Privacy Policy

Last updated: 18 October 2026

This privacy policy applies to callumwilletts.co.uk and the Callum Willetts TV app, both operated by Callum Willetts ("we", "us"). It covers the website, the live stream and chat, channel points and subscriptions, and the Minecraft server pages. Members-only features have their own short notice, shown to members inside those features.

Who is responsible for your information

Callum Willetts, who runs this site as a sole trader, decides what happens to your information (in data protection law, the "controller"). You can reach him at [email protected].

What we keep, why, and for how long

For each kind of information: what we use it for, which of the reasons in data protection law (UK GDPR Article 6) lets us, and when it is deleted. Where the reason is our "legitimate interests", those interests are keeping the site running, safe and secure, and you can object (see Your rights).

Your username, password (only as a one-way hash we cannot read), chat colour and profile picture
For
Your account
The law's reason
Contract: the account you asked for
Kept for
Until you delete your account
Your email address, if you give one
For
Sending a password-reset link, and confirming the address is yours. You sign in with your username, and we never send marketing email.
The law's reason
Contract
Kept for
Until you remove it or delete your account. A reset link lasts an hour, a confirmation link 24 hours.
A sign-in code for each device you're signed in on (stored only as a one-way code)
For
Keeping you signed in, securely
The law's reason
Contract
Kept for
30 days, or until you sign out
Channel points, what you've redeemed, emotes you've unlocked, poll votes
For
Channel points and the chat's features
The law's reason
Contract
Kept for
Until you delete your account
Your subscription's tier and start date, and Stripe's reference for you
For
Your perks and subscriber badge, and matching payments to your account
The law's reason
Contract
Kept for
Until you delete your account. Stripe keeps its own payment records for as long as the law requires.
Your Twitch username, if you link it
For
Carrying subscriber perks across from Twitch
The law's reason
Contract
Kept for
Until you unlink it or delete your account
Chat messages
For
Showing them in chat
The law's reason
Contract
Kept for
Not stored: held in memory while they're in the chat, for up to an hour
Reports, and records of what moderators did
For
Keeping the chat safe, and looking into complaints and appeals
The law's reason
Legal obligation (the Online Safety Act 2023), and legitimate interests
Kept for
12 months
The address your browser gives for go-live alerts
For
Telling you when a stream starts
The law's reason
Consent: you turned alerts on
Kept for
Until you turn alerts off, or the address stops working
Counts of visits and of a few actions (no IP address kept)
For
Seeing which pages are used
The law's reason
Legitimate interests
Kept for
1 year (the daily secret described below: 2 days)
Error reports from your browser or the TV app
For
Fixing faults
The law's reason
Legitimate interests
Kept for
30 days
Our servers' logs: each request's IP address, page, time and browser
For
Security, and finding faults
The law's reason
Legitimate interests
Kept for
30 days
Encrypted backups of the account database
For
Restoring the site after a failure
The law's reason
Legitimate interests
Kept for
90 days
The email confirming a new subscription
For
Giving you a copy of what you agreed to, as consumer law requires
The law's reason
Legal obligation
Kept for
Not kept by us: sent once, to the address you gave Stripe
A moderator's two-step sign-in secret (moderators only)
For
Protecting accounts that can moderate
The law's reason
Legitimate interests
Kept for
Until it's turned off or the account is deleted

You don't have to give us anything to watch. To have an account you need a username and password; everything else is up to you.

Chat, text-to-speech, reports and moderation

Messages sent in the stream chat go to our server and are shown to everyone in the chat. They are held in memory only while they are in the chat, for up to an hour, and are never written to storage.

Text-to-speech messages wait a few seconds before they are read out on stream, so that a moderator can stop one. A message that is stopped is not read out or shown in chat.

If someone reports one of your messages, we keep a copy of the message with the report, along with who reported it, why, and anything they added, so that a moderator can act on it and complaints can be looked into. If you report something and later delete your account, your name is taken off the report.

If a moderator acts on your account (a timeout, a deleted message, a ban, or a stopped text-to-speech message), we keep a record of what was done, which moderator did it, and when. The record does not include what you wrote. Reports and these records are kept for 12 months and then deleted automatically, including if you delete your account in the meantime, because they may be needed to deal with a complaint. A timeout is stored with your account until it ends.

Website Analytics

We count visits to the public pages of this website so we can see which pages are worth keeping. This is done with our own software on our own server — no third-party analytics service is used, and nothing is shared with anyone.

We do not use cookies for analytics, and we do not store your IP address, build a profile of you, or follow you between websites. To count how many people visited rather than how many pages were loaded, our server combines your IP address and browser with a secret value that is replaced every day, turns the result into an irreversible code, and stores only that code. Because the secret is regenerated daily and the old one is deleted, the same visitor produces a different code tomorrow and cannot be recognised or followed over time.

We record only the page address visited (without anything after the ?), the website that linked you here (its domain only), and the date. Pages behind a login, such as account and admin pages, are excluded entirely.

One exception to "nothing after the ?": if the link you followed carried campaign tags (utm_source, utm_medium and utm_campaign, short labels such as "push" or "discord"), we record those three, so we can tell which of our own links people use, such as a go-live notification. Nothing else from the address is kept, and a tag that is anything other than a short label is not kept at all.

We also count a few things people do on the public pages: playing the live stream or a past one, turning on go-live alerts, making an account, choosing a subscription tier, following a link to The Den or to Twitch, and copying the Minecraft server's address. Each is kept only as a number per day and page, with nothing that says who did it, and the same "Do Not Track" and "Global Privacy Control" rule applies.

If your browser sends a "Do Not Track" or "Global Privacy Control" signal, we record nothing at all.

Error Reports

If a page on this website breaks in your browser, it sends our server a short report so we can fix it: what went wrong, where in the website's code it happened, the page you were on (without anything after the ?; for pages you have to sign in to see, only which part of the website it was, never what you were looking at), and the name and version of your browser. A report carries no account, no IP address and no cookie, and is not shared with anyone. If your browser sends a "Do Not Track" or "Global Privacy Control" signal, no reports are sent.

The TV app does the same if it crashes or cannot play a video: what went wrong, where in the app's code, which screen it was on, and the app's version. A crash is sent the next time the app starts. These reports carry no account and no IP address either, and you can turn them off in the app's Settings.

Server Logs and Backups

Like any website, our servers log each request they handle: its IP address, the page, the time and the browser. We use them only to keep the site secure and to find faults, and they are deleted after 30 days.

Each night an encrypted copy of the account database is made and kept away from the server, so the site can be restored if something fails. Copies are kept for 90 days, so 90 days after you delete your account, no copy of it is left.

Push Notifications

Go-live alerts don't need an account. If you turn them on, your browser gives our server an address at its push service to send them to, and we use it only to tell you when a stream starts. You can turn alerts off on the site or in your browser's settings at any time, and when an address stops working we delete it.

Who else handles your information

We do not sell your personal data, and we do not share it for advertising or profiling. These services handle some of it on our behalf, for things the site cannot do on its own:

Cloudflare hosts the website and passes on requests to our server, so, like any web host, it handles each visit's IP address.
Stripe handles subscription payments. Your card details go directly to Stripe and never reach our server — we never see or store them. We pass Stripe your account ID and username so a payment can be matched to the right account, and we store the customer reference Stripe gives back. Stripe asks for your email address when you pay, and we use it once, to send you the confirmation of what you agreed to.
Resend delivers our emails: the link to reset your password, the one that confirms your email address, and the confirmation of a new subscription. It receives the address and the message.
Have I Been Pwned checks a new password against passwords exposed in other websites' data breaches. It is sent only the first five characters of a one-way code made from the password, which cannot be turned back into the password, and nothing about you.
Your browser's push service (run by Google, Mozilla, Apple or Microsoft, depending on your browser) carries go-live alerts to your device, if you turn them on.
Twitch, if you choose to link your Twitch account: you sign in on Twitch, and Twitch tells us your Twitch username.

The site also links out to third-party services such as Twitch and Discord. Following those links takes you to them under their own privacy policies, which we encourage you to review.

Information sent outside the UK

Cloudflare, Stripe, Resend and the browser push services are based in the United States, or may handle information there. Those transfers rely on the safeguards UK law provides for them, such as the UK–US data bridge or the Information Commissioner's international data transfer agreement, as each provider's own terms set out.

Your rights

You have the right to:

a copy of the information we hold about you;
have it corrected if it's wrong — you can change your username, colour and profile picture yourself, from your profile;
have it deleted — you can delete your account and everything attached to it yourself, straight away (below; what stays for a while is in the table above);
limit how we use it, or object to our using it where the reason is legitimate interests;
take it with you: the information you gave us, in a common format, or sent to someone else;
withdraw consent at any time, where that is the reason (go-live alerts: turn them off).

To delete your account, use the delete account page. For any of the others, email [email protected]; we'll reply within one month. Nothing about you is decided automatically, beyond the chat's filters stopping messages with links or blocked words, which a moderator can always look at again.

Complaints

If you're unhappy with how we've handled your information, email [email protected] with "Data complaint" in the subject. We'll confirm we've got it within 30 days, look into it, and tell you what we've done.

You can also complain to the Information Commissioner's Office, the UK's data protection regulator: ico.org.uk/make-a-complaint, or 0303 123 1113.

Children's Privacy

You must be 13 or over to make an account (see the terms). We do not knowingly collect personal information from children under 13.

Changes to this policy

When this policy changes, the new version goes here with a new date, and the change is listed below.

18 October 2026: rewritten to say, for each kind of information, what it's for, the law's reason and how long it's kept; server logs (30 days), backups (90 days), reports, the TV app's error reports, the subscription confirmation email, information sent outside the UK, your rights in full and how to complain were added; what your email address is used for was corrected.

Contact

If you have any questions about this privacy policy, please contact us at [email protected].