1. Introduction

   CEOBONK is a Twitch Extension by Hammertime e.U. ("we", "us", "our") that lets viewers bonk a hammer on a stream, play short minigames and spawn targets on the stream for everyone. It runs as an overlay on the video on Twitch's website and as a mobile extension in the Twitch app. This Privacy Policy explains what data the extension processes, why, and what rights you have.
   
   You do not need an account with us to use CEOBONK, and we never ask for your name, email address or any other contact details. Most of what the extension does happens in your browser or the Twitch app on your device. The only data that reaches us are the receipts of Bits transactions, which Twitch sends us, as described below.
   
   If you have any questions about this policy or your data, please contact us at hello@hammertime.studio.
   
   

2. Data on Your Device

   The extension saves a few settings in the local storage of its own frame on your device:
   
   - Your volume setting and whether you turned the extension off
   
   - The hammer you picked
   
   - Your best score in each minigame
   
   This data does not leave your device and is not sent to us. The extension uses no cookies, no analytics and no advertising.
   
   

3. Data From Twitch

   When the extension loads, Twitch provides it with an anonymous identifier for you, your role on the channel (for example viewer or broadcaster), the channel's id and a short-lived token. The extension uses them in your browser only, they are not sent to us.
   
   With that token, the extension reads the channel's public profile picture and custom emotes from the Twitch API, to show them as targets. These requests go directly from your device to Twitch.
   
   Some hammers are for subscribers of the channel. To unlock them, the extension asks Twitch whether you subscribe to the channel. Twitch only answers if you choose to share your identity with the extension, using Twitch's own prompt, and if the broadcaster allowed the extension to see subscription status. The answer is only used in your browser to unlock the hammers, it is not stored or sent to us. You can revoke shared identity at any time in your Twitch settings under Connections.
   
   Twitch's own handling of your data is described in the Twitch Privacy Notice (twitch.tv/p/legal/privacy-notice).
   
   

4. Bits Transactions

   Minigames and spawns can be paid for with Bits, Twitch's virtual currency. The purchase is made with Twitch under Twitch's terms; we never receive your payment details.
   
   For every Bits transaction in CEOBONK, Twitch sends a receipt to our server (firestarter.hammertime.studio). It contains:
   
   - The transaction id and time
   
   - Your Twitch user id, login name and display name
   
   - The channel's Twitch user id, login name and display name
   
   - The product you used Bits for and its price in Bits
   
   We store each receipt to process every transaction exactly once and to keep a record of the transaction as tax and accounting law requires.
   
   When you spawn targets, Twitch also sends the transaction, including your display name, to the extension of every viewer of the channel, so the targets appear for everyone; in the Twitch app, the extension shows a short notice with your display name. If the broadcaster allowed chat messages for the extension, our server posts one message to the channel's chat with your display name, the Bits amount and what you spawned, for example "🫧 viewer used 125 Bits to spawn 5 bubbles on stream!". Minigame purchases are not announced.
   
   

5. Why We Process Your Data

   - Processing and recording Bits transactions: to provide what you paid for (performance of our agreement with you, Art. 6(1)(b) GDPR) and to meet our tax and accounting obligations (Art. 6(1)(c) GDPR)
   
   - Announcing spawns in chat and to other viewers: our legitimate interest in showing everyone on the stream what happened, which is what spawns are for (Art. 6(1)(f) GDPR). Broadcasters can turn chat messages off
   
   We do not sell your data, and we do not use it for advertising, profiling or automated decisions that affect you.
   
   

6. Who Receives Your Data

   - Twitch, which runs the extension platform, Bits and chat
   
   - The channel's viewers and chat, for spawns, as described above
   
   - The provider hosting our server, which processes the receipts on our behalf
   
   We do not pass your data to anyone else, except where we are required to by law.
   
   

7. Data Retention

   The settings on your device stay there until you clear your browser's site data or the Twitch app's data.
   
   Transaction receipts are kept for as long as tax and accounting law requires us to keep records of transactions, usually seven years. Chat messages stay in the channel's chat as Twitch keeps them.
   
   

8. Your Rights

   Under the General Data Protection Regulation (GDPR) and other applicable privacy laws, you have the right to:
   
   - Access the personal data we hold about you, and receive a copy of it
   
   - Have inaccurate data corrected
   
   - Have your data erased, unless we must keep it by law
   
   - Restrict or object to its processing, including processing based on our legitimate interest
   
   - Data portability
   
   - Lodge a complaint with a supervisory authority; in Austria, this is the Austrian Data Protection Authority (Datenschutzbehörde)
   
   To exercise any of these rights, please contact us at hello@hammertime.studio and include your Twitch login name, so we can find your transactions.
   
   

9. Data Deletion

   - Settings on your device: clear the extension's site data in your browser, or the Twitch app's data on your phone
   
   - Shared identity: revoke it in your Twitch settings under Connections
   
   - Transaction receipts: email hello@hammertime.studio with your Twitch login name. We delete everything we do not have to keep for tax and accounting law
   
   

10. Children's Privacy

    CEOBONK is made for Twitch's audience and is not directed at children under 13; Twitch itself requires users to be at least 13. We do not knowingly collect personal data from children. If you believe a child has given us data without the consent required in their country, please contact us and we will delete it.
    
    

11. Security

    All data the extension and our server exchange with Twitch travels encrypted (HTTPS). The extension asks for no device permissions and does not access your contacts, photos, location, camera or microphone.
    
    

12. Who Is Responsible

    The controller responsible for processing your data is Hammertime e.U., hello@hammertime.studio. Further company details are listed in our imprint.
    
    

13. Changes to This Privacy Policy

    We may update this Privacy Policy, for example when the extension gains new features. Changes take effect once they are posted on this page, and the version date below changes with them.
    
    

Version 23.10.2026