Privacy Policy

1. In short

• We keep only what is needed for your page to work.
• We do not sell data, we do not run ads and we do not use third-party analytics tools (like Google Analytics).
• For people who visit pages, we only keep the country and device type, with no IP address.
• You can view, correct or delete your data at any time.

2. Data controller

Daniel Souza dos Santos (TeksFix), Portuguese tax number (NIF) 311018858, Rua 25 de Abril, 423, 2.º Esq. Frente, 4415-079 Perosinho, Vila Nova de Gaia, Portugal, phone +351 928 324 174. Privacy contact (also the data protection officer channel for LGPD purposes): [email protected].

3. What data we collect

If you have an account:

• Account data: email, password (stored hashed; we can never read it), nick, display name, full name (private), country, date of birth (to know whether a parent's permission is needed; never public), language, theme preferences and sign-up date.
• Page content: bio, photo, banner, background image, links, gamertags, support links, Setup items and images, Custom HTML code and images, and appearance options.
• Referral: if you reach MyTag.Live through another user's page, link or code, we store on your account who referred you (only that person's account, nothing else). It is used for statistics and, for partners, to pay them a commission. We do not use cookies for this: the referral is only kept during your visit.
• Connected accounts: if you log in with Google, Discord or Twitch, we receive that account's ID and username and, if the platform provides it, the email address. We never receive your password for those platforms.
• Live and online status: if you have the Pro plan, to show on your page that you are live or playing, we check public data on the platforms of your links: Twitch, Kick and YouTube (whether the channel is live, title and game), Steam (whether you are online and the game) and, if you choose, Rumble (with the Live Stream API URL you paste, stored encrypted) and Discord (through the Lanyard service, only if you join its server). We keep only the latest status, for a few minutes. You can turn each platform off in Panel › Live.
• Payments: plan bought, amount, payment method, date, MB WAY mobile number and, for ages 13 to 17, the guardian authorisation confirmation. Card details are entered in PayPal's secure systems and never reach us. With each payment we also keep proof of the confirmation given at checkout (date, time, IP address, browser and accepted text). To allow only one free trial per person, we keep an irreversible code (hash) of the email, even after the account is deleted.
• Billing details: asked at your first purchase, to issue the invoice: name or company name, country, tax ID (optional for individuals; stored encrypted), address (companies only) and, if you want, a WhatsApp number so we can contact you about your account or payment. We keep a copy with each payment, as tax law requires.
• Creator profile (optional): where you stream, main games and approximate follower count. Helps us understand who uses the service and pick creators for the showcase and partnerships.
• News by email: if you opt in, we store that choice and the date.
• Plan and requests: plan, dates, offers received and requests made to support.

If you visit a MyTag.Live page: we count the visit and clicks with the country (provided by Cloudflare), the device type (phone, computer or other) and the date. We do not store your IP address or build visitor profiles.

Security: to stop abuse (for example, repeated login or sign-up attempts), we keep the IP address linked to those attempts for no more than 24 hours.

Reports: if you report a page, we keep what you write and, if you provide it, your email address.

4. Why we use data and on what legal basis

• Creating and running your account and public page: performance of a contract (GDPR art. 6(1)(b); LGPD art. 7, V).
• Sending service emails (email confirmation, password reset, account and plan notices): performance of a contract.
• Visit and click stats for the page owner: legitimate interest in offering these stats, with minimal data and without identifying visitors (GDPR art. 6(1)(f); LGPD art. 7, IX).
• Security, fraud and abuse prevention, and content moderation (including reports and Custom HTML approval): legitimate interest and, where applicable, legal obligations.
• Issuing invoices and keeping payment records: legal obligation (tax law).
• Sending news and offers by email: only with your consent (GDPR art. 6(1)(a); LGPD art. 7, I), which you can withdraw any time in Panel › Account.
• Complying with the law and responding to requests from authorities: legal obligation (GDPR art. 6(1)(c); LGPD art. 7, II).

We do not make automated decisions with significant effects on you. The Custom HTML filter removes code that is not allowed, but final approval is done by a person.

5. What is public

Your page is public by nature: everything on it (nick, name, bio, images, links, gamertags, Setup, your country if you show the flag, and LIVE status) can be seen by anyone and found by search engines. Your email, stats and account settings are never public.

6. Who we share data with

We do not sell or rent data. We use these service providers, which process data only on our behalf and with the safeguards required by law:

• SaveInCloud (SaveinCloud Hospedagem na Internet Ltda., Brazil): server, database and email sending. Data is stored in data centers in Brazil.
• ifthenpay (Portugal): MB WAY payments.
• PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg): card and PayPal payments.
• Mercado Pago (Brazil): PIX payments.
• Cloudflare (United States, global network): site protection and acceleration, and image storage (photos, banners, Setup and Custom HTML).
• Kick, YouTube (Google), Steam (Valve), Rumble and Lanyard (United States): only to check whether you are live or online, when you turn that feature on.
• Google, Twitch and Discord (United States): only if you choose to log in with those accounts, and Twitch also for LIVE status.

We may also share data if the law requires it or to defend legal rights in a dispute.

7. Transfers outside the European Economic Area

Some data is processed outside the European Economic Area:

• Brazil: based on the European Commission adequacy decision for Brazil of January 2026 (GDPR art. 45).
• United States: based on the EU-U.S. Data Privacy Framework for participating companies and/or the standard contractual clauses approved by the European Commission (GDPR art. 46).

8. How long we keep data

• Account and content: for as long as the account exists. When you delete your account, we delete everything immediately, including images. Backups are replaced within 30 days.
• Visit and click stats: the daily detail (date, approximate country and device type) is kept for 12 months and then deleted automatically. The total click count of each link is kept for as long as the account exists.
• Security IP address: up to 24 hours.
• Old nick: reserved for 30 days after you change it.
• Confirmation and password reset links: expire after 48 hours and 1 hour, respectively.
• Reports: up to 12 months after being resolved, unless the law requires keeping them longer.

9. Your rights

You have the right to access, correct, delete and restrict the processing of your data, to object to processing based on legitimate interest and, where applicable, to withdraw consent. We explain everything, and how to use these rights, in Your rights.

10. Children and teenagers

Accounts of children under 13 are only active with permission from a parent or legal guardian, given by the guardian themselves through a link sent to their email (they enter their name and confirm they are an adult). We keep the name, email and date of the permission. The guardian gets a copy of receipts and plan-ending reminders and can suspend permission at any time with the same link: the page goes offline, but nothing is deleted right away; the account is only deleted after 60 days without new permission. The same applies if the guardian declines the request. Without a reply within 7 days, the account is deleted. These accounts are not featured on the home page. Between 13 and 18, permission from a parent or guardian is required. Parents and guardians can contact us at [email protected].

11. Security

We use encrypted connections (HTTPS), strongly hashed passwords, protection against repeated attempts, request verification (against CSRF attacks) and a filter that blocks malicious code on pages. No system is 100% secure: if a data breach affects you, we will notify you and the authorities as the law requires.

12. Cookies

We only use essential cookies. The details are in the Cookie Policy.

13. Changes to this policy

If we change this policy significantly, we will notify you by email or in the dashboard before the change takes effect.