Privacy Policy

Data controller

The controller for the personal data processed through TK Colosseum is Eren Atolgan (eaforge).

Contact: contact@eaforge.fr

1. Data we collect

TK Colosseum collects only what the game needs to run:

• The streamer's public TikTok profile (display name, username, avatar picture), obtained via TikTok Login Kit when the streamer signs in.
• During a live stream, public interactions relayed by TikTok: viewers' display names and the gifts they send (type and count), likes, and follows.
• Local game records (best streak, XP, survival time, and the top gift giver per gift).

2. How we use it

Collected data is used solely to:

• run the game in real time (spawn monsters, apply buffs, update the on-screen HUD);
• compute the end-of-run recap and local records (top giver per gift, best streak…);
• display the optional OBS overlays (live ranking, live champion, effect timers);
• identify the streamer who is signed in.

3. Storage & sharing

Game records are stored locally, on the streamer's own machine. They are never sold and are not shared with third parties. A viewer may request deletion of their data by contacting the streamer who is running the game.

4. TikTok

TK Colosseum uses TikTok Login Kit (OAuth 2.0 with PKCE) for the streamer's sign-in, and reads public live events (gifts, likes, follows) while the stream is running.

The OAuth client_secret never leaves our server: the authorization code is exchanged for a token server-side, and that token is never sent to the game client. We do not store viewers' TikTok access tokens. The connection to a TikTok live is always initiated by the streamer.

5. Security

Sign-in uses the OAuth authorization-code flow with PKCE, and the authorization session is short-lived (about 10 minutes). We recommend that streamers keep their credentials private.

6. Contact

For any question about this policy or your data, contact us at contact@eaforge.fr.