Privacy policy

1. Who is responsible
Ghaith Al-Darwash, Goebenstraße 3, 65195 Wiesbaden, Germany
E-mail: chatarena.support@proton.me

2. This website
This website uses no cookies, no tracking, no analytics and no social media plugins. Fonts, pictures and videos are loaded from this website itself, not from third parties.

3. Hosting
This website is hosted by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (Cloudflare Pages). When you open a page, Cloudflare processes technical data such as your IP address, the date and time, the page you open, your browser and the referring page, to deliver the website and keep it secure. Cloudflare processes this data on our behalf under a data processing agreement; data may be processed in the USA. Cloudflare is certified under the EU-U.S. Data Privacy Framework. Legal basis: Art. 6 (1) (f) GDPR (our interest in a secure, working website).

4. Buying ChatArena
Purchases are handled by Gumroad, Inc. (USA) as the merchant of record. Gumroad processes your payment and order data as its own controller under its privacy policy: gumroad.com/privacy. From Gumroad we receive your name, e-mail address, country, the order details and the TikTok username you enter at checkout. We use them to deliver ChatArena and your license, to help you, and to keep records required by law. Legal basis: Art. 6 (1) (b) and (c) GDPR. We keep this data as long as the law requires.

5. The license check in the ChatArena app
When you enter your license key in the ChatArena app, the app sends the key to Gumroad's license service (api.gumroad.com) to check it. Gumroad answers whether the key is valid and with the TikTok username from your purchase. The app saves your key and username only on your PC (in your Windows user folder). This data is not sent to us. Legal basis: Art. 6 (1) (b) GDPR.

6. Your LIVE and Roblox in the app
To run the games, the app connects to your TikTok LIVE and reads public LIVE events such as viewer names, chat messages, likes and gifts. For this connection it uses a signing service (Euler Stream). The games load the public Roblox avatars of your viewers from Roblox. All of this happens on your PC; nothing is sent to us. Legal basis: Art. 6 (1) (b) GDPR.

7. E-mail
If you write to us, we use your message only to answer it. Our mailbox is hosted by Proton AG, Switzerland. We delete your messages when they are no longer needed, unless the law requires us to keep them. Legal basis: Art. 6 (1) (b) and (f) GDPR.

8. Your rights
You have the right to access (Art. 15 GDPR), correction (Art. 16), deletion (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing (Art. 21). To use these rights, write to the e-mail address above. You also have the right to complain to a data protection supervisory authority, for example Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Wiesbaden.

Last updated: 1 November 2026