Last updated : 2/18/2026
This Privacy Policy explains how Islandium collects, uses, stores, and protects your personal data in compliance with the General Data Protection Regulation (GDPR). By using Islandium, you accept the practices described below.
For complete transparency, here is all the data we collect and store:
| Data | Purpose | Retention |
|---|---|---|
| Authentication, communication | Account duration | |
| Username | Identification | Account duration |
| Password (bcrypt hashed) | Secure authentication | Account duration |
| Name, surname (optional) | Billing | Account duration |
| Postal address (optional) | Billing | Account duration |
| Google ID (if Google login) | OAuth authentication | Account duration |
| Google profile photo (if OAuth) | Profile display | Account duration |
| Data | Purpose | Retention |
|---|---|---|
| IP Address | Security, fraud prevention | 30 days (logs) |
| User-Agent (browser) | Compatibility, debug | 30 days (logs) |
| Session tokens (JWT) | Session maintenance | 7 days then deleted |
| Audit logs (actions) | Security, traceability | 90 days |
| Timezone (browser) | Automatic region detection for TikTok gifts | Account duration |
| Data | Purpose | Retention |
|---|---|---|
| Stripe customer ID | Subscription management | Account duration |
| Transaction history | Accounting | 10 years (legal obligation) |
| PDF invoices | Proof of purchase | 10 years (legal obligation) |
| Credit card numbers | NOT STORED - processed by Stripe | - |
| Data | Purpose | Retention |
|---|---|---|
| Overlay profiles (JSON) | Tool customization | Account duration |
| Trigger configurations | TikTok automations | Account duration |
| Custom webhooks | External integrations | Account duration |
| Notification preferences | Personalized communication | Account duration |
Unlike some services that don't record anything, Islandium stores TikTok data to enable the functioning of leaderboards, statistics, and history. This data is publicly accessible during TikTok lives.
| Data | Example | Retention |
|---|---|---|
| TikTok username (@username) | @viewer_example | Streamer account duration |
| TikTok user ID | 123456789 | Streamer account duration |
| Profile picture URL | External TikTok URL | Streamer account duration |
| First visit date | 01/01/2025 | Streamer account duration |
| Last activity date | 01/15/2025 | Streamer account duration |
| Counters (follows, likes, shares) | 5, 120, 3 | Streamer account duration |
| Total gifts sent | 15 | Streamer account duration |
| Calculated points | 1250 | Streamer account duration |
| Data | Purpose |
|---|---|
| Gift type (Rose, Lion, etc.) | Statistics, leaderboards |
| Quantity per type | Top donors leaderboards |
| Value in diamonds | Total calculations |
| Data | Retention |
|---|---|
| Username of viewer who triggered the action | 30 days |
| Event data (JSON) | 30 days |
| Success/failure of action | 30 days |
Legal basis: This data is publicly accessible during TikTok lives. Processing is based on the streamer's legitimate interest in managing their activity and the fact that the viewer, by participating publicly in the live, makes this information visible to everyone.
Islandium uses minimal cookies
No marketing or advertising tracking cookies are used.
| Cookie | Type | Duration | Purpose |
|---|---|---|---|
| access_token | Essential | 15 min | Authentication |
| refresh_token | Essential | 7 days | Session maintenance |
| theme | Preference | 1 year | Dark/light mode |
| i18n | Preference | 1 year | Language |
| Data Type | Duration | Justification |
|---|---|---|
| Account data | Until account deletion | Contract execution |
| TikTok viewer data | Until streamer account deletion | Legitimate interest |
| Technical logs | 30 days | Security |
| Audit logs | 90 days | Security, traceability |
| Invoices and transactions | 10 years | Legal accounting obligation |
| TTS audio cache | 24 hours | Performance |
The Islandium service is reserved for users aged at least 18 years, in accordance with TikTok LIVE terms of service. No data concerning minors is intentionally collected. If you are a parent and believe your child has provided us with data, contact us immediately.
You may request the deletion of your account and all your data at any time.
Deletion request: privacy@islandium.com
In accordance with Articles 15 to 22 of the GDPR, you have the following rights:
To exercise these rights: privacy@islandium.com
Response within 30 days maximum.
Islandium implements appropriate technical and organizational measures:
Islandium aims to keep data within the European Union. However, some providers (OpenAI, Google, Stripe) may have global infrastructure. In this case, transfers are governed by Standard Contractual Clauses (SCC) and subcontractor contractual commitments.
Islandium may update this policy at any time. Any significant changes will be communicated by email or platform notification. The last update date is indicated at the top of this page.
For any questions regarding data protection or your rights: