Skip to main content
Legal

Privacy Policy

TurboKast ("we", "us", "our") operates the turbokast.com website and multi-streaming service. This Privacy Policy explains what information we collect, how we use it, how we share it, and what choices you have.

Last Updated

February 6, 2026

By using TurboKast you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the service.

§ 01

Information We Collect

Account Information

When you sign in via Google, Twitch, or YouTube, we receive basic profile information from the OAuth provider. We do not receive or store your password from any provider.

Display name & profile picture
Email address
Provider-specific user ID

Streaming Data

If you grant streaming permissions, we access your stream keys and broadcast settings on connected platforms (Twitch, YouTube) solely to forward your stream to those destinations. Stream keys are encrypted at rest and never logged in plaintext.

Usage Data

We collect service usage information and, with your analytics permission, use PostHog and any configured analytics providers to understand page and feature use. Analytics can be associated with a signed-in account; it is not necessarily anonymous. Declining optional analytics stops browser tracking. Research survey answers and follow-up contacts are stored separately and are never sent to analytics.

Technical Data

Our servers automatically log IP addresses, browser type, and request timestamps for security and debugging purposes. These logs are retained for up to 30 days and then deleted.

§ 02

Google User Data

TurboKast's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We use Google account data exclusively to:

Authenticate your identity and create your TurboKast account
Display your name and profile picture within the app
Create and manage YouTube live broadcasts on your behalf (when you grant streaming permissions)
Read and send messages in your YouTube live chat while you are streaming
Update the title, description, and category of your broadcasts when you change them in TurboKast
Upload clips to your YouTube channel when you explicitly choose to publish them

Google access and refresh tokens are encrypted at rest and are used only to perform the operations listed above. We never delete your YouTube videos. You can revoke TurboKast's access at any time from your Google Account permissions page, and deleting your TurboKast account deletes the tokens we hold.

We do not sell, rent, or share Google user data with third parties for advertising or any purpose unrelated to providing the TurboKast service.

Google API Services User Data Policy
§ 03

Data Storage & Security

Encryption at Rest & In Transit

OAuth tokens and stream keys are encrypted at rest using AES-256-GCM. Stream keys are stored as SHA-256 digests — plaintext keys are never persisted. All connections use TLS (HTTPS) in transit.

No Content Storage

Your streaming content passes through our relay servers for forwarding only and is never stored or recorded. Data is hosted on Fly.io infrastructure within the United States.

Zero Plaintext Keys

Stream keys never leave our system in readable form.

§ 04

Data Sharing

We share information only in these limited circumstances:

Streaming platforms

Your stream data is forwarded to destinations you have connected (Twitch, YouTube, custom RTMP endpoints).

Payment processor

Stripe processes billing on our behalf and receives only the information required to complete transactions.

Infrastructure providers

Fly.io and Cloudflare host our services and may process requests in the course of providing infrastructure.

Legal requirements

We may disclose information if required by law, regulation, or valid legal process.

We do not sell your personal information to any third party.

§ 05

Data Retention

We retain your account data for as long as your account is active. Streaming session metadata is retained for analytics and history purposes. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law.

§ 06

Cookies

TurboKast uses a necessary session cookie for login and form security. If you allow analytics, configured providers may use cookies or browser storage. Research pages disable replay and automatic form capture; their optional analytics requires your permission.

§ 07

Your Rights

Revoke Access

You can disconnect any OAuth provider from your TurboKast Settings page at any time. You can also revoke access directly from your provider account:

Access Your Data

Contact us to request a copy of the personal data we hold about you.

Delete Your Data

Contact us to request deletion of your account and associated data.

Opt Out of Analytics

Use the analytics choice on the site to decline optional browser analytics, or contact [email protected] for help. See the research privacy notice at /research/streamer-workflow/privacy for survey-specific processing.

§ 08

Children's Privacy

TurboKast is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us so we can delete it.

§ 09

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by posting the updated policy on this page with a revised "Last updated" date. Your continued use of TurboKast after changes are posted constitutes acceptance of the updated policy.

Questions about your data?

If you have questions about this Privacy Policy or your personal data, we're here to help.

[email protected]