Terms of Use & Privacy Policy

1. Scope & acceptance

These Terms of Use and this Privacy Policy (together, the “Terms”) govern your access to and use of the Community Widgets platform operated by NEOSTREAMSHOP (the “Service”), including the website at community.neostreamshop.com, related subdomains, account features, digital assets, browser-source widgets, and mobile or desktop integrations that connect to the Service.

By accessing or using the Service, creating an account, redeeming a license, or installing any widget provided by NeoStreamShop, you acknowledge that you have read, understood, and agree to be bound by these Terms. If you do not agree, you must not use the Service.

Sections 10 to 13 constitute the Privacy Policy and Privacy Notice for the Service. They explain how we collect, use, store, share, and protect personal data, and what rights you may have under applicable law.

The Community Widgets project was launched in 2025. The operating company NEOSTREAMSHOP was registered in 2026.

2. Company information & legal notices

In accordance with French law (including the Loi pour la confiance dans l’économie numérique — LCEN), the Service is published by:

Publication director (Directeur de la publication): Noé Coinaud, Manager (Gérant).

The brand name “NeoStreamShop” / “Community Widgets” designates products and services operated by NEOSTREAMSHOP. All content, trademarks, software, and digital assets made available through the Service are protected under French intellectual property law and applicable international conventions.

3. Hosting

The Community Widgets website (community.neostreamshop.com) is hosted by:

Hostinger acts as a hosting / infrastructure provider processing data on our behalf for the operation of the Service. Hosting is located in the European Economic Area (EEA).

4. Description of the service

Community Widgets is a digital product suite designed for live streamers. It provides interactive characters, overlays, and related tools intended to be used inside streaming software (such as OBS Studio or similar broadcast applications) and connected streaming platforms.

The Service may include account management, inventory of characters and effects, shop features (including virtual coins and digital items), configuration tools, browser sources, referral features, and desktop or mobile integrations that display or control widgets during live broadcasts.

NeoStreamShop may update, improve, suspend, or discontinue all or part of the Service at any time, including for maintenance, security, or product evolution.

5. License to streamers

Subject to your compliance with these Terms, NeoStreamShop grants you a limited, personal, non-exclusive, non-transferable, and revocable license to use the widgets and digital assets made available to your account for streaming purposes.

In particular, streamers may:

• display the widgets during live streams, including commercial and monetized streams;
• monetize their content through platform tools (subscriptions, donations, ads, sponsorships, or equivalent), provided such monetization complies with applicable laws and platform rules;
• record, archive, and publish videos that include the widgets (VODs, highlights, clips, YouTube uploads, and similar formats).

6. Virtual items & purchases

The Service may offer virtual coins and digital items. Coin packs and certain products are sold through our payment partner Gumroad. Payment card details are processed by Gumroad, not by NeoStreamShop. After purchase, you redeem a license code on the Service to credit your account.

Virtual coins and digital items have no cash value, are not redeemable for real money, and may be used only within the Service as described. Unless mandatory consumer law requires otherwise, coins and digital items are non-refundable once a license has been redeemed or content has been delivered to your account, particularly where performance of the digital content has begun with your prior acknowledgement.

If you initiate a chargeback or payment dispute in bad faith after receiving digital content, NeoStreamShop may suspend or terminate the related account to protect the Service against fraud.

Third-party marketplaces (for example Etsy) may sell related NeoStreamShop products under their own checkout terms. Those purchases are also subject to the seller’s and marketplace’s applicable policies.

7. Prohibited uses

You agree not to, and not to assist others to:

• use, reproduce, or display the NeoStreamShop brand, logos, trade names, visual identity, or other brand assets in a way that suggests partnership, endorsement, or ownership, without prior written authorization;
• resell, sublicense, rent, redistribute, or commercially exploit the widgets, characters, effects, source files, downloads, or any other elements of the Service as standalone products or assets;
• copy, reverse engineer, extract, scrape, or attempt to recreate protected assets outside the normal operation of the Service, except where mandatory law expressly allows it;
• use the Service to generate unlawful revenue, commit fraud, launder money, circumvent sanctions, or otherwise engage in illegal activity while exploiting NeoStreamShop or Community Widgets;
• attempt unauthorized access to accounts, systems, databases, APIs, or infrastructure related to the Service;
• interfere with the security, availability, or integrity of the Service, including through malware, abuse of rate limits, or denial-of-service attacks;
• misrepresent your identity or affiliation when using the Service;
• abuse refunds, chargebacks, or license redemption to obtain content without valid payment.

Any breach of this section may result in immediate suspension or termination of your account, revocation of your license, and legal action where appropriate.

8. Intellectual property

All rights, title, and interest in and to the Service, including characters, animations, artwork, software, documentation, trademarks, and related materials, remain the exclusive property of NEOSTREAMSHOP or its licensors.

Except for the limited streaming license granted in Section 5, no right or license is granted by implication or otherwise. Any unauthorized use of NeoStreamShop intellectual property is strictly prohibited and may constitute infringement under French and international law.

9. User accounts

Access to certain features requires an account. Accounts are created and authenticated through Twitch OAuth with the scope user:read:email. By connecting your Twitch account, you authorize NeoStreamShop to receive the information necessary to create and maintain your account.

When you create or connect an account, we typically process:

• your Twitch user ID;
• your Twitch username / display name;
• your email address when provided by Twitch under the authorized scope, used for account identification, essential service communications, and account management;
• service data generated by your use of the platform (inventory, preferences, widget settings, purchases, referrals, consent choices, device-link records, and technical logs needed to operate the Service).

Twitch access tokens obtained during login are used only to complete authentication and are not stored in our database for ongoing API access. Twitch profile pictures are not stored by the Service.

You are responsible for maintaining the confidentiality of your account access and for all activity occurring under your account. You must notify us promptly if you suspect unauthorized use of your account.

NeoStreamShop may suspend or terminate accounts that violate these Terms, pose a security risk, or are associated with abusive or unlawful behavior.

Under applicable data-protection law, you may request erasure of your personal data (including account closure). To request account deletion or data erasure, contact us using the details in Section 17. We will verify your identity and process eligible requests within the time limits required by law, subject to legal retention exceptions (for example accounting records). A self-service delete button is not currently available in the product interface.

10. Privacy & personal data

This Section 10 is the Privacy Policy / Privacy Notice for Community Widgets. NEOSTREAMSHOP processes personal data as a data controller in accordance with the EU General Data Protection Regulation (GDPR), the UK GDPR where applicable, French data-protection law (including the Loi Informatique et Libertés), and other privacy laws that may apply to you depending on your place of residence (including certain U.S. state laws such as the California Consumer Privacy Act as amended by the CPRA, Brazil’s LGPD, and Canada’s PIPEDA).

If you do not provide data that is necessary to operate an account (for example Twitch authentication identifiers), we may be unable to provide the related features of the Service.

10.1 Data controller

The data controller is:

NEOSTREAMSHOP has not appointed a Data Protection Officer. Privacy and data-subject requests should be sent using the contact channels in Section 17.

10.2 Categories of personal data we process

Depending on how you use the Service, we may process the following categories:

• Identity & account data: Twitch user ID, Twitch username / display name, email address (when provided by Twitch), account creation date, ban or moderation status where applicable.
• Service & preference data: character and effect inventories, mascot / widget configuration, color and appearance settings, favorites, extra commands, shop and reward activity, referral codes and referral relationships, consent status.
• Transaction data: license redemption records, product identifiers, purchase metadata returned by Gumroad, virtual coin balances and in-Service purchase history. We do not receive or store full payment card numbers.
• Device & authentication data: session identifiers; for mobile / desktop linking, hashed device tokens, device labels, scopes, and token expiry / revocation metadata.
• Technical & security data: IP address, user agent, rate-limit counters, error and security logs, and similar telemetry needed to operate and protect the Service.
• Communication data: messages you send us via Discord, X/Twitter, or other channels you choose, and in-Service admin / account messages where available.

We do not intentionally collect special categories of personal data (sensitive data such as health, biometric templates, or precise geolocation). Please do not submit such information through the Service.

10.3 Sources of personal data

• You / your Twitch account: data provided through Twitch OAuth and through your use of account, shop, widget, referral, and app features.
• Automatically collected: technical logs, session cookies, IP address, browser or app identifiers needed for security and operation.
• Payment partner: limited purchase / license verification data from Gumroad when you redeem a product.
• Other users (limited): referral relationships if another user invites you with a referral code.

Viewers who merely watch a stream that displays Community Widgets are generally not customers of NeoStreamShop. Widget overlays may publicly show a streamer’s configured username and display settings; see Section 10.6.

10.4 Purposes and legal bases

Under the GDPR / UK GDPR, we process personal data only where a legal basis applies. The main purposes and bases are:

Where we rely on legitimate interests, we balance those interests against your rights and expectations. You may object to processing based on legitimate interests as described in Section 10.10.

We do not use personal data for third-party advertising, behavioral advertising networks, or sale of personal information. We do not send marketing newsletters.

10.5 Sharing of data and recipients

We do not sell personal data and do not rent or trade it for advertising. Data may be disclosed only to:

• Twitch (Twitch Interactive, Inc. / Amazon group entities): authentication and account linking under Twitch’s terms and privacy policy. Twitch acts as an independent controller for its own platform processing.
• Gumroad: payment processing and license issuance for coin packs and digital products. Gumroad acts as an independent controller for payment data it collects at checkout.
• Hostinger, UAB: website hosting and related infrastructure, acting as a processor on our instructions.
• Font / delivery providers loaded by the website: the site may load fonts from Google Fonts, which can receive technical data such as IP address when the browser requests font files. See also Section 12.
• Service integrations you choose: if you configure overlays with third-party tools (for example StreamElements or OBS browser sources), those tools may receive widget requests you initiate. Their processing is governed by their own policies.
• Authorities or third parties: when disclosure is required by law, court order, or necessary to protect our rights, users’ safety, or the integrity of the Service.
• Business transfers: if NEOSTREAMSHOP is involved in a merger, acquisition, reorganization, or asset transfer, personal data may be transferred as part of that transaction under appropriate safeguards and notice where required.

Community links (Discord, X/Twitter, Etsy) in the footer are optional destinations. If you visit those platforms, their own privacy policies apply.

10.6 Widgets, overlays, and public display

Browser-source widgets and related APIs are designed to be loaded in streaming software and may be visible on your livestream and recordings. Widget endpoints are typically queried using your Twitch username and a shared widget API key configured for overlay use.

Configuration returned for display (for example mascot name, selected characters, colors, and effects) is intended for public stream presentation. Do not put confidential information into fields that are shown on overlays. You are responsible for how you expose browser-source URLs in OBS or similar tools.

10.7 Mobile and desktop applications

If you link a mobile or desktop app to your account, we generate a short-lived link code and then issue device authentication tokens. Token values are stored in hashed form together with metadata such as device label, scopes, and expiry. You may revoke devices through the Service where available, or by contacting us.

App features may access account data needed for rewards, cases, characters, shop actions, and settings, within the scopes granted at linking time. App download counters may be stored in aggregated form and are not used to identify individual users.

10.8 International transfers

Account and Service databases for Community Widgets are primarily hosted in the European Economic Area through our hosting provider. Some partners — notably Twitch and Gumroad, and possibly Google Fonts when fonts are loaded from Google’s servers — may process data in the United States or other countries.

Where we transfer personal data outside the EEA / UK ourselves, we implement appropriate safeguards required by the GDPR / UK GDPR, such as an adequacy decision or the European Commission’s Standard Contractual Clauses (and UK addenda where required). Transfers performed by independent controllers (Twitch, Gumroad) are governed by their own transfer mechanisms and privacy notices.

10.9 Retention

We retain personal data only as long as necessary for the purposes described above, including:

• Account data: for the life of the account, then deleted or anonymized within a reasonable period after verified deletion / closure, subject to legal exceptions.
• Purchase, license, and accounting records: up to the periods required under French law (commonly up to 10 years for certain commercial and accounting documents).
• Security, rate-limit, and technical logs: for a limited period consistent with security, abuse prevention, and troubleshooting needs.
• Device tokens: until expiry, revocation, or account deletion.
• Consent records: for as long as needed to demonstrate compliance and honour your choice.

When data is no longer needed, it is deleted or anonymized where reasonably possible.

10.10 Your privacy rights

Depending on your location, you may have some or all of the following rights:

• Access — obtain confirmation and a copy of personal data we hold about you;
• Rectification — correct inaccurate or incomplete data;
• Erasure — request deletion (“right to be forgotten”), subject to legal exceptions;
• Restriction — request restriction of certain processing;
• Objection — object to processing based on legitimate interests;
• Portability — receive certain data in a structured, commonly used, machine-readable format where technically feasible;
• Withdraw consent — where processing is based on consent, without affecting prior lawful processing;
• Lodge a complaint — with the French data protection authority (CNIL), the UK Information Commissioner’s Office (ICO), or another competent supervisory authority in your country of residence.

To exercise these rights, contact us using the details in Section 17. We may need to verify your identity (for example by confirming control of the linked Twitch account) before responding. We aim to respond within one month, or within any other deadline required by applicable law. Complex or numerous requests may take longer where the law allows, in which case we will inform you.

We do not make decisions based solely on automated processing that produce legal or similarly significant effects about you within the meaning of GDPR Article 22.

10.11 Additional notices for certain regions

European Economic Area, United Kingdom, and Switzerland. The information in Sections 10.1–10.10 is intended to meet GDPR / UK GDPR transparency requirements (Articles 13 and 14). Your main supervisory authority contact in France is the CNIL.

California and other U.S. states. If you are a resident of California or another U.S. state with a comprehensive privacy law, the categories of personal information we collect are those listed in Section 10.2 (identifiers, commercial information related to digital purchases, internet / technical activity, and inferences limited to service configuration). We collect this information for the business purposes described in Section 10.4. We do not sell personal information and do not share it for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA. We do not use or disclose sensitive personal information for purposes that would require a right to limit under the CPRA. You may request access, correction, deletion, and information about our practices by contacting us (Section 17). We will not discriminate against you for exercising privacy rights. If we deny a request, you may appeal by replying to our decision and asking for reconsideration.

Brazil (LGPD). Where the LGPD applies, you may request confirmation of processing, access, correction, anonymization, portability, deletion of unnecessary data, information about sharing, and withdrawal of consent, subject to legal limits. Contact details are in Section 17.

Canada (PIPEDA and provincial laws). We process personal information for the purposes identified in this notice. You may request access or correction of your personal information by contacting us. You may also contact the Office of the Privacy Commissioner of Canada where applicable.

Other countries. If local law grants you additional rights, we will honour verified requests that apply to our processing of your personal data.

11. Security & data incidents

NeoStreamShop implements reasonable technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include, as appropriate: HTTPS transport, HttpOnly / Secure session cookies, CSRF protections on sensitive actions, hashed mobile device tokens, access controls, rate limiting, and server-side validation.

If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, NeoStreamShop will assess the incident and, where required by the GDPR / UK GDPR, notify the competent supervisory authority and affected users without undue delay (and, where required, within 72 hours of becoming aware of the breach for authority notification).

You remain responsible for securing your own devices, streaming software configuration, Twitch credentials, browser-source URLs, and any private link codes associated with your widgets or apps.

12. Cookies & similar technologies

The Service uses cookies, local storage, and similar technologies. Some are strictly necessary to provide the Service you request. Others are optional and, where required by the ePrivacy rules / CNIL guidance, are used only with your consent.

You can accept or reject non-essential cookies through the consent banner displayed on the site. Essential cookies cannot be disabled if you wish to use the Service normally. Your choice is stored in local storage and, when you are signed in, may also be associated with your account (privacy_consent) so we can honour it across sessions.

12.1 Cookie and storage inventory

We do not use advertising cookies, social media tracking pixels, or third-party marketing analytics (such as Google Analytics or Meta Pixel) on this Service.

The website may load Google Fonts. Requesting font files from Google can transmit technical data (such as IP address) to Google. If you block third-party requests in your browser, some fonts may fall back to local alternatives where available.

You can also control cookies through your browser settings. Blocking essential cookies may prevent login and other core features from working.

13. Age requirement

The Service is intended for users aged 16 or older. We do not knowingly collect personal data from children under 16.

If you are in a jurisdiction that requires a higher minimum age to use online services or to consent to data processing (for example 18 in some cases, or parental consent rules under the U.S. COPPA for children under 13), you must not use the Service if you do not meet the applicable age requirement. Parents or guardians who believe a child has provided personal data to us should contact us; we will delete such data promptly where required.

14. Limitation of liability

The Service is provided on an “as is” and “as available” basis. To the fullest extent permitted by law, NeoStreamShop disclaims warranties of merchantability, fitness for a particular purpose, and non-infringement.

Without limiting the above, NeoStreamShop shall not be liable for indirect, incidental, special, consequential, or punitive damages, including loss of profits, goodwill, data, stream revenue, or business opportunities arising from your use of, or inability to use, the Service.

Nothing in these Terms excludes or limits liability that cannot be excluded under French law, including liability for fraud or for death or personal injury caused by negligence where such exclusion is prohibited, or mandatory consumer rights that apply in your country of residence.

15. Changes to these terms

NeoStreamShop may update these Terms (including the Privacy Policy) from time to time. The “Last updated” date at the top of this page will be revised accordingly. Material changes may also be communicated through the Service or by other reasonable means.

Continued use of the Service after the effective date of updated Terms constitutes acceptance of the revised Terms, except where applicable law requires additional consent for a specific processing activity.

16. Governing law & disputes

These Terms are governed by the laws of France. Subject to mandatory consumer protection rules that may apply in your country of residence, any dispute arising out of or relating to these Terms or the Service shall be submitted to the exclusive jurisdiction of the competent courts of Paris, France.

If you are a consumer in the European Union, you may also be entitled to use the European Commission’s online dispute resolution platform or other mediation mechanisms available under applicable law.

17. Contact

For questions about these Terms, privacy requests (access, deletion, correction, portability, objection), account deletion requests, or other inquiries, you may contact NEOSTREAMSHOP through the channels listed in the website footer (including X/Twitter and Discord), or by writing to:

Please include enough information for us to identify your account (for example your Twitch username) and describe your request. We may ask you to verify your identity before acting on privacy or account requests.