Draft. This is a draft that has not been approved yet. It is not final and can change. Parts in [square brackets] are still to be written or decided.
Privacy Policy
What Mix the Mix collects about you, why, who sees it, how long it is kept, and your rights.
Who we are
Mix the Mix is run by Mix the Mix, LLC. Write to matt@mixthemix.com about your information.
This policy takes effect on [TO DECIDE: the date this policy takes effect, set when it is published].
Our approach
We keep as little as we need, for as short a time as possible, only to run, troubleshoot, and improve the service. We show no ads and never sell, rent, or share your information for advertising. Neither the site nor the browser extension loads analytics, ad, or tracking scripts from anyone else. We don't track you across other sites, so "Do Not Track" changes nothing.
What we collect and why
| What | Why |
|---|---|
| Account: email address, password (unreadable), password reset requests, two-factor details if on, passkeys if added, sign-ins, terms agreed to, whether you confirmed you are 18 or over or 13 to 17 (never your birth date, month, or year), plan or pass, blocks | Sign-in and safety |
| Twitch sign-in: id and login name; a broadcaster's role and ban checks are not kept | Sign-in |
| Discord sign-in: Discord user id and username | Sign-in |
| Kick sign-in: Kick user id and channel name | Sign-in |
| YouTube sign-in: YouTube channel id and handle; only the signed-in channel's public details are read | Sign-in |
| Broadcasting: public id and display name, linked channels, settings, the Discord server you choose to let in (its name and id), keys (scrambled), each noting who made it and its label, with a helper's deleted when they stop helping, a note of what each helper changes on your profile (shown only to you), your list of listeners (others' email addresses and Twitch accounts), people you block (the email addresses and Twitch, Kick, or YouTube names you typed), helpers, Twitch channel permission, a note that another broadcaster took your channel | Running broadcasts |
| Invites and the waitlist: the invite you used, your place and what you'd join as, a teammate's channel or email address you give (only for us to see when inviting; never used to contact that person or to link you to them); if you join the waitlist without an account: your email address and whether you are 18 or over or 13 to 17 (never your birth date, month, or year), with no account made until we let you in | The closed alpha |
| Listening: your IP address while connected; if a broadcaster blocks you, a note tying your account to that block; a note that you are connected, while it lasts; totals for each broadcast without who listened, with country, keeping no IP address (IP Geolocation by DB-IP, https://db-ip.com, CC BY 4.0) | Plan limits and what a broadcast costs; keeping out listeners a broadcaster blocked |
| Browser extension: which broadcaster you turn it on for, its link to your account, whether syncing worked; the broadcasters you choose to be told about when they start a broadcast, and the notices made for you from that (a broadcaster's name and the time); the extension checks for these even when no Twitch, YouTube, or Kick page is open, and keeps the latest ones in your browser; the video's sound and the extension's log never leave your browser unless you send them in a bug report; if you report a broadcast you're listening to, the last few minutes of its sound you heard, and up to two minutes after your report; others in a broadcast can see you use it | Mixing sources while you watch, and telling you when a broadcaster you chose starts a broadcast |
| Links on a broadcaster's page: each link's title and address, and whether it is marked 18+; we do not track who clicks a link | Showing them on the page, and keeping out adult websites |
| Picture and banner: the profile picture and banner a broadcaster chooses to upload; they are public, and we may look at them, and may remove one that breaks the rules, for example after a report | Showing them on the page, and keeping out material that isn't allowed |
| Windows app: its log stays on your computer unless you send it; Microsoft shares Store crash reports | Fixing problems |
| Crash reports: the error, the version of the app, extension, or site, the Windows or browser version, and what it was doing; for the app, also the names and versions of the program files involved, which can include Windows, driver, or other programs' files | Fixing crashes |
| Free trial: how many trial hours you have used, kept with your account, linked accounts, email address, and plan type | So that the trial stops when the hours run out |
| Payments: on Stripe's pages (we never see card details); we keep Stripe's references and plan status, and which promo code you used and when, until your account is deleted | Billing, and letting each account use a promo code once |
| Reports and recommendations: the profile, link, or image you reported, why, our decision; a recommendation you make: your notes, the other accounts you list for them, whether you'd like to chat, the email address you type for it (used only to arrange that time, and deleted with the recommendation), and our reply; a recommended broadcaster's public channel, the other accounts you listed, and notes (and, if we invite a Twitch channel, its Twitch id), no contact details, never contacted except by an invite (ask us to delete one about your channel); if you report a broadcast you're listening to, the last few minutes of its sound you heard, and up to two minutes after your report | Safety and invites |
| Requests to remove an image of you: the image you name, your full name as your signature, your email address, a phone number if you give one, when you confirmed your statement, our decision and reason | Dealing with the request within 48 hours and telling you what we decided |
| Removed links and images: when we remove a broadcaster's link or image, a record of what was removed (its details as they were), why, and which of us removed it | Handling repeat abuse and any complaint about a removal |
| Content we report to NCMEC: a copy of the link, image, or sound sent with a report, its details as they were, why we acted, which of us acted, and our report reference; seen only by the people who run Mix the Mix, and shared with NCMEC and law enforcement as the law requires | Meeting our legal duty to report and keep it |
| Phone number: collected only if you choose to get texts | To text you a sign-in code, an alert that a broadcast started with your key, or an account recovery code |
| Dashboard notices: a short text and the time, with your account number, for a broadcast that started with your key or a change we made to your account | Telling you about it; dismissed by you, or deleted after 30 days |
| Removed images: a fingerprint of each image we remove | Stopping the same image being uploaded again |
| Abuse counters (holding no addresses), error logs, the media server's log, and our host's record of requests, which includes your IP address, approximate country, and browser | Stopping abuse, fixing errors |
| Service monitoring: how long pages and background tasks take, errors, and how busy our servers are; no names or email addresses; seen only by the people who run Mix the Mix, with no outside service | Keeping the site fast and working |
| Cookies: sign-in and form protection; two hours after you were last active, or up to 400 days with "Keep me signed in on this device"; 30 days with "Remember This Device", to skip the two-factor code on that browser; a short note of which menu items you can use (such as Dashboard or Admin), kept only while you are signed in, for the same time as your sign-in | Sign-in and form safety, and showing you the right menu from the start |
Signing in with Discord, Kick, or YouTube keeps no email address, Google account id, or real name, and nothing that would let us act as you later.
We email you only about your own account; Stripe sends its own payment emails. If you broadcast, that includes an email when a broadcast starts with your broadcaster key (you can turn it off in Broadcast Settings) and one when the people who run Mix the Mix change something on your account, for example a plan given, a plan taken back, a changed limit, or a stopped broadcast. The same news also appears as a notice on your dashboard, which you can dismiss and which goes after 30 days.
Texts are optional. You choose to add a phone number, and you can turn texts off in Account or reply STOP to any text. We text only from Mix the Mix, never on behalf of another user.
The people who run Mix the Mix are emailed whenever one of us takes an action on the admin panel or the server, so that we would notice if an admin account were misused. Each email shows the email address of whichever of us took the action, and the account or profile it affected: by its number, its email address, or its Twitch name. These emails go only to us.
Remembered devices
If you tick "Remember This Device" when entering your two-factor code, we keep a record that this browser was remembered: a browser-and-system label such as "Firefox on Windows", when it was set and last used, and a random token kept only in scrambled form. We use it only to skip the two-factor code on that browser. It lasts 30 days, or until you forget it on the Account page, change your password or two-factor, too many wrong two-factor codes lock your sign-in, or anything else signs you out everywhere.
Problem reports
The site keeps what you write, the versions you give, and any files you attach, such as screenshots, with your account. Only the people who run Mix the Mix can see it. Attached files are deleted 30 days after the report is dealt with, and the report 12 months after it was sent. We use it only to fix the problem.
Crash reports
If the app, the extension, or the listening page crashes, it can send us a crash report, but only if you choose to send it. It holds the error, the version of the app, extension, or site, the Windows or browser version, and what it was doing. A crash report from the app can also name the program files that were involved and their versions, which may include Windows, driver, or other programs' files. Your IP address is not kept with it. Only the people who run Mix the Mix can see it, and no outside service gets it. We use it only to fix crashes.
A crash report never includes your broadcaster key, the names of your sources, or your sound.
Requests to remove an image of you
Anyone can ask us to remove an image of them, signed in or not. We keep what you send us, so we can deal with it within 48 hours and email you what we decided. Only the people who run Mix the Mix can see it. We keep it until we decide on it, then delete it 12 months later, and use it only for that request.
Who sees it
- Notices from the extension are seen only by you. A broadcaster is never told who chose to be told when they start a broadcast. Broadcasts marked 18+ never make a notice, and none is shown in the extension.
- Broadcasters see how many are listening and their own totals, never who listened or a listener's email address or age; a country only with at least 5 listeners. One with a short listener list may be able to tell who on it is there. For an invite to listen, they see your Twitch name only if you used a one-use link and added Twitch. If one invites you to help on their profile, whether you have a listener pass is checked, and shown to them, when you accept, not when you are invited. If you help on someone's profile, its owner sees what you change there, with your email address while you help and as "a former helper" after. No other broadcaster or helper sees it.
- Anyone sees a broadcaster's public id, display name, linked channels, the links on their page (links marked 18+ are never shown to a signed-in account that is under 18 or has not told us its age), their picture and banner (a new one is not shown to an account that is under 18 or has not told us its age, or in the browser extension, until we have checked it), and (unless turned off) whether they are live.
- Your phone number is seen by no broadcaster, helper, or other listener, and no one can text you through Mix the Mix but us. Besides you, only the people who run Mix the Mix can see it.
- We, who run Mix the Mix, see all of the above, and keep an admin log of who looked at or acted on an account or profile, noting when that profile had blocked the admin who acted, so that another of us can check it was fair.
- Service providers, each for its part:
- Stripe: payments.
- Twitch: sign-in and channel checks.
- Discord: sign-in, and checking a listener is in a broadcaster's server when they add our bot.
- Google (YouTube Data API) and Kick: sign-in and a channel's public details.
- Resend (United States): email we send you.
- Sentry (United States): error reports.
- Laravel Cloud (United States): hosting.
- Cloudflare: delivers the app download and the site; sees your IP address and browser.
- Amazon Web Services (United States): our media server, and sending the texts to your phone.
- Microsoft: Store crash reports.
- Have I Been Pwned: checks that a new password has not appeared in a known data breach.
- Authorities. We report child sexual abuse material to the National Center for Missing & Exploited Children (NCMEC). [TO DECIDE: when we disclose information to authorities (#938)]
Only people who need it for their work can reach the information we keep, and only to fix problems or improve Mix the Mix. Where we can, we remove what identifies you first.
[TO DECIDE: whether the policy needs to say how information from outside the United States is covered (#938)]
How long things are kept
| What | How long |
|---|---|
| Counters, sessions, password resets, link codes, connect codes, the connection note, sync results | three days at most |
| Choice to be told when a broadcaster starts a broadcast | until you turn it off or delete your account |
| Notice from the extension | 25 hours at most |
| Extension link | until removed or you sign out everywhere; unused, 91 days at most |
| Remembered device | until you forget it or sign out everywhere; 31 days at most |
| Invite you used | to broadcast: until you set up your profile; to listen, and a broadcaster's invite links: until the alpha ends or the account is deleted |
| Place on the waitlist, or held by an invite sign-up | until you're invited, leave the waitlist, or confirm your address, a day after the link runs out, or your account is deleted |
| Invite to broadcast, never used | until used or withdrawn; unused, 60 days after it was last made |
| Helper invitation not accepted | a week |
| Note of what a helper changed | 12 months, or until the profile is deleted |
| Note that another broadcaster took your channel | about 30 days, or until you dismiss it |
| Report of a broadcaster profile | until we decide on it, then 12 months; sooner if your account or the profile is deleted |
| Report of a link or image | until we decide on it, then 12 months; sooner if your account or the profile is deleted |
| Sound sent with a report | until we decide on every report about that broadcast, then 30 days; a year from our report if we report it to NCMEC, and on a child safety report always until we decide whether to; longer if the law requires; an upload with no report filed, an hour; sooner if the profile is deleted, unless we keep it for NCMEC; if your account is deleted, only while another report about that broadcast still needs it or we keep it for NCMEC |
| Request to remove an image of you | until we decide on it, then 12 months |
| A block on a listener | until the broadcaster or a helper removes it, or the profile is deleted; the note tying it to an account also goes when that account is deleted |
| A link on your page | until you remove it or delete your account or the profile |
| A picture or banner on your page | until you replace or remove it, or delete your account or the profile |
| Record of a removed link or image (not content we report to NCMEC) | 12 months |
| Content we report to NCMEC | one year, or longer if the law requires |
| Fingerprint of a removed image, so it can't be uploaded again | no end date, including for an image we report to NCMEC after we delete our copy of it |
| Problem report | attached files, 30 days after the report is dealt with; the report, 12 months after it was sent; sooner if your account is deleted |
| Crash report | 30 days |
| Recommendation | 90 days after we handle it, or a year if we never do; sooner with the recommender's account |
| Totals for each broadcast | 24 months |
| Admin log entry | 12 months |
| Logs | site and host up to seven days (the host's record of requests includes your IP address, approximate country, and browser); media server up to 15; Sentry 30 days |
| Phone number | until you remove it or delete your account; a number you remove is deleted within a day |
| Emails we send, kept by our email service | 30 days |
| Service monitoring | seven days |
| Bare record of a deleted account; backups | up to 31 days; deleted data leaves backups within 7 days |
| Everything else | until you delete it or your account |
Deleting your account
You can delete your account on the Account page. That cancels what it pays for, refunds it (everything within 14 days of paying; after that, for a plan the hours you paid for and have not used, for a pass the hours left in the period you paid for, and nothing once 60 days have passed since paying, a limit that does not apply under 18), and removes everything kept with it. We keep:
- your broadcaster public id alone, and a bare record that the account existed;
- admin log entries about it, by account number only;
- any entry naming you on another broadcaster's list, theirs to remove;
- notes of what you changed on another broadcaster's profile while helping, kept for its owner until the profile is deleted or 12 months pass;
- sound you sent with a report, only while another report about that broadcast still needs it or we keep it for NCMEC, and for no longer than the time given above;
- invoices and payments (with your name, email, and billing address) in Stripe's records for tax.
If something on your profile is being looked into after a report, we may wait until that is dealt with before deleting your account.
Your rights
You can ask for a copy of your information, to correct it, or to delete it, by emailing matt@mixthemix.com or on the Account page. We don't sell your information or share it for advertising, so there is nothing to opt out of. Using a right never changes how we treat you.
[TO DECIDE: the legal basis wording and any state-law rights to name (#938)]
Children and teens
You must be at least 13 to have an account, and if you are under 18, a parent or guardian must agree to the terms and can write to us about their child's account at matt@mixthemix.com. If we learn that a user is under 13, we delete the account and its information. What stays is listed under Deleting your account: billing records the law requires, a bare record that the account existed, and admin log notes.
We ask your age only to keep the service suitable for minors (no 18+ material for anyone who is under 18) and to refuse, close, or block accounts of children under 13. We keep only whether you confirmed 18 or over or 13 to 17, for as long as the account exists. Our admin log keeps a note when an account tells us it turned 18, or is closed because it belongs to a child under 13, for 12 months. If you are 13 to 17 and tell us you are now 18, we change that one answer. If you are 13 to 17, you cannot add a phone number.
Chrome Web Store: Limited Use
The use of information received from the browser extension follows the Chrome Web Store User Data Policy, including its Limited Use requirements. Information from the extension is used only to provide and improve its single purpose, letting you mix a broadcaster's sources while you watch and telling you when a broadcaster you chose starts a broadcast. It is not transferred to anyone except as needed for that purpose or to comply with the law, not sold, not used for advertising or to decide anyone's creditworthiness, and not read by people except to keep the service secure, to comply with the law, or with your permission. The same applies to the Firefox version.
[TO DECIDE: confirm the Chrome Web Store Limited Use statement (#938)]
Changes to this policy
We post changed versions here with a new date, and email account holders at least 30 days before a material change takes effect.
Contact
Mix the Mix, LLC. Email: matt@mixthemix.com.
