Privacy Policy

Who operates H2STREAM

H2STREAM is operated by Nguyễn Huy Hoàng, an independent developer in Vietnam, using the name H2_PRIME. This policy covers the H2STREAM website, Windows application, account service and cloud overlays. Contact h2stream.app@gmail.com about privacy or personal data.

Information we process

Account information: Google account identifier, verified email, display name, profile image, H2STREAM account status, role, plan, plan dates and login records. Google sign-in is used for authentication; we do not request access to Gmail, Google Drive or contacts.

Livestream information: when you connect TikTok LIVE, the application processes the creator identifier and available viewer/event fields, such as usernames, display names, avatars, chat, gifts, likes and follows. Recent activity and configured actions are processed on your device. Selected names, images, event results and statistics are transmitted to our cloud service when needed to display your overlays.

Configuration and media: presets, event mappings, overlay settings, selected images and sounds are stored locally or uploaded when required for the cloud features you use. Do not upload private information or media you are not entitled to use.

Billing and support: we process account links to orders/subscriptions, invoice references, amounts, currency, payment status, subscription dates and refund requests. We also process messages and attachments you send to support. Payment card details are handled by the payment provider, not stored by the H2STREAM application.

Technical information: service requests may include IP address, browser/device information, request times and security/error logs. Automatic region selection uses an approximate country inferred from the connection; it does not require GPS access.

Why we use this information

We use this information to sign you in, deliver the features you request, synchronize overlays, manage subscriptions and plan access, provide support, diagnose problems and prevent fraud or misuse. Where data-protection law requires a legal basis, these purposes rely on providing the requested service, legitimate security/support interests, legal obligations or consent where required. We do not sell personal information or use livestream viewer information for advertising profiles.

Providers and public overlays

Google provides sign-in. Cloudflare hosts the website, account data, overlay state and uploaded assets. TikTok supplies the livestream events you connect to. Paddle processes purchases as merchant of record and supplies billing/subscription notifications. These providers apply their own privacy terms, and their infrastructure may process data outside your country. We may disclose information where legally required or necessary to protect the service.

An overlay URL is intended to be opened by OBS, a browser or streaming software. Anyone who has that URL may view its rendered information and referenced media. Overlay links are not private account pages. Do not place secrets or sensitive personal information in them; share the URL only with people or software you trust.

Storage, cookies and retention

The website stores your language preference in local storage. Sign-in services use necessary session/OAuth cookies or tokens. Browser storage can be cleared in your browser settings; doing so may remove preferences or sign you out. H2STREAM does not currently add advertising trackers to the product website.

Account and configuration records are retained while needed to provide the account and service. Billing, support and security records may be retained for legal, accounting, dispute or fraud-prevention purposes. The cloud service retains the last published overlay state until replaced or deleted. Uploaded media does not automatically expire when it is unselected or replaced; closing the app or ending a stream does not automatically erase cloud records. There is no fixed automatic deletion deadline for all stored records. Contact us to request deletion; we will explain any records that must be retained. Deletion from our service cannot remove copies already saved by viewers or third parties.

We use access controls and protected authentication tokens to secure accounts. The Windows app protects its session token using Windows data protection. No storage or transmission method can guarantee absolute security.

Your choices and requests

You can disconnect TikTok, stop publishing overlays and sign out. To request access, correction, deletion or other data-protection rights available in your location, email h2stream.app@gmail.com. We may need to verify your account before acting. Include only information needed for the request, never passwords or card details. If you are a viewer shown in an overlay, provide the creator/overlay reference and the information to locate your record. Where available, you may contact your data-protection authority.

H2STREAM is intended for livestream creators, not to collect data directly from children. Use of TikTok and other connected platforms remains subject to their eligibility rules. Contact us if you believe a child's data has been handled improperly.

Policy updates

We publish updates here with an updated date and provide additional notice where required for material changes. Other languages may use the English text as a fallback; English and Vietnamese versions are available on this page.