LiveReplays
Back to home

Privacy Policy

Last Updated: September 4, 2026

LiveReplays ("Service", "we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website and services at livereplays.cc.

1. Information We Collect

Information You Provide

  • Email Address: Used for account creation, login (passwordless magic link and one-time code), and communication. An email address is required only for email-based login.
  • Payment Information: Subscriptions are paid in cryptocurrency via Bitcart, our self-hosted system. There is no card rail, so we never collect card or bank details. For USDT-TRC20 payments, our reconciliation ledger records the on-chain transaction ID and the sending/receiving blockchain addresses to match the payment to your invoice. On-chain data is public by nature.
  • Telegram Login Data: If you sign in with Telegram, we receive and store the identifiers Telegram provides — your Telegram user ID, Telegram username (if set), display name, and avatar URL. No Telegram password is ever shared with us.
  • Copyright / Opt-Out Requests: If you submit a DMCA notice, counter-notice, or a creator opt-out request, we collect the contact details you provide (such as name, email, and — where you choose to include it — phone number and address).

Information Collected Automatically

  • Usage Data: Pages visited, features used, recording activity, and interaction patterns within the Service.
  • Device Information: Browser type, operating system, and device type.
  • IP Address: Collected for security, fraud prevention, rate limiting, and analytics purposes.
  • Cookies: We use essential cookies to maintain your session and preferences. See Section 6 for details.
  • Analytics: We use Vercel Analytics, a privacy-friendly analytics service, to understand usage patterns. This service is only activated after you grant consent through our cookie banner.
  • Abuse-Prevention Signals: To detect and limit multi-account abuse, we record a hashed browser fingerprint (X-Fingerprint) and a device-correlation cookie (__lr_dcid) alongside your IP address at authentication events; purged after 90 days.
  • Visit Measurement: When you load a public page we record that the page was viewed, the country your network connection resolves to, the page path, the interface language, and the website that referred you (its hostname only). We do not store your IP address, your browser's user-agent string, or any value derived from either. Pages are grouped into a single visit using a random identifier created in your browser's memory for that page and discarded when you close the tab; it is never stored on your device and cannot be used to recognise you on a later visit. If you request a sign-in link or sign in with Telegram, your browser passes along that same in-memory identifier so we can tell that an account creation followed a visit. The link is made at that moment only, and the resulting record contains no email address, no account identifier, and nothing that points back to your account.

Information We Do NOT Collect

  • We do not require your legal name, phone number, or physical address to use the Service. Where such details reach us — for example, from a Telegram display name or in a copyright/opt-out request — it is because you or the platform you signed in with provided them.
  • We do not require or store any credentials for third-party platforms (e.g., TikTok accounts).
  • We do not collect private information from content creators whose streams are recorded through the Service. We store the public profile data needed to monitor a stream — username, display name, and profile image — and technical metadata about each captured stream, such as its duration and the peak concurrent viewer count TikTok displayed publicly during the broadcast.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service.
  • Process your account registration and manage your subscription.
  • Communicate with you, including sending service updates and responding to support requests.
  • Monitor usage patterns to improve user experience.
  • Detect and prevent fraud, abuse, and security incidents.
  • Comply with legal obligations, including tax-reporting duties in Chile.
  • Produce anonymous, aggregate statistics about the platform — such as the number of recordings archived and the number of creators captured — which we may publish. These figures are totals only and are not linked or reasonably linkable to any individual user or creator.

3. How We Share Your Information

We do not sell, rent, or trade your personal information. We share information only in the following circumstances:

Service Providers

We rely on a small set of third-party and self-hosted service providers to operate the Service. Each receives only the data needed for its function:

  • Bitcart (self-hosted crypto payments): processes your subscription payment on our own infrastructure.
  • Resend (transactional email): delivers login codes/links and notifications; receives the recipient email address and message content.
  • Backblaze B2 (cloud object storage): stores recording files and thumbnails when cloud storage is enabled.
  • Cloudflare: provides our network edge/tunnel and the Turnstile anti-bot challenge on login; Turnstile receives your IP address and challenge token.
  • Sentry (error monitoring): receives diagnostic data about errors, which may include IP address and request metadata.
  • TronGrid (blockchain API): queried to confirm on-chain USDT-TRC20 payments; receives blockchain addresses and transaction IDs, not your account profile.

Other Disclosures

  • Legal Requirements: We may disclose your information if required by law, court order, or governmental request.
  • Protection of Rights: We may disclose information to protect our rights, safety, or property, or that of our users or the public.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.

4. Data Storage and Security

  • Your account data and recording metadata are stored on our secured servers.
  • Recorded content is stored on our servers and, when cloud storage is enabled, in third-party object storage (Backblaze B2) with access controls and time-limited signed URLs.
  • We implement industry-standard security measures, including encryption in transit (HTTPS) and access controls.
  • However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

5. Data Retention

  • Account Data: Retained for as long as your account is active. When you delete your account, your account record and associated tokens, login records, and clips are removed immediately.
  • Recordings: There is no fixed retention period, and retention does not depend on your plan. Every recording is scored automatically on peak viewers, length, age and file health, and recordings scoring below our threshold are deleted.
  • Server Logs: Retained for up to 90 days for security and debugging purposes.
  • Abuse-Prevention Signals: Automatically purged after 90 days.
  • Payment and Tax Records: Retained as required to meet accounting and tax-reporting obligations in Chile.
  • DMCA-Removed Recordings: Content disabled following a valid DMCA notice or opt-out is hidden immediately and permanently deleted after a 30-day retention window.
  • Visit Measurement Records: Retained for 90 days, then permanently deleted. Purpose: understanding which countries our visitors come from and where people leave before creating an account.

6. Cookies

  • Essential Cookies: Required for the Service to function (authentication, session management, and the device-correlation cookie used for abuse prevention). These cannot be disabled.
  • Analytics Cookies: Help us understand how users interact with the Service. These are only activated after you grant consent through our cookie consent banner. You may withdraw consent at any time.

We do not use advertising or tracking cookies. Visit measurement (Section 1) does not use cookies and does not read any cookie or other information stored on your device. You can review or change your cookie choices at any time from the “Cookie preferences” link in the site footer.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate data.
  • Deletion: Request deletion of your personal data. You can delete your account directly from your account settings.
  • Data Portability: Request your data in a portable format.
  • Opt-Out: Opt out of non-essential data processing.
  • Opt Out of Visit Measurement: We honour the Global Privacy Control (Sec-GPC) and Do Not Track browser signals. If either is enabled, no visit measurement is recorded at all.

To exercise any of these rights, contact us at privacy@livereplays.cc. We will respond within 30 days. Certain records (such as payment and tax records) may be retained where the law requires.

Because visit-measurement records contain no identifier that persists beyond one page load, we cannot connect them to you, and we are not able to locate, export, or delete an individual person's visit records on request. We will not collect additional data solely to make that possible.

For European Users (GDPR)

If you are located in the European Economic Area, we process your data based on:

  • Contract: To provide the Service you requested.
  • Legitimate Interest: To improve and secure the Service, including abuse prevention.
  • Legitimate Interest (Visit Measurement): We rely on our legitimate interest (GDPR Art. 6(1)(f)) to measure visits: we need to know where visitors come from and where the sign-up process loses them. We use the least intrusive means available — country only, no city or coordinates, no IP address stored, no identifier that persists beyond a single page. We do not profile, we do not share this data with anyone, and it is deleted after 90 days.
  • Consent: For optional analytics cookies.
  • Legal Obligation: For tax and accounting records.

You have the right to lodge a complaint with your local data protection authority.

For California Users (CCPA)

If you are a California resident, you have the right to:

  • Know what personal information we collect and how it is used.
  • Request deletion of your personal information.
  • Opt out of the sale of your personal information (we do not sell personal information).

8. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will promptly delete it.

9. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. By using the Service, you consent to such transfers. We take appropriate measures to ensure your data is protected in accordance with this Privacy Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact

For privacy-related questions or requests, contact us at: privacy@livereplays.cc