Trust & Security

Accounts are protected by email and password sign-in, with optional Google single sign-on. Sessions are managed by our authentication provider using signed access tokens.

Administrative capabilities are restricted to users with an explicit admin role, which is stored and verified on the server — never based on anything the browser can change.

Application data is stored in a managed PostgreSQL database with row-level security enabled. Access rules are enforced on the server so each person can only read and modify the records they are permitted to.

Sensitive operations run through server-side logic that re-checks the signed-in user on every request, rather than trusting client-side state.

StreamBroadcaster runs on Lovable Cloud, which provides managed hosting, database, authentication, file storage, and serverless functions. Traffic is served over encrypted HTTPS connections.

We collect the information needed to operate the service — such as your account details, content you create, viewing and engagement activity, and order information when you make a purchase. This data is used to deliver and improve the broadcast experience.

We rely on trusted third-party providers to operate, including our hosting and database platform and payment processors for shop checkout. These providers process only the data required to perform their function.

We use cookies and local browser storage to keep you signed in and to remember your preferences. Aggregate viewing metrics help us understand how content performs.

Your data is retained for as long as your account is active. If you would like a copy of your data or want your account and associated data deleted, contact us using the details below and we will assist.

If you believe you have found a security vulnerability or have a privacy request, please reach out to our team. We take reports seriously and will respond as quickly as we can.