01 / Scope
One account, clearly separated product data.
This policy applies to the fKeyLabs website, the shared fKey Account service at auth.fkeylabs.com, and account features used by [f]Stream, [f]Relay, [f]Clip, [f]Chat, and [f]Playback Cloud.
Signing in is optional unless you use an account-only feature such as an entitlement, cloud resource, provider connection, synced setting, or approved app session. Local recordings, [f]Clip projects, exports, and [f]Chat channel choices remain on your device unless a product names and asks you to enable a specific sync or backup feature.
02 / Data we handle
The account stores only what its features need.
Name, email address, internal account ID, provider account identifiers, and connected-provider names.
Provider credentials used for shared Account connections stay in the identity service. Product apps receive opaque, product-scoped Account sessions. Connections made separately inside Playback Cloud use the protected station services described below.
Global preferences, provider connections, subscription entitlement, billing-verification metadata, usage totals, approved devices, and revocable web, mobile, or product sessions.
[f]Stream settings snapshots, relay usage, chat source records, privacy choices, and recording-backup metadata only when the related account feature is used.
Sign-ins, sign-outs, connection changes, app approvals, preference updates, and session revocations. Activity excludes passwords, tokens, IP addresses, and full browser identifiers.
03 / How data is used
Data supports identity, product operation, and security.
- Authenticate you and attach Google, Twitch, or Kick sign-in methods to one fKey Account.
- Approve app sessions and return the correct product entitlement, limits, preferences, and connection status.
- Configure provider features you request, such as stream destinations, chat access, or a recording backup.
- Verify Stripe or grandfathered Google Play [f]Stream subscriptions, process shared fKey Credit purchases, complimentary adjustments, usage, and reversals, and report account-wide usage against effective product levels.
- Protect the service, rate-limit abusive traffic, investigate failures, and show privacy-safe account activity.
fKeyLabs does not sell personal information. The website does not currently use behavioral advertising or third-party analytics. Advertising inside a product, where present, follows that product’s consent controls.
04 / Connected providers
You choose every external connection.
Initial Google, Twitch, or Kick sign-in requests basic identity only. Additional YouTube, Drive, streaming, chat, or moderation scopes are requested later when you explicitly connect a product feature, such as Enable product access in Account Connections or Connect YouTube in [f]Playback Cloud. Provider credentials are used only for the connection and product features you authorize. You can disconnect a provider from Account Connections or revoke access in that provider’s own security settings.
Google Drive recording backup uses file-specific Drive access to create and manage [f]Stream backup files you choose; it does not read unrelated Drive files. Stripe is the billing provider for new web purchases, while Google Play remains the provider for grandfathered store subscriptions. Provider services process data under their own privacy terms.
Playback Cloud / Hosted station data
Playback uses a separate hosted player and station connections.
Playback Cloud stores your selected playlist and media identifiers, queue order, playback position, station settings, connection status, and operational records needed to run and recover the station.
Google player sign-in takes place directly in Google inside your private station browser. That browser can retain session cookies and other browser-profile data needed for playback. Remembering the player session saves an encrypted profile backup in the Playback service so it can restore the session to a replacement station. The running browser uses the restored session data to play media.
A Twitch connection made inside Playback Cloud is separate from shared Account sign-in. Playback stores that connection's access and refresh credentials and its destination information in encrypted station-service storage, and uses them for the Twitch features you authorize. Encryption protects stored backups and credentials; the Playback service can decrypt them when needed to operate your station. It does not prevent the service from accessing a session it must restore or use.
Playback station services use Vultr hosting and fKey-operated controller storage; shared Account services use Cloudflare. Google and Twitch receive the sign-in, media, and broadcast data needed for the connections you request and process it under their own terms. Media delivered to Twitch, including any VOD, remains subject to Twitch and your channel controls.
Use the player-session and Twitch controls inside Playback to disconnect those station connections. Disconnecting a shared Account provider is a separate action. Cleanup removes the stored station credentials and remembered profile when it can verify completion; encrypted retry information may remain protected while provider cleanup is unresolved. Account deletion waits for verified billing and station cleanup. For help, contact fKey Labs without sending passwords, session cookies, tokens, or stream keys.
05 / Storage and retention
Account data lives with the service that operates it.
The identity service uses Cloudflare infrastructure for account records and, when selected, [f]Stream Cloud recording objects. Google Drive backups remain in your Google Drive. Direct-download apps keep local media and product data on your device by default.
- Account activity is retained for up to 180 days.
- Provider connections remain until you disconnect them, delete the account, or the provider invalidates them.
- Approved app sessions expire or remain until revoked, depending on their issued lifetime.
- Account, subscription, usage, settings, and backup records remain while the account or related feature is active, then are deleted or retained only where required for security, billing integrity, or law.
06 / Your choices
Export, disconnect, revoke, or delete.
The account dashboard lets you download a protected JSON export, disconnect providers, revoke individual sessions, revoke every other session, change global preferences, and permanently delete the account.
Deletion removes the shared identity and account-owned cloud records. A Stripe subscription that can still renew must be cancelled in the billing portal first; deletion does not cancel Google Play billing or erase files stored locally or in your Google Drive. Review the exact process on the Account deletion page.
07 / Changes
Material changes will be dated and surfaced.
This page shows its effective date. If a change materially affects how account data is used, fKeyLabs will update the policy version and surface the new terms through an appropriate account or product notice before relying on new optional processing.
Privacy or legal requests should use the self-service account controls first. If you cannot sign in, use the support channel shown in the official store or download listing for the fKey product you use.