Legal

Privacy Policy

Effective Date: April 30, 2026  ·  Last Updated: April 30, 2026

1. Introduction

Stronghold Labs, Inc. (“Stronghold Labs,” “we,” “us,” or “our”) operates Slipstream, an AI-powered video processing platform available at beta.strongholdlabs.io (the “Service”).

Slipstream enables authenticated users to submit video URLs from platforms such as Twitch, YouTube, and Kick—or direct HLS links—and receive AI-generated highlight clips through a web interface. The Service also supports live stream monitoring, media distribution to connected social platforms, and a personal media vault.

This Privacy Policy explains what information we collect, how we use and protect it, and what choices you have. By accessing or using the Service, you agree to the collection and use of information as described in this policy.

2. Information We Collect

2.1 Account Information (via Google Sign-In)

We use Google OAuth 2.0 for authentication. When you sign in, we receive and store the following from your Google account:

  • Your name
  • Your email address
  • Your Google profile picture URL
  • A unique Google account identifier

We request only the openid, email, and profile scopes from Google.

2.2 User-Submitted Content

When you use the Service, you may provide:

  • Video URLs from Twitch, YouTube, Kick, or direct HLS manifest links
  • Video files uploaded to your personal Vault
  • Configuration preferences such as AI prompt settings, highlight parameters, and processing options

2.3 Connected Platform Data

If you choose to connect third-party platforms for media distribution or import, we collect and store OAuth tokens and associated account information for:

  • YouTube — for importing videos from your channel and uploading highlight clips
  • Google Drive — for importing video files from your Drive
  • Discord — for distributing clips to your Discord servers
  • Twitter/X — for posting clips to your Twitter account

These connections are optional and initiated only by you. You can disconnect any platform at any time through your account settings.

2.4 Automatically Collected Information

When you use the Service, we automatically collect:

  • Usage data — pages visited, features used, and interactions with the interface
  • Device information — browser type, operating system, and screen resolution
  • Session data — login timestamps and session duration
  • Error and performance data — application errors and performance metrics to improve service reliability

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Authentication and account management — to verify your identity, manage your account, and maintain your session
  • Service delivery — to process your video submissions, generate AI-powered highlights, and deliver clips
  • AI processing — to analyze video content using artificial intelligence models for highlight detection and clip generation
  • Media distribution — to post highlight clips to your connected social media platforms at your direction
  • Product improvement — to understand how the Service is used, identify issues, and improve functionality
  • Error monitoring — to detect, diagnose, and fix bugs and performance issues
  • Communication — to respond to your support requests and send service-related notices

We do not sell your personal information. We do not use your information for advertising purposes. We do not share your data with third parties for their own marketing purposes.

4. Third-Party Services

We use the following third-party services to operate and improve Slipstream. Each processes data on our behalf and under contractual obligations:

Google Cloud Platform

Infrastructure hosting, cloud storage (Google Cloud Storage) for processed video files and media assets, and AI/ML services (Vertex AI with Gemini models) for video content analysis and highlight generation.

PostHog

Product analytics to understand feature usage and improve the Service. Collects page views, feature interactions, and anonymized usage patterns. We use the “identified only” profile mode, meaning analytics are only linked to your identity when you are logged in.

Sentry

Error tracking and performance monitoring. When errors occur, diagnostic data including anonymized user identifiers may be transmitted to help us identify and fix issues.

Google Fonts

Web fonts loaded from Google’s servers. Your browser may transmit your IP address and user agent string to Google when loading font files.

When you connect optional third-party platforms (YouTube, Google Drive, Discord, Twitter/X), your data is also subject to those platforms’ respective privacy policies.

5. Google User Data Disclosure

This section specifically addresses our use of data obtained through Google APIs, as required by Google’s API Services User Data Policy.

Scopes We Request

  • openid — to authenticate your identity
  • email — to identify your account and enable login
  • profile — to display your name and profile picture in the application

If you connect YouTube or Google Drive integrations, additional scopes are requested at that time with a separate consent prompt explaining the specific access needed.

How We Use Google Data

  • Your Google email and name are used solely for account creation, authentication, and display within the Service
  • Your Google profile picture is used only to display your avatar in the application interface
  • We do not use Google user data for advertising or for purposes unrelated to the Service

Limited Use Compliance

Slipstream’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

  • We only use Google user data to provide and improve the Service’s functionality
  • We do not transfer Google user data to third parties except as necessary to provide or improve the Service, as required by law, or with your explicit consent
  • We do not use Google user data for serving advertisements
  • We do not allow humans to read Google user data unless we have your affirmative consent, it is necessary for security purposes, it is necessary to comply with applicable law, or our use is limited to internal operations and the data has been aggregated and anonymized

6. Cookies and Tracking Technologies

We use the following cookies and similar technologies:

Cookie Purpose Type
session Maintains your authenticated session Essential
remember_token Keeps you signed in between browser sessions Functional
PostHog cookies Product analytics and session identification Analytics

We do not use advertising cookies or tracking pixels. All session cookies are configured with Secure, HttpOnly, and SameSite=Lax attributes for your protection.

7. Data Storage and Security

We take the security of your data seriously and implement the following measures:

  • Encryption in transit — all connections to the Service are encrypted using TLS/HTTPS
  • Encryption at rest — OAuth tokens for connected platforms are encrypted before storage using industry-standard encryption
  • Secure session management — session cookies are signed and configured with security-hardened attributes
  • Cloud infrastructure security — data is stored on Google Cloud Platform with its built-in security controls, access management, and compliance certifications
  • Access controls — internal access to user data is restricted to authorized personnel on a need-to-know basis

While we implement commercially reasonable security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

8. Data Retention and Deletion

  • Account data — retained for as long as your account is active
  • Processed video content — highlight clips and generated media are stored in cloud storage and retained until you delete them or your account is closed
  • Vault files — files you upload to your Vault are retained until you choose to delete them
  • Analytics data — aggregated usage data may be retained for product improvement purposes even after account deletion
  • Connected platform tokens — OAuth tokens for connected platforms are deleted when you disconnect the platform or close your account

To request deletion of your account and associated data, please contact us at support@strongholdlabs.io. We will process deletion requests within 30 days. Certain data may be retained as required by law or for legitimate business purposes such as fraud prevention.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

  • Access — request a copy of the personal information we hold about you
  • Correction — request that we correct inaccurate information (note: name and email are sourced from your Google account)
  • Deletion — request deletion of your personal information and account
  • Portability — request your data in a commonly used, machine-readable format
  • Disconnection — disconnect any connected third-party platform at any time through your account settings
  • Revoke Google access — revoke Slipstream’s access to your Google account at any time via your Google Account permissions

To exercise any of these rights, contact us at support@strongholdlabs.io. We will respond to your request within 30 days.

10. Children’s Privacy

The Service is intended for users who are at least 18 years of age. We do not knowingly collect personal information from anyone under the age of 18. If we learn that we have collected personal information from a person under 18, we will take steps to delete that information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@strongholdlabs.io.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

  • Update the “Last Updated” date at the top of this page
  • Provide notice through the Service or via email for significant changes

Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Stronghold Labs, Inc.

Email: support@strongholdlabs.io

Website: strongholdlabs.io