top of page

Privacy Policy

1. Introduction

 

Welcome to Muxy! This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our website (https://muxy.io), our Twitch extensions, and related services (collectively, the “Services”). This policy applies whether we host Twitch extensions and analytics for clients or operate our own products.

By using our Services, you agree to the terms of this Privacy Policy. If you do not agree, discontinue use of the Services.

​

2. Information We Collect

  
a. Identifying Information
  • Name, email address, Twitch/third‑party platform IDs, payment details (e.g., PayPal), account preferences, and other information you voluntarily provide.
     

  • For business clients: contact details, campaign and extension configuration data.
     

b. Automatically Collected Information
  • IP address, device/browser data, operating system, referring URLs.
     

  • Extension interaction data, usage metrics, analytics, cookies and similar technologies.
     

c. Sensitive Data

We do not intentionally collect sensitive data (e.g., health, religion, biometric). If such data is ever processed, it will be with explicit consent or as legally required.

​

3. Legal Bases for Processing

​

Where required (e.g., GDPR/UK GDPR), we process data based on:

  • Performance of a contract
     

  • Legitimate interests (security, analytics, improvement)
     

  • Consent (e.g., for optional marketing or cookies)
     

  • Compliance with legal obligations

​

4. How We Use Your Data

​

  • Provide, operate, and improve the Services
     

  • Authenticate users and process payments
     

  • Send service updates, announcements, and marketing (with opt‑out)
     

  • Support security, fraud prevention, and legal compliance
     

  • Fulfill client campaigns (when we act as a processor)

​

5. Sharing Your Data

​

We share data with:

​

  • Service Providers/Sub‑processors: hosting, analytics, payment processors.
     

  • Business Clients: when we act as their data processor.
     

  • Legal Authorities: when required to comply with law or protect rights.
     

We do not sell personal data. If we engage in “sharing” for cross‑context advertising, we provide an opt‑out link per CPRA.

​

6. International Data Transfers

​

Data may be transferred to the United States and other jurisdictions. We use appropriate safeguards (Standard Contractual Clauses, etc.) where required.

​

7. Retention

​

We keep data only as long as needed for the purposes above or as required by law. Data is securely deleted or anonymized after it is no longer needed.

​

8. Cookies & Tracking

​

We use cookies to remember preferences, analyze performance, and support extensions. Non‑essential cookies require consent where legally required. See our Cookie Policy for details.

​

9. Your Rights

​

Depending on your jurisdiction, you may have the right to:

​

  • Access, correct, delete, or export your data
     

  • Withdraw consent or object to processing
     

  • Opt out of marketing and data sharing/sale
     

Contact privacy@muxy.io to exercise your rights. We verify and respond as required by law.

​

10. Children’s Privacy

​

Services are not directed to children under 13 (or higher local age). We do not knowingly collect data from children.

​

11. Security

​

We use technical and organizational measures such as encryption in transit, access controls, and monitoring. No system is fully secure, but we notify users and regulators of breaches as required by law.

​

12. Third‑Party Links

 

Our Services may link to third‑party sites. Their privacy policies govern their practices.

​

13. Changes to This Policy

 

We may update this Privacy Policy. Significant changes will be posted on our site and, where required, communicated via email or notice before taking effect.

​

14. Contact

​

Email: legal@muxy.io

​​

Acceptable Use Policy (AUP)

 

You may not use the Services to:

​

  • Violate laws or rights of others
     

  • Harass, defame, threaten, or harm
     

  • Upload malicious code, spam, phishing, or circumvent security
     

  • Scrape or mine data except via permitted APIs
     

  • Launch denial‑of‑service attacks or disrupt operations
     

Violation may result in suspension or termination.

​

Data Processing Addendum (Summary)

​

When Muxy acts as a processor/service provider:

​

  • Processes data only per client instructions
     

  • Implements security measures
     

  • Ensures sub‑processors are bound by contract
     

  • Assists with data subject requests and breach notifications
     

  • Deletes or returns data after termination unless retention required by law

​​

  • Full DPA available upon request.

​

Cookie Policy (Summary)

​

Types of Cookies

  • Strictly Necessary
     

  • Analytics/Performance
     

  • Functional
     

  • Advertising (if used)
     

Users can manage preferences via browser or consent banner.

​

Last Updated: September 16, 2025

Cookie Policy
bottom of page