Starbloom Streaming Privacy Policy

Last Updated: August 17, 2026

1. Introduction

This Privacy Policy describes how Starbloom Streaming Inc., a Delaware corporation ("Starbloom," "we," "us," or "our"), collects, uses, stores, shares, and protects your personal information when you access or use the Starbloom Streaming platform, including the website, mobile applications, and all related services (collectively, the "Platform").

By creating an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, do not access or use the Platform.

This Privacy Policy is incorporated by reference into and forms part of the Starbloom Streaming Terms of Service ("ToS"), available at starbloomstreaming.com/legal/terms.

2. Information We Collect

We collect personal information in three ways: information you provide to us, information collected automatically, and information obtained from third parties.

2.1 Information You Provide

(a) Account Registration Data: When you create an account, we collect your name, email address, date of birth, username, and password.

(b) Identity Verification Data: If you apply for a Creator Account or access the NSFW Section, you may be required to complete identity verification or age verification. Know Your Customer ("KYC") verification for Creator Accounts is performed by Stripe. Age verification for the NSFW Section is performed by iDenfy (UAB "iDenfy," Lithuania). Starbloom does not store copies of your government-issued identification documents. These are submitted directly to and retained by the applicable verification provider (Stripe or iDenfy) in accordance with that provider's privacy policy, which is presented to you during the verification process. Starbloom receives only the verification result (pass/fail and, for age verification, the verified age bracket).

(c) Payment and Financial Data: If you purchase Starcoins, subscribe to a creator's channel, or receive payouts as a Creator, we collect billing information (such as payment card details or payment account information), payout method details (such as bank account or PayPal information), and tax documentation (IRS Forms W-9, W-8BEN, or W-8BEN-E, as applicable). Payment card details are processed and stored by our third-party payment processors (Stripe and PayPal). Starbloom does not directly store full payment card numbers.

(d) Content Data: We collect content you create, upload, stream, or transmit through the Platform, including livestreams, videos, VODs, chat messages, comments, profile information, and any other User Content as defined in the ToS.

(e) Communications: If you contact us for support, submit a DMCA notice, or otherwise communicate with us, we collect the content of those communications, including any attachments.

(f) Creator-Specific Data: If you hold a Creator Account, we collect additional information related to your monetization activity, including earnings data, subscriber metrics, payout history, and tax reporting information.

2.2 Information Collected Automatically

When you access or use the Platform, we automatically collect the following information:

(a) Device and Technical Data: Your IP address, browser type and version, operating system, device type, device identifiers, screen resolution, and language preferences.

(b) Usage and Analytics Data: Pages visited, features used, content viewed, viewing duration, click and scroll behavior, search queries, livestreams watched, interaction patterns, and engagement metrics. This data is collected through server-side logging and Platform instrumentation.

(c) Location Data: We infer your approximate geographic location from your IP address. We do not collect precise GPS location data unless you separately consent to it through your device settings.

(d) Cookies and Tracking Technologies: We use cookies and similar tracking technologies to collect information about your browsing activity. See Section 8 for details.

(e) Log Data: Server logs recording access times, referring URLs, error logs, and other diagnostic information.

2.3 Information from Third Parties

(a) Third-Party Login Providers: If you create an account or log in using a third-party service (such as Google or Discord), we receive your name, email address, and profile information from that service, as authorized by your settings with the third-party provider.

(b) Identity and Age Verification Providers: Stripe (for Creator KYC) and iDenfy (for NSFW age verification) provide us with verification results confirming whether you have met the applicable verification requirements. We do not receive copies of the identification documents you submitted to these providers.

(c) Payment Processors: Stripe and PayPal provide us with transaction confirmations, payout status, and limited account information necessary to process payments and payouts.

3. How We Use Your Information

We use the information we collect for the following purposes:

(a) Platform Operation: To create and maintain your account, authenticate your identity, process payments and payouts, deliver content, enable monetization features, and provide the services described in the ToS and Creator Monetization Agreement.

(b) Content Moderation and Safety: To enforce the ToS and Community Guidelines, detect and prevent prohibited activities, moderate content across the Platform's content tiers, and protect the safety of our users. This includes the use of automated tools to flag content for human review (see Section 4).

(c) Communications: To send you service-related communications, including account notifications, payout confirmations, security alerts, and updates to our Terms or policies.

(d) Analytics and Improvement: To analyze usage patterns, measure Platform performance, diagnose technical issues, and improve the Platform's features and user experience.

(e) Legal Compliance: To comply with applicable laws, regulations, legal processes, and governmental requests, including tax reporting obligations, recordkeeping requirements under 18 U.S.C. § 2257, DMCA compliance, and responses to law enforcement requests.

(f) Security and Fraud Prevention: To detect and prevent fraud, unauthorized access, abuse, and other harmful activity, including chargeback fraud, self-tipping, and coordinated manipulation.

(g) Advertising: To deliver and measure the effectiveness of advertising on the Platform. See Section 5 for details.

4. Automated Processing and Artificial Intelligence

We use automated tools, including artificial intelligence ("AI") and machine learning technologies, in the following limited capacity:

(a) Content Flagging Only: AI tools are used to analyze content published on the Platform for potential violations of the ToS and Community Guidelines, including detection of prohibited content categories described in Section 4.2 of the ToS. AI tools flag content for human moderator review only. AI does not take autonomous action on content. All moderation decisions are made by human moderators.

(b) No Access to Personal Information: Our AI content analysis tools operate on content data only. They do not have access to your personal information, account data, payment information, or identity verification data.

(c) Automated Fraud Detection: We use automated systems to detect potentially fraudulent transactions, including unusual patterns in Starcoin activity and payment behavior. Flagged transactions are reviewed by our trust and safety team before any action is taken.

No decisions with legal or similarly significant effects on you are made solely through automated processing without human review.

5. Advertising and Data Sharing with Ad Networks

We share limited, anonymized data with advertising partners to deliver and measure advertising on the Platform. The data shared with ad networks is restricted to the following categories, in anonymized and aggregated form only:

• Age bracket (not date of birth)
• Gender
• Country

We do not share your name, email address, username, IP address, device identifiers, viewing history, content data, payment information, or any other personally identifiable information with advertising partners. We do not sell your personal information to advertisers or any other third party. We do not permit ad network partners to track individual users across the Platform using cookies, pixels, or other identifiers.

Data shared with advertising partners does not include any information from users under the age of 18.

6. How We Share Your Information

We share personal information with the following categories of third parties, and only for the purposes described below:

(a) Payment Processors (Stripe and PayPal): We share payment and financial data with Stripe and PayPal to process purchases, subscriptions, and creator payouts. Stripe also performs KYC verification for Creator Accounts. These processors handle your data under their own privacy policies and terms of service.

(b) Age Verification Provider (iDenfy): When you access the NSFW Section, your verification data is submitted directly to iDenfy. iDenfy processes and retains your identification documents and verification data under its own privacy policy, available at https://www.idenfy.com/privacy-policy/. Starbloom receives only the verification result.

(c) Cloud Infrastructure Providers: Your data is stored and processed on Amazon Web Services ("AWS") infrastructure located in the United States (US-East region). Cloudflare provides content delivery, DDoS protection, and security services. These providers process data on our behalf under data processing agreements.

(d) Analytics Providers: We share usage, device, and technical data with analytics providers to help us understand how the Platform is used. Analytics data is collected server-side and processed in aggregated or pseudonymized form where possible.

(e) Advertising Partners: As described in Section 5, we share anonymized, aggregated data limited to age bracket, gender, and country.

(f) Law Enforcement and Government Authorities: We disclose personal information to law enforcement, government authorities, or other third parties when required by law, legal process, or governmental request, or when we believe in good faith that disclosure is necessary to: (i) comply with applicable law or regulation; (ii) protect the safety of any person; (iii) prevent fraud or other illegal activity; (iv) respond to a valid subpoena, court order, or similar legal process; or (v) report suspected child sexual abuse material (CSAM) to the National Center for Missing and Exploited Children (NCMEC) as required by law.

(g) Service Providers: We share personal information with third-party service providers who perform services on our behalf, such as email delivery, customer support tools, and security services. These providers are contractually obligated to use your information only for the purposes of providing services to Starbloom and are subject to appropriate confidentiality and data protection obligations.

(h) Corporate Transactions: In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or substantially all of Starbloom's assets, your personal information may be transferred as part of that transaction. We will notify you of any such transfer in accordance with applicable law and Section 16.4 of the ToS.

(i) With Your Consent: We may share your personal information with third parties when you have given us your explicit consent to do so.

We do not sell your personal information, as that term is defined under the California Consumer Privacy Act or any other applicable privacy law.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.

7.1 General Retention

Upon account deletion, we delete your personal information within thirty (30) days, except as set forth below.

7.2 Specific Retention Periods

(a) Content Data: Upon account deletion, Creators have a 60-day grace period to export content through the Platform's export tools, as described in the Creator Monetization Agreement. After the grace period, content is permanently deleted, subject to caching, backup, and archival system delays.

(b) Payment and Tax Data: Retained for a minimum of seven (7) years following the end of the tax year to which the data relates, or as otherwise required by applicable tax law.

(c) Identity and Age Verification Data: Starbloom does not retain identity or age verification documents. Retention of verification data by Stripe and iDenfy is governed by those providers' privacy policies and applicable law.

(d) NSFW Creator Records: Records required under 18 U.S.C. § 2257 and 28 C.F.R. Part 75 are retained by the Creator for the duration content remains on the Platform and for a minimum of seven (7) years after the content is removed or the Creator's account is deleted, as required by law.

(e) Usage and Analytics Data: Retained in identifiable form for up to twenty-four (24) months, after which it is aggregated or deleted.

(f) Law Enforcement Requests: Data subject to a legal hold, subpoena, or law enforcement request is retained as long as required by the applicable legal process.

(g) Backup Systems: Deleted data may persist in encrypted backup systems for up to an additional 30 days before being permanently purged.

8. Cookies and Tracking Technologies

8.1 Types of Cookies We Use

(a) Strictly Necessary Cookies: Required for the Platform to function, including authentication, session management, security protections, and load balancing. These cookies cannot be disabled.

(b) Functional Cookies: Enable personalized features such as language preferences, content tier settings, display preferences, and other user-selected configurations.

(c) Advertising Cookies: Used to deliver relevant advertisements and measure advertising effectiveness. As described in Section 5, advertising data shared with partners is limited to anonymized, aggregated information (age bracket, gender, country). We do not use cookies to build individual behavioral advertising profiles.

(d) Social Media Cookies: Set by third-party social media services (such as share buttons or embedded content) that may be integrated into the Platform. These cookies are subject to the respective social media provider's privacy policy.

8.2 Managing Cookies

You can manage your cookie preferences through:

(a) Your browser settings, which allow you to block or delete cookies;

(b) Our cookie consent banner, which is presented when you first access the Platform and allows you to accept or decline non-essential cookie categories; and

(c) Your Platform account settings, where applicable.

Disabling certain cookies may affect the functionality of the Platform. Strictly necessary cookies cannot be disabled.

8.3 Do Not Track and Global Privacy Control

The Platform does not currently respond to "Do Not Track" browser signals. We do honor the Global Privacy Control ("GPC") signal as a valid opt-out request under applicable state privacy laws.

9. Data Security

We implement commercially reasonable administrative, technical, and physical safeguards to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

(a) Encryption of data in transit (TLS/SSL) and at rest;

(b) Access controls limiting employee and contractor access to personal information on a need-to-know basis;

(c) Regular security assessments and vulnerability testing;

(d) Monitoring for unauthorized access and anomalous activity;

(e) DDoS protection and web application firewall services through Cloudflare; and

(f) Incident response procedures for data security incidents.

No method of transmission over the Internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security. If we become aware of a data security incident that affects your personal information, we will notify you in accordance with applicable law.

10. International Data Transfers

Starbloom is based in the United States, and your personal information is processed and stored on Amazon Web Services infrastructure in the United States (US-East region). Cloudflare's content delivery network may cache and process data at points of presence worldwide.

If you are located outside the United States, your personal information will be transferred to, and processed in, the United States and potentially other jurisdictions that may not provide the same level of data protection as your home jurisdiction.

For transfers of personal data from the European Economic Area ("EEA"), United Kingdom ("UK"), or Switzerland to countries that have not been deemed to provide an adequate level of data protection, we rely on the following transfer mechanisms:

(a) Standard Contractual Clauses ("SCCs") approved by the European Commission;

(b) The UK International Data Transfer Agreement or UK Addendum to the EU SCCs, as applicable; and

(c) Any other lawful transfer mechanism recognized under applicable data protection law.

Our data processing agreements with AWS, Cloudflare, Stripe, and iDenfy incorporate appropriate data transfer safeguards.

11. Children's Privacy

11.1 COPPA Compliance

The Platform permits users aged 13 and older to create accounts for the General and Mature content tiers, with the consent of a parent or legal guardian for users under 18. We comply with the Children's Online Privacy Protection Act ("COPPA") and do not knowingly collect personal information from children under the age of 13 without verified parental consent.

If we learn that we have collected personal information from a child under 13 without verified parental consent, we will promptly delete that information.

11.2 Data Collection from Minors Aged 13 to 17

For users between 13 and 17 years of age, we collect only the information necessary to operate the account and provide access to age-appropriate content tiers (General and Mature). We do not:

(a) Share personal information of users under 18 with advertising partners;

(b) Permit users under 18 to purchase Starcoins, subscribe to creator channels, or access the Adult tier or NSFW Section;

(c) Use personal information of users under 18 for behavioral advertising or targeted advertising purposes;

(d) Permit users under 18 to create Creator Accounts or participate in monetization features; or

(e) Sell or share the personal information of users known to be under 16, as those terms are defined under the CCPA.

11.3 Parental Rights

Parents and legal guardians of users under 18 may:

(a) Review the personal information we have collected from their child;

(b) Request deletion of their child's personal information;

(c) Refuse to permit further collection or use of their child's personal information; and

(d) Exercise any other rights available under COPPA or applicable law.

To exercise these rights, contact us at legal@starbloomstreaming.com.

12. Your Privacy Rights

12.1 United States: State Privacy Laws

If you are a resident of a U.S. state with an applicable consumer privacy law (including California, Colorado, Connecticut, Delaware, Indiana, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia), you may have the following rights, depending on your state of residence:

(a) Right to Know/Access: Request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, the business purposes for collection, and the categories of third parties with whom it was shared.

(b) Right to Delete: Request that we delete your personal information, subject to certain exceptions permitted by law.

(c) Right to Correct: Request that we correct inaccurate personal information.

(d) Right to Opt Out: Opt out of the sale or sharing of your personal information. Starbloom does not sell personal information. To the extent that any data sharing practice described in this Privacy Policy is deemed a "sale" or "sharing" under applicable law, you may opt out by contacting us at legal@starbloomstreaming.com or through the "Your Privacy Choices" link on the Platform.

(e) Right to Limit Use of Sensitive Personal Information: Request that we limit the use and disclosure of sensitive personal information to purposes necessary to provide the services.

(f) Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise these rights, contact us at legal@starbloomstreaming.com or use the privacy controls in your account settings. We will verify your identity before processing your request. You may designate an authorized agent to submit requests on your behalf.

We will respond to verifiable requests within the timeframes required by applicable law (generally 45 days, with one extension of up to 45 additional days if reasonably necessary).

12.2 European Economic Area and United Kingdom: GDPR and UK GDPR

If you are located in the EEA or UK, the following applies:

(a) Data Controller

Starbloom Streaming Inc. is the data controller for personal data processed in connection with the Platform.

(b) Legal Bases for Processing

We process your personal data on the following legal bases under Article 6(1) of the GDPR:

• Performance of a contract (Article 6(1)(b)): Processing necessary to perform the ToS and Creator Monetization Agreement, including account creation, content delivery, payment processing, and payout administration.
• Legitimate interests (Article 6(1)(f)): Processing necessary for our legitimate interests, including Platform security, fraud prevention, content moderation, analytics, and service improvement, where those interests are not overridden by your rights and freedoms.
• Compliance with legal obligations (Article 6(1)(c)): Processing necessary to comply with applicable law, including tax reporting, 18 U.S.C. § 2257 recordkeeping, DMCA compliance, and responses to legal process.
• Consent (Article 6(1)(a)): Where we process data based on your consent (such as non-essential cookies), you may withdraw consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

(c) Your Rights

Under the GDPR and UK GDPR, you have the right to:

• Access: Request a copy of your personal data.
• Rectification: Request correction of inaccurate or incomplete personal data.
• Erasure: Request deletion of your personal data ("right to be forgotten"), subject to legal retention requirements.
• Restriction of Processing: Request that we restrict the processing of your personal data in certain circumstances.
• Data Portability: Receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.
• Objection: Object to processing based on legitimate interests, including profiling.
• Automated Decision-Making: Not be subject to a decision based solely on automated processing that produces legal or similarly significant effects. As stated in Section 4, we do not make such decisions without human review.
• Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise these rights, contact us at legal@starbloomstreaming.com.

(d) Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority in your country of residence, place of work, or place of the alleged infringement.

(e) Data Protection Officer

Starbloom has appointed a Data Protection Officer. For questions regarding our processing of your personal data under the GDPR or UK GDPR, contact our DPO at dpo@starbloomstreaming.com.

(f) EU Representative

Starbloom's designated representative in the European Union under Article 27 of the GDPR is [NAME AND ADDRESS OF EU REPRESENTATIVE TO BE DESIGNATED].

(g) UK Representative

Starbloom's designated representative in the United Kingdom under Article 27 of the UK GDPR is [NAME AND ADDRESS OF UK REPRESENTATIVE TO BE DESIGNATED].

12.3 Canada: PIPEDA

If you are located in Canada, you have the right to access your personal information held by Starbloom, request correction of inaccurate information, and withdraw consent to certain processing activities. We process your personal information with your knowledge and consent, except where permitted or required by law. To exercise these rights, contact us at legal@starbloomstreaming.com.

12.4 Brazil: LGPD

If you are located in Brazil, you have rights under the Lei Geral de Proteção de Dados ("LGPD"), including the right to: confirm whether we process your personal data; access your data; correct incomplete, inaccurate, or outdated data; request anonymization, blocking, or deletion of unnecessary or excessive data; request data portability; request deletion of data processed with your consent; obtain information about entities with which we have shared your data; and revoke consent. To exercise these rights, contact us at legal@starbloomstreaming.com.

12.5 Australia

If you are located in Australia, we process your personal information in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth). You have the right to access your personal information, request correction, and make a complaint about our handling of your personal information. To exercise these rights, contact us at legal@starbloomstreaming.com.

12.6 Other Jurisdictions

If you are located in a jurisdiction not specifically addressed above, we will process your personal information in accordance with the applicable data protection laws of your jurisdiction. You may contact us at legal@starbloomstreaming.com to inquire about your rights.

13. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you and applicable regulatory authorities in accordance with the timelines and requirements of applicable law, including:

(a) GDPR Article 33 (72-hour notification to supervisory authorities) and Article 34 (notification to affected individuals without undue delay where the breach is likely to result in a high risk to rights and freedoms);

(b) Applicable U.S. state breach notification laws; and

(c) Other applicable data breach notification requirements in your jurisdiction.

14. Third-Party Links and Services

The Platform may contain links to third-party websites, services, or applications that are not operated by Starbloom. This Privacy Policy does not apply to third-party services. We encourage you to review the privacy policies of any third-party services you access through the Platform. We are not responsible for the privacy practices of third parties.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the revised Privacy Policy on the Platform and updating the "Last Updated" date. If we make changes that materially affect how we use your personal information, we will provide additional notice (such as an in-app notification or email). Your continued use of the Platform after the effective date of any update constitutes acceptance of the revised Privacy Policy. Where required by applicable law, we will obtain your consent before making material changes to our data processing practices.

16. Contact Us

If you have questions about this Privacy Policy, your personal information, or our data practices, contact us at:

Starbloom Streaming Inc. 23600 Mercantile Road Rs028185 Beachwood, OH 44122 Email: legal@starbloomstreaming.com

Data Protection Officer (EEA/UK inquiries): Email: dpo@starbloomstreaming.com