your YouTube live chat and upload clips you choose to YouTube; for TikTok when you choose "Connect TikTok", so FabStream can send clips you choose to your TikTok drafts. Clip files go directly from your PC to the platform – they do not pass through our servers. You can disconnect this in the app at any time or revoke it at the platform (Twitch, Kick: Settings → Connections; Google: myaccount.google.com → Security → Third-party connections; TikTok: Settings → Security → Manage app permissions). The privacy policies of these providers also apply.
  • Chat & activity: the app and the chat overlay page connect directly to the chat servers of Twitch and Kick to show your chat; we do not receive or store chat messages.
  • FabBot (chat bot in the app): when you switch it on, the answers, poll and giveaway messages you set up are sent to your Twitch or Kick chat as you. The app sends each message to our server, which passes it on to the platform with your stored access permission and keeps it only for that request (no storage). Polls, giveaway entries and moderation run on your PC only.
  • Upload test (auto-configuration): when you run it, the app sends a few megabytes of random data to our server to measure your upload speed. The server only counts the bytes and discards them; your IP address is used for rate limiting like any request.
  • Donation service (optional): if you connect StreamElements in the app, the token is stored encrypted on your PC only, and the app connects directly to StreamElements to receive your tips, follows and YouTube member events for alerts, goals and labels. Nothing of this passes through our servers. The StreamElements privacy policy applies. While the connect dialog is open, the app checks the clipboard only for the copied token.
  • Per signed-in device we store the device name and the times of sign-in and last use; the sign-in token is stored only as a hash and expires after 180 days without use.
  • Cloud sync: when you choose "Upload", we store your scenes, sources and settings. Stream keys are never uploaded; file paths to your images and videos are part of the scenes.
  • Licenses bought with your account's confirmed email address or added with their key are assigned to your account.
  • Deletion: you can delete your account at any time under Settings → Account. We immediately delete the account, linked sign-ins, device sign-ins and cloud copies; licenses and billing data are kept because of statutory retention obligations but are no longer assigned to an account.

3. Website and license server

  • Hosting: Cloudflare, Inc. (USA) operates the website and the license server. When you visit, technically necessary data (IP address, time, requested page, browser) is processed to deliver the page and protect it from abuse.
  • We use no cookies and no advertising tools. Fonts are loaded from our own server. Your language choice is only stored locally in your browser. If you sign in on the account page, your sign-in token is stored in your browser (localStorage) until you sign out.
  • Invite & earn (referral program): every account has a referral link. When you open such a link, the referral code is stored in your browser for 30 days (localStorage, not a cookie) and sent with a sign-up or purchase, so the purchase counts for the account that shared the link. We store which account referred an account or a purchase and count link visits per day. The referring account only sees numbers (visits, sign-ups, active subscriptions) – never your name, e-mail address or purchase. Legal basis: our legitimate interest in running the program and your contract when you take part.
  • Visitor statistics: we use Cloudflare Web Analytics to see how often our pages are visited (e.g. page views, referring website, country, browser and device type, page load time). It works without cookies, does not create user profiles and does not recognise you across visits or websites; we only see aggregated figures. Legal basis: our legitimate interest in improving the website.
  • Stored per license: email address, name, customer and subscription ID at the payment provider, subscription status, end of term, the license key (encrypted and as a hash) and, per activated PC: installation ID, computer name, app version, time of activation and of the last check.

4. Payment

FabStream subscriptions (Premium, Ultra, Max) are sold through our online reseller Lemon Squeezy, LLC (USA) ("Lemon Squeezy"), which acts as the seller (Merchant of Record) and handles payment, invoicing and taxes. Lemon Squeezy processes your payment and billing data as an independent controller under its own privacy policy. We receive your name, email address, country, subscription status and customer/subscription identifiers from Lemon Squeezy in order to provide your license; we do not receive payment details.

5. Email and contact form

We send license keys, purchase confirmations and sign-in codes via Resend (Resend, Inc., USA); bug reports from the app are also delivered to our support mailbox via Resend. The email address, name and content of the email are transmitted.

When you use the contact form, we receive your name, email address, topic, subject, message, the language of the page and the country your request comes from (from Cloudflare). The message is forwarded to our support mailbox via Resend and is not stored on the website or in the license server. We use it only to answer your request (legitimate interest, Art. 6(1)(f) GDPR, or pre-contractual measures, Art. 6(1)(b)) and delete it when it is no longer needed, unless statutory retention obligations apply.

6. Transfers abroad

Cloudflare, Lemon Squeezy, Resend and – if you sign in with them – Twitch, Kick, Discord, Google or TikTok may process data in the USA. Transfers are based on the Swiss-U.S. or EU-U.S. Data Privacy Framework (where the provider is certified) or on standard contractual clauses.

7. Legal bases (GDPR)

Performance of a contract (Art. 6(1)(b)) for license, payment, delivery and the FabStream account (including cloud sync and Twitch features you switch on yourself); legitimate interest (Art. 6(1)(f)) for secure operation and the update check; legal obligations (Art. 6(1)(c)) for keeping accounting records.

8. Retention

We store license data for the duration of the subscription and afterwards for as long as statutory retention obligations require (in Switzerland usually 10 years for business records). Data about a removed PC is deleted as soon as the PC is removed. Account data is kept until you delete the account; unused sign-ins expire after 180 days; bug reports are deleted once handled (usually after 12 months at the latest).

9. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object. Write to us at support@fabcomstudios.com. You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or an EU supervisory authority.

Last updated: October 2026

This English version is provided for your convenience. In case of any discrepancy, the German version is legally binding.