Privacy notice.

Version 26 October 2026

This notice applies to donolink.co.uk and to DonoLink's accounts, public tip pages, payments, dashboards, overlays, support, waitlist and stream integrations for creators and tippers in the United Kingdom. It explains which personal data we process, why, for how long, and what choices and rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Because DonoLink is established in the Netherlands, the EU General Data Protection Regulation (EU GDPR) also applies to our processing.

1. Who is responsible?

Tovix, trading as DonoLink, a sole proprietorship established in Eindhoven, the Netherlands (Dutch Chamber of Commerce 98227475, VAT NL005316890B06), is the controller for the DonoLink processing described in this notice. DonoLink is established only in the Netherlands and has no establishment in the United Kingdom. Contact: info@donolink.nl. DonoLink is not responsible for processing for which a creator, Stripe, a bank, payment method or connected streaming platform independently determines the purposes and means; that party is the controller under its own privacy terms. DonoLink remains responsible for its own selection of, and disclosures to, such parties to the extent data protection law requires.

2. What data we process and where it comes from

Account and profile data: name, email address, username, password hash, verification status, profile image and banner, bio, language, country, currency, social channels, settings, two-factor status and an encrypted or restricted authentication secret. We receive these from you or from a social login provider you choose.

Tip and payment data: name or nickname, message, amount, currency, payment method, status, time, transaction IDs, terms version and time of acceptance, and your email address if you enter it for a tip confirmation or because the creator asks for it. Full payment, identity and bank details, such as a card number or the bank account you use with Pay by Bank, are processed directly by Stripe; DonoLink does not store a full card number, bank account number or identity document.

Content and communications: public profile content, alert media, media requests, import data, support tickets, emails and information in reports, complaints, refunds or disputes.

Streaming integrations: account and channel IDs, display name, OAuth tokens and scopes, connection status and visible live events from Twitch, Kick, YouTube, TikTok or Streamlabs, such as name, chat message, follow, subscription, gift, bits, raid, Super Chat or membership. Import keys are used only to carry out the selected import and are not stored as profile data.

Referral data: the referral code you signed up with, the time, the referrer and an encrypted hash of your IP address at sign-up (never the IP address itself); for referrers also their own code, the percentage, hashed IP addresses of recent visits, commission entries per tip (platform fee in the tip currency and in euro, percentage, amount, status and Stripe payment reference), the outcome of the abuse check and payouts with reference.

Technical and usage data: IP address, country code, known login locations and security events, for security. For limited server statistics, we measure product milestones such as account creation, onboarding, connected features, tips and payouts under a non-reversible pseudonym; PostHog does not receive an email address, raw account ID or browser IP address for this layer. Only after you consent do we measure visited pages, clicks, referrer and UTM source, browser and device data and masked session recordings on product pages in the browser.

Waitlist and contact: email address, reserved username, limited source and referral information, referral code and correspondence. We may also receive data from a creator, payment provider, bank, platform or competent authority where needed for support, security or a dispute.

3. Purposes and lawful bases

• Contract: to provide the account, profile, tip flow, dashboard, overlays, imports, integrations and support; without the required data we cannot provide that feature.
• Legal obligation: to comply with record-keeping, tax and other legal duties, orders of competent authorities and applicable financial or sanctions obligations.
• Legitimate interests: to secure the service, prevent misuse, fraud and chargebacks, keep evidence, handle claims, investigate failures, send a limited number of service reminders to finish connecting Stripe (you can unsubscribe in every reminder) and use limited pseudonymised server statistics to improve how the product works, activation and reliability. The statistics layer does not create session recordings, use browser tracking or build a PostHog person profile. We balance these interests against your privacy, limit the data and respect a reasoned objection.
• Consent: for optional emails you switch on yourself, such as the stream overview, for detailed PostHog browser analytics, dead-click analysis and masked session recordings, and wherever else we expressly ask for it. Withdrawing consent immediately stops new browser analytics, applies to the future and does not make earlier processing unlawful.
• We rely on vital interests or a task in the public interest only in exceptional situations permitted by the UK GDPR. We do not use personal data for credit scoring or sell it to data brokers.
• Abuse check for the partner programme (legitimate interest: fraud prevention): we compare whether a referrer and a referred creator use the same bank account (through a fingerprint calculated by Stripe, not the account number), the same person or company (name and date of birth from Stripe verification), the same email address, the same browser or the same network. We keep only the outcome and hashed IP addresses; if they match, the commission lapses. A staff member reviews doubtful cases.

DonoLink does not sell or rent personal data and does not use Google or YouTube data for advertising, profiling or sale.

4. Recipients and roles

We share only the data that is necessary, with:

• Stripe and the relevant banks and payment methods (such as card networks, Apple Pay, Google Pay, Pay by Bank and Revolut Pay) for onboarding, identity checks, payments, fees, payouts, refunds, fraud and disputes; Stripe also processes data under its own privacy policy (stripe.com/privacy).
• the selected creator: the name, message, amount, time and status of a tip and, if you entered it, your email address, for receipts, alerts, statistics and handling questions; never a full payment instrument or bank account number.
• hosting, network and security providers (including content delivery and protection against attacks) and storage and email providers that run DonoLink's infrastructure; Anthropic when you ask Linky, the AI assistant in the dashboard, a question: we then send your question, up to two of your previous questions and a short summary of your account setup (such as display name, tip link, whether Stripe is ready and the number of paid tips), never your email address, payment details or passwords; and, for reading alerts aloud (text-to-speech, when the creator switches it on), Microsoft for the natural voices and our own voice server for the studio voices. Only the text to be read aloud is sent, such as the tipper's name, amount and message.
• PostHog, for limited pseudonymised server statistics without a person profile and, only after consent, browser analytics and masked session recordings. PostHog processes this data on servers in the United States (see section 5). In session recordings, on-screen text such as buttons and messages is readable; names, messages, email addresses, amounts and keys are masked. Entered text, form values, payment fields and OBS and QR pages are not recorded.
• Google/YouTube, Twitch, Kick, TikTok and Streamlabs when you activate such an integration. To connect your YouTube account, DonoLink requests youtube.readonly to read channel information, live streams, live chat and live events. Only when you separately authorise stream title changes does DonoLink also request youtube.force-ssl. This lets DonoLink change your active stream's title when you give a command to do so. The separately connected YouTube bot uses youtube.force-ssl to post chat messages according to your bot settings and, with the required channel permissions, to delete messages or temporarily ban viewers from chat.
• advisers, insurers, public authorities, regulators, law enforcement or a successor business, but only on a valid basis, to the extent necessary and with confidentiality where appropriate.
• the referrer who invited you: your username, sign-up date, the end of the commission period and the commission your tips generate. If your leaderboard is off, the referrer only sees you anonymously and without an amount. The referrer never sees tippers, messages or your balance. Lawful basis: performance of the partner programme and our legitimate interest in a verifiable commission calculation.

We enter into appropriate agreements with processors, and they may process data only on our instructions. A recipient that independently determines purposes and means, such as Stripe for regulated payment services, a bank, payment method, creator or streaming platform, is separately responsible for the lawfulness, transparency, security, retention and rights in its own processing. A request to DonoLink does not automatically delete or correct data held by such an independent party.

5. International transfers

DonoLink is established in the Netherlands, so your personal data is transferred from the United Kingdom to the European Economic Area (EEA); UK law recognises the EEA as providing an adequate level of protection. Some providers or connected platforms also process data in the United States or other countries, including PostHog (analytics, servers in the United States), Anthropic (questions to Linky) and Microsoft (natural voices for text-to-speech). Where UK data protection law requires it, we rely on UK adequacy regulations, including the UK Extension to the EU-US Data Privacy Framework for a certified recipient that has joined it (such as Microsoft), or on contractual safeguards recognised under UK law, such as the European Commission's Standard Contractual Clauses together with the UK International Data Transfer Addendum (as in the processing agreement with Anthropic), with supplementary measures where needed. You can request information about the mechanism used for a provider, or a copy of the relevant safeguards, via info@donolink.nl.

6. Retention periods

• Account, profile, settings and active OAuth integrations: while the account or integration is active; after deletion, generally within 30 days from active systems.
• Financial administration, fee invoices and necessary transaction data: up to 7 years after the relevant financial year, or longer where the law or an ongoing dispute requires it.
• Terms and payment evidence and files about fraud, refunds, chargebacks and claims: as long as needed for the purpose and no longer than the applicable statutory limitation or dispute periods.
• YouTube OAuth data: until you disconnect; we then revoke the token and delete the integration. Derived YouTube event details: no more than 30 days. Deletion at DonoLink does not change data held by YouTube itself.
• Other stream events and import history: while needed for statistics the creator asked for and for providing the service, or until the account is deleted; real-time overlay messages are normally deleted within 5 minutes.
• Support tickets, reports and correspondence: while the request or account is active and afterwards only while needed for a contract, complaint, claim or legal duty. Questions to Linky and the answers: 12 months, after which we delete them automatically. Waitlist data: until you withdraw, the waitlist entry becomes an account or the waitlist purpose ends.
• Security data: failed-login and incident data while needed for security or an investigation; known login locations remain as a limited rolling list with the active account and are deleted with the account. PostHog data follows the retention period set for the PostHog project and is deleted earlier when no longer needed.
• Referral and commission data: for as long as the partnership or commission period runs and then 7 years because of the statutory tax retention duty; hashed IP addresses for at most 90 days; the referral cookie for at most 30 days and the referrer cookie for at most 1 year.

Backups may remain isolated for a short period and are overwritten according to the backup cycle. Deletion does not apply to data we must legally keep; such data is restricted and used only for that purpose.

7. Public data and the creator

A creator's profile, avatar, banner, bio, social links and uploaded overlay media are meant to be shown publicly. For a tip, the name or nickname, message, amount and time may appear on the selected creator's tip page, leaderboard and stream alert. Do not provide information you do not want to be public. Once a creator selects, downloads, combines, publishes or uses received data outside DonoLink for their own purposes, that creator independently determines that processing. The creator must then have their own valid lawful basis and privacy information, handle requests to exercise rights, apply appropriate security, keep data no longer than needed and not disclose sensitive or unnecessary data. DonoLink is not responsible for such independent, unauthorised or terms-breaching use by a creator, except where the law places a separate duty on DonoLink. Direct a request about such use to the creator as well.

8. Cookies, local storage and analytics

DonoLink uses necessary storage for the login session, language, theme, security and OBS settings you choose. In addition, server processes send limited product milestones to PostHog under a secretly derived pseudonym on the basis of legitimate interests; this layer uses no browser tracking, browser IP address, email address, raw account ID, session recording or PostHog person profile. Detailed browser analytics, dead-click analysis and masked session recordings start only after you actively consent; refusing does not affect your access to the service. The browser layer uses in-memory storage, masks text and inputs, records no iframes, headers or bodies and does not run on OBS or QR pages. You can withdraw consent just as easily through Cookie settings in the footer; the open page then immediately stops new browser analytics and session recordings. You may object to the limited server statistics on grounds relating to your particular situation via info@donolink.nl.

If you follow a referral link (/r/...), we set a functional first-party cookie (donolink_ref, 30 days) containing only the code, so we can link the invitation when you sign up; we delete it after sign-up. Referrers get a functional cookie (donolink_ref_eigen, 1 year) that recognises their own browser, so they cannot invite themselves. Neither is used for tracking or advertising.

9. Security and data breaches

We use measures including TLS, restricted tokens and sensitive fields, access controls, two-factor authentication, rate limits, logging and payment status checks. No internet service can guarantee absolute security. Users remain responsible for secure devices, unique passwords, two-factor protection and keeping tokens and links confidential. If a personal data breach occurs for which DonoLink is responsible, we investigate and contain the impact and notify the Information Commissioner's Office (ICO), the Dutch Data Protection Authority and affected individuals where the law requires it. Report a suspected security issue, without exploiting it, via support@donolink.nl. The liability provisions in the terms apply to the extent they do not conflict with your mandatory data protection rights.

10. Your rights under the UK GDPR

Depending on the circumstances, you have the right to:

• access your personal data and receive a copy;
• have inaccurate data rectified or incomplete data completed;
• erasure or restriction of processing, unless an exception or retention duty applies;
• data portability for data you provided, where processing is automated and based on consent or contract;
• object, on grounds relating to your situation, to processing based on legitimate interests, and always object to direct marketing;
• withdraw consent for the future;
• complain to the Information Commissioner's Office (ICO), the UK data protection regulator; because DonoLink is established in the Netherlands, you can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Send a request to info@donolink.nl. We normally respond within one month. For complex or numerous requests, the law allows us to extend this by two further months, and we will tell you within the first month. We may ask for proportionate identity verification and may refuse, or charge a reasonable fee for, manifestly unfounded or excessive requests.

11. Automated decisions

DonoLink does not make decisions based solely on automated processing that have legal or similarly significant effects for you. Technical fraud, security and payment checks may temporarily block a login or a new payment. You may ask for human review via support@donolink.nl. Stripe, banks and payment methods may carry out their own automated checks under their terms and privacy notices.

12. Children

DonoLink is not intended for children. A creator account is for people aged 18 or over, a tipper under 18 needs permission from a parent or guardian, and children under 13 must not use DonoLink. We do not knowingly process the personal data of children under 13. If you believe we process a child's data without valid involvement of a parent or guardian, let us know via info@donolink.nl and we will delete it where appropriate.

13. Changes

We may update this notice when the service, our providers or the law changes. The current version and date appear on this page. We notify account holders of material changes in an appropriate way before or when they take effect. New processing that requires consent will not start without that consent.

14. Contact and complaints

Privacy questions or requests: info@donolink.nl. You also have the right to complain to the Information Commissioner's Office at ico.org.uk, and to the Dutch Data Protection Authority at autoriteitpersoonsgegevens.nl. We would appreciate the chance to deal with your concern first.