Escape fromScreenPrivacy policy
How escapefromscreen.ru handles user data: who the operator is, what we collect, on what basis, how long we keep it and what you can do about it.
Revision of: 16 October 2026
General
This policy describes the processing of personal data on escapefromscreen.ru, including the streamer dashboard, viewers’ world pages and the OBS overlay (the Service). It is drawn up under Russian Federal Law No. 152-FZ of 27 July 2006 “On Personal Data”.
By using the Service and signing in with Twitch you confirm that you have read this policy and agree to data processing on the terms described here. If you do not agree, do not sign in with Twitch: without sign-in the Service collects nothing about you except anonymous visit statistics.
Operator
The personal data operator is the sole proprietor who owns the Service:
| Field | Value |
|---|---|
| Name | Sole proprietor Maksim Leonidovich Tereshchenko (Russia) |
| OGRNIP (state registration number) | 321385000108056 |
| INN (taxpayer number) | 381255609329 |
| Website | escapefromscreen.ru |
| Contact for data matters | The “Found a bug?” form in the footer of any page of the Service — messages reach the operator immediately |
What we process and why
| Data | When it appears | Why |
|---|---|---|
| Twitch profile: id, login, display name, avatar | When you sign in with Twitch | To create the account, show you in the dashboard and on the world page; for viewers — the nickname above their fighter on stream |
| Session: sid cookie | On sign-in | So you don’t sign in every time; lives 30 days, HttpOnly |
| Language: lang cookie; cookie consent | When you pick a language or press “Accept” | To remember the site language and not show the notice again |
| Game data: character, stash, raids, coins, level, world settings | As you play | The game itself: loot stays in the stash between streams |
| DonationAlerts: account id and name, access tokens; donations — donor nickname, message, amount, currency, time | When a streamer links DonationAlerts | Map events and coins for the donor; the donation log in the dashboard |
| Feedback: message text, page address, your account if signed in | When you write through the form | To reply and fix things |
| Visit statistics: pages, navigation, browser and device type | When you visit the site | To understand what gets read and where people stumble. Self-hosted Umami, no cookies, anonymised, not shared with third-party services |
We never receive passwords: Twitch sign-in and DonationAlerts linking go through OAuth on their sites. The Twitch token is not stored after sign-in. The Service collects no special categories of data (health, beliefs and the like) and no biometrics.
The Service does not ask for identity documents, phone number or address. Nor email: we do not request it from Twitch.
Legal basis and purposes
Data is processed to provide the Service: sign-in and account operation, viewers’ play on the streamer’s screen, donation events, replies to requests and site improvement. Grounds under Article 6 of law 152-FZ:
- The user’s consent, given by signing in with Twitch after reading this policy.
- Necessity for performing the agreement on using the Service to which the user is a party: the Service cannot work without the login and game data.
- The operator’s legitimate interest in protecting the Service from abuse — for technical server logs.
Processing is automated: collection, recording, storage, updating, use, anonymisation, deletion. No decisions with legal consequences are made on the basis of solely automated processing.
Twitch chat
We read commands in the streamer’s chat the same way a viewer without an account does. Messages are not stored: only the command addressed to the game is processed, everything else is discarded immediately.
How long we keep it
- Session — 30 days or until you sign out.
- DonationAlerts tokens — while the link is active; “Disconnect” in the dashboard deletes them immediately.
- Sign-in helper cookie (oauth_state) — 10 minutes.
- Feedback messages — until the matter is resolved, but no longer than a year.
- Profile, game data and the donation log — while the account exists. After account deletion the data is removed within 30 days; from backups — as they rotate, within 7 days.
Your rights
Under law 152-FZ you may at any time:
- Learn what data about you is processed and get a copy. Most of it is already visible in the dashboard and on the world page.
- Correct or update the data. Login, name and avatar are refreshed from Twitch on every sign-in.
- Withdraw consent and delete the account with all its data: write through the feedback form from the account to be deleted, or state the Twitch login.
- Revoke the app’s access on the Twitch and DonationAlerts side — the “Security & access” page explains how.
We reply to requests within 10 business days. If you believe your rights are violated, you may contact Roskomnadzor, the Russian authority for the protection of personal data subjects’ rights.
How we protect it
- The whole Service runs over HTTPS; the session cookie is HttpOnly and Secure.
- We request minimal permissions: none from Twitch, read-only from DonationAlerts.
- Only the operator has access to the server and the database, by key; the database is not reachable from the internet.
- Backups are made daily and kept for 7 days on the same server.
Changes to this policy
The current revision is always published at escapefromscreen.ru/en/privacy, with the revision date at the top. For significant changes — new kinds of data or new recipients — we update the policy before the changes take effect and note them in the project changelog. Continued use of the Service after a new revision is published means you accept it.