Your data
Privacy, without the fog.
This notice explains what King Gumption Studio stores when you use the website, Studio accounts and OBS output tools.
Launch status: new public account registration remains disabled while the final service checks are completed. The homepage and local Studio can still be used.
Who is responsible
King Gumption Studio is a personal project operated in the United Kingdom by Dominic Williamson. Dominic Williamson is the controller for account information and cloud overlay settings processed to provide this service.
Privacy contact: kinggumptionlive@gmail.com. Signed-in users can also download or delete their account data from the Account section in Studio.
Notice version: 10 August 2026.
What we store and why
| Information | Purpose and lawful basis | Retention |
|---|---|---|
| Account email and secured password hash | Create and protect the account and provide the cloud service. Necessary to perform the service you request. | Until you delete the account. Passwords themselves are never stored. |
| Login sessions | Keep you signed in securely. Necessary to provide the account service. | Up to 30 days; expired records are removed by daily cleanup. |
| Overlay versions, settings and output layouts | Save designs and keep permanent OBS output links working. Necessary to provide the service. | Until you delete an item or your account. |
| Overlay revision history | Allow recovery of previous designs. Necessary to provide the requested version-history feature. | Up to 365 days and no more than the latest 50 revisions per overlay. |
| Short-lived authentication protection records | Prevent brute-force login and registration abuse. Our legitimate interest in protecting users and the service. | Up to 24 hours. |
| Browser and OBS local storage | Remember editor preferences, output state and recent live activity on the device where the service is used. | Output cache: 24 hours. Viewer names, avatars and supporter activity: 7 days. Editor preferences remain until cleared. |
Overlay names and settings are entered by you. Avoid placing private or sensitive personal information in them.
Live-stream viewer information
Top-liker and supporter overlays can receive display names, avatars, likes and gift information from TikFinity on the same computer as OBS. King Gumption Studio keeps this recent activity in that browser's local storage for up to seven days. It is not uploaded to the King Gumption cloud account API by these overlays.
The streamer remains responsible for using viewer information fairly and for any notices required on their stream or channel.
Who receives information
- Cloudflare provides the API, database, encryption and related infrastructure.
- GitHub Pages hosts the public website and records visitor IP addresses for security.
- Google Fonts supplies website fonts and receives the technical request needed to deliver them.
- TikFinity and TikTok are separate services selected by the streamer and operate under their own privacy terms.
- Ko-fi, Twitch and YouTube receive information only if you choose to follow one of the external support or watch links.
Some providers may process information outside the UK. We rely on the relevant provider terms and contractual transfer safeguards. Cloudflare's Data Processing Addendum includes UK and EU transfer mechanisms.
Public OBS output links
An output URL is a capability link: anyone who has it can load that output's name, dimensions and overlay configuration. It is not publicly listed, and you can rotate or delete it in the Output Designer. Treat it like an unlisted link and do not share it unnecessarily.
Your choices and rights
Depending on the circumstances, you may ask for access, correction, deletion, restriction, portability or object to processing. Studio provides the following controls while signed in:
- Download a JSON copy of account and cloud overlay data.
- Change the account email after confirming the password.
- Clear editor and live-activity data stored in the current browser.
- Permanently delete the account, saved versions, revision history and output URLs.
You may also complain to the UK Information Commissioner's Office.
Security and changes
We use salted password hashing, short-lived sessions, access controls, rate limiting, encrypted cloud storage and transport encryption. No internet service is completely risk-free, so output links and account passwords should be kept private.
We will update this page when processing or retention changes materially and show the current notice date above.