Privacy policy

As of: 05.10.2026

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

MeinLive
Owner: Thorsten Janßen
Kappelwindeckstr. 48
77815 Bühl
Deutschland
Email: datenschutz@meinlive.com

2. Your rights

With regard to your personal data, you generally have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

You can download a copy of your stored data (access/data portability) yourself at any time as a ZIP file in your profile under "Account → Download my data". If you have questions about your data or wish to exercise any of these rights, please contact datenschutz@meinlive.com.

3. Registration and user account

When you register, we collect your username, email address, date of birth and a hashed password (the password itself is not stored in plain text). We use your date of birth exclusively to check our age limits (account from 16; live streams, guest appearances and coin purchases from 18); it is not visible to other users. This data is required to provide the user account (Art. 6 (1) (b) GDPR – performance of a contract). When you log in, we also store the time and IP address of your last login as well as failed login attempts in order to protect accounts from unauthorised access (Art. 6 (1) (f) GDPR – legitimate interest in the security of our systems).

If a phone number is requested during registration (this verification may be switched off temporarily), we store it with your account and, to confirm it, send a code by text message via our service provider seven.io (seven United Filstal GmbH & Co. KG, Germany). Your phone number is transmitted to seven.io solely for verification. To confirm your email address, for password reset links and for purchase confirmations, we use the email delivery service Brevo (Sendinblue GmbH, hosted within the EU).

Waiting list: While new accounts cannot be created, you can add your email address to a waiting list. For this we store the address, the selected language and the time of sign-up and send you a confirmation link (double opt-in). Only after confirming will you receive exactly one email as soon as registration is possible. The legal basis is your consent (Art. 6 (1) (a) GDPR), which you can withdraw at any time via the link in the confirmation email or by contacting us. The address is deleted after this email has been sent, after you unsubscribe or – if the link is not confirmed – after 7 days. Sent via Brevo (see above).

Birthday greeting: Only if you switch on the birthday greeting in your profile do we additionally use your date of birth to send you a notification and a coin gift on your birthday and to show a 🎂 next to your name in chat on that day. Your date of birth itself is not shown to anyone. The legal basis is your consent (Art. 6 (1) (a) GDPR); you can switch the greeting off again at any time.

4. Profile data

Information such as display name, profile description, profile/cover picture, country, pronouns, gender, interests, usual streaming times and links to social networks is voluntary and is only stored and displayed if you provide it yourself (Art. 6 (1) (a) GDPR – consent by active entry). You can change or remove this information in your profile at any time.

Your channel also shows badges (e.g. level, "new here", "phone verified"), figures (followers, hours live, gifts received, member since), your top supporters and – unless you switch it off – when you were last active (only within the last seven days). You decide in your profile under "Privacy" which figures, whether the follower lists and "last active" are visible, and who may message you (Art. 6 (1) (b) and (f) GDPR). If you change your username, we store the previous name so that old links redirect and nobody else can take over the name. Your gender is only visible to others if you explicitly switch this on.

5. Live streams, recordings and chat

When you stream live yourself, the broadcast (video and audio) is passed on to the viewers of your stream. Streams are recorded automatically; depending on your setting, the recording (VOD) is visible publicly, only to followers or only to you, and is automatically deleted after 3 days at the latest (or earlier if you delete it yourself). The exception is one recording that you pin to the top of your channel yourself: it is kept until you unpin or delete it. If you take part in a stream as a guest, the same applies to your video and audio.

Messages in the live chat, gifts sent and hearts are visible to the other viewers of the respective stream. Chat messages are also stored for moderation purposes (e.g. in the event of reports). For the viewer list and for awarding coins for watching, we process which logged-in user is currently watching which stream (Art. 6 (1) (b) and (f) GDPR).

If a running stream, a user who is live or a chat message is reported, we store a still image of the stream at the time of the report and, for chat reports, the messages immediately before and after it, so that the report can be reviewed. This data is only visible to our moderation team and is used solely to process the report and to enforce our terms of use (Art. 6 (1) (f) GDPR). The still image and the chat excerpt are deleted automatically 90 days after the review has been completed.

Giveaways in streams: If you take part in a streamer's giveaway, we store your participation and, if applicable, your win. The display name of the winner and of some participants is shown in the stream during the draw. Participation is free and voluntary (Art. 6 (1) (b) GDPR).

6. Private messages

Private messages and images sent in them are stored on our server so that sender and recipient can access them (Art. 6 (1) (b) GDPR). They are only visible to the two participants; in the event of reports of violations, they may be viewed by our moderation team (Art. 6 (1) (f) GDPR). The messages are not end-to-end encrypted.

7. MeinLive app and push notifications

If you use our app, we store an access token after login, which is kept encrypted on your device. For push notifications (e.g. "A channel you follow is now live") we use Firebase Cloud Messaging from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. For this purpose, a device-specific identifier (push token) is transmitted to Google and linked to your account on our side; transfer to Google LLC in the USA is possible and takes place on the basis of the EU-U.S. Data Privacy Framework (Art. 6 (1) (b) GDPR). You can switch off notifications at any time in your device settings; when you log out, the push token is removed from our system.

If the app crashes, it sends us a technical error report the next time it starts: app version, operating system version, device model, time and the place in the program where the error occurred. The report contains no account data and no content and is not linked to your account. We use it solely to find and fix errors (legitimate interest in a working app, Art. 6 (1) (f) GDPR) and delete it after three months at the latest.

On the website you can activate browser push notifications under "Notifications" (web push, e.g. on the iPhone via the web app on the home screen). Your browser then creates a receiving address at the push service of its manufacturer (Apple, Google, Mozilla or Microsoft, depending on the browser), which we link to your account together with the associated keys. The content of the notifications is transmitted encrypted and cannot be read by the push service. The legal basis is your consent by activating it (Art. 6 (1) (a) GDPR); you can end web push at any time there with "Turn off" or in your browser settings. Receiving addresses that are no longer valid are deleted automatically.

8. Virtual coins and gifts

You can purchase virtual coins on our platform and send them to streamers as gifts. Your payment is not processed by us but by the following payment service providers, to whom we transmit the data required for processing the payment (e.g. purchase amount, transaction ID) (Art. 6 (1) (b) GDPR):

• Stripe: Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Dublin, Ireland (data may be transferred to the parent company Stripe, Inc. in the USA under the EU-U.S. Data Privacy Framework).
• PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

Credit card or account details are handled exclusively by the respective payment service providers and are not stored on our own servers.

9. Support tickets, contact and spam protection (hCaptcha)

We handle support enquiries in our own support system “MeinSupport” at support.meinlive.com. It runs on a separate server at our hosting provider (see section 14); no data is passed on to other providers. If you write to us via the support form (contact) or by email to one of our support addresses (e.g. support@meinlive.com, jugendschutz@meinlive.com, datenschutz@meinlive.com), we create a support ticket and process your details (name or username, email address, topic, subject, messages and voluntarily attached images; for logged-in users additionally user ID, account status, whether the email address is confirmed, and IP address and language at the time of the enquiry) to handle your enquiry (Art. 6 (1) (b) or (f) GDPR). Depending on the topic, the ticket is assigned to a department (e.g. youth protection, data protection); only its staff have access. You receive our replies by email from our own mail server; we also notify you on the website or in the app. You can view your enquiries in the customer portal at support.meinlive.com – as a logged-in user via “My tickets” without logging in again. We keep tickets and attachments for as long as necessary to handle them and any follow-up questions or as required by law; when your account is finally deleted, we automatically anonymise the related support data (see section 16). To protect against automated spam, we use the hCaptcha service of Intuition Machines, Inc. (USA) in the form for guests. Among other things, your IP address and information about your browser are transmitted to hCaptcha (Art. 6 (1) (f) GDPR – legitimate interest in protection against misuse). For the transfer to the USA, the provider relies on the standard contractual clauses of the EU Commission.

10. Notifications to our team (Discord)

When a new account is registered and when a live stream starts, the public username is automatically reported to an internal channel of our team on the Discord service (Discord Inc., USA) so that we can moderate new accounts and running streams promptly (Art. 6 (1) (f) GDPR).

11. Advertising

Our website shows advertising banners labelled as "Advertisement". Our own image banners are stored on our server; no data is transmitted to third parties when they are displayed. Without reference to your person, we count how often a banner was visible and how often it was clicked (a click leads via our server to the advertiser's destination). The legal basis is our legitimate interest in financing our free service (Art. 6 (1) (f) GDPR).

We only load ads from advertising partners if you have agreed in the "Ads from partners" notice (Art. 6 (1) (a) GDPR, Section 25 (1) TDDDG). These ads are loaded in an isolated frame directly from the servers of the respective partner. The partner receives your IP address and information about your browser and device and may use cookies or similar technologies to select and deliver ads and measure their effectiveness. The partners have no access to your MeinLive account, your session or the content of our site. The respective partner is responsible for this processing; details, including any transfer to countries outside the EU, can be found in its privacy policy.

We currently do not show any ads from advertising partners.

We store your decision in the cookie ml_ads_consent (6 months) and – as proof, without your IP address – together with a random identifier, the time and the list of partners for a maximum of three years. If a new partner is added, we will ask you again. You can withdraw your consent at any time with effect for the future: via "Ad settings" at the bottom of every page or here. You can delete cookies already set by partners in your browser.

12. Cookies

We use a technically necessary session cookie (sp_session) to keep you logged in during your visit (Art. 6 (1) (f) GDPR – legitimate interest in a functioning website; Section 25 (2) no. 2 TDDDG). This cookie is deleted automatically when you log out or when the session expires. If you choose a language, we also store this choice in the cookie ml_lang; we store your decision on advertising partners in the cookie ml_ads_consent (see section 11). We ourselves do not set any cookies for advertising or analytics purposes and do not use any third-party analytics services. Cookies from advertising partners are only possible with your consent (section 11).

13. Server log files and IP addresses

When you access our website and for certain actions (login, report function, moderation measures), we temporarily store IP addresses for technical security reasons and to prevent misuse (Art. 6 (1) (f) GDPR). In the event of violations of our terms of use, IP addresses may also be used for bans.

For our own visitor statistics (number of visitors and page views, country of origin, mobile or desktop), every page reports to our server when it is opened and then about once a minute. We do not set cookies and do not store anything on your device. From the IP address and browser identifier we create an encrypted identifier that only recognises you on the same day; the key for it is generated anew every day and deleted after two days. We determine the country on our own server from the IP address (DB-IP "IP to Country Lite" database, without transfer to third parties). Only totals per day and country are stored, no IP addresses. The legal basis is our legitimate interest in understanding and improving the use of our website (Art. 6 (1) (f) GDPR). We do not use third-party analytics services such as Google Analytics.

14. Hosting

This website is operated by the following hosting provider, which acts as our processor in accordance with Art. 28 GDPR:

Bieber IT GmbH
Braunschweiger Straße 22, 38518 Gifhorn

15. Storage period

We only store personal data for as long as is necessary for the respective purposes or as required by statutory retention periods. Stream recordings are automatically deleted after 3 days at the latest (except one recording you have pinned, see section 5). We keep invoice and payment data for coin purchases for up to ten years due to commercial and tax law obligations. After your user account has been deleted, your remaining data is deleted unless statutory retention obligations prevent this.

16. Deactivating and deleting your account

You can deactivate your account at any time in your profile (website or app): your profile, channel and recordings are then no longer visible to others and all sessions are ended; your data is retained until you log in again.

If you request deletion, your account is deactivated immediately and permanently deleted after 30 days. Within this period, you can cancel the deletion by logging in again. On final deletion, we remove your profile, profile picture, messages, chat posts, recordings, follower relationships and login data; your support enquiries are anonymised (name, email address, your messages and attachments are removed). Your user record is anonymised (username and email address are overwritten); we continue to keep receipts for coin purchases without reference to your profile due to statutory retention obligations. For more information, see Delete account.

17. No automated decision-making

No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place. Automatic filters (e.g. against blocked words in the chat) only serve to protect the community; account bans are decided by our moderation team.

18. Changes to this privacy policy

We adapt this privacy policy as soon as our service or the legal requirements change. The version currently published on this page applies.