Privacy Policy

Effective date: September 20, 2026

1. Privacy responsibility

This Privacy Policy explains how MrLutin Media, based in Quebec, Canada, collects, uses, retains, discloses, and protects personal information connected with MrLutin Studio.

For privacy questions, access requests, correction requests, deletion requests, or complaints: [email protected].

2. Scope

This policy applies to MrLutin Studio, its registration pages, member portal, integrations, and information collected when you contact us about the service.

It does not replace the policies of Discord, Twitch, Steam, Patreon, hosting, email, or other third-party services. Review their policies for their own practices.

3. Information we collect

Account information

We may collect and retain information needed for an account, including your full name, email address and verification status, region, language, username/GamerTag when provided, preferences, security state, two-factor authentication information, support requests, and information needed to manage projects, products, rewards, and associated rights.

Linked third-party accounts

If you choose to link Discord, Twitch, Steam, or Patreon, we may receive the provider account ID, username, public name or alias, avatar or avatar URL, public information and metadata needed for linking or eligibility verification, and access or refresh tokens where an integration requires them.

Stored integration tokens are protected by application-level encryption. We do not request passwords for those providers.

Technical and security information

When you use the service, we may collect information needed for authentication, security, and diagnostics, including IP address, device type, operating system and browser inferred from the user agent, session ID, last activity, connection events, technical logs, errors, security events, and cookies required for sessions, security, and language preferences.

We do not use this information to sell a personal advertising profile.

4. Why we use this information

We use necessary information to create, authenticate, and secure accounts; verify email addresses; prevent abuse, fraud, and unauthorized access; provide the portal, projects, products, rewards, and associated rights; connect and manage third-party providers you choose; select an external avatar when requested; provide support; handle privacy requests; diagnose errors; maintain availability; improve security; and comply with law or protect the rights, safety, and property of MrLutin Media, users, or others.

We limit use to the stated purposes or compatible purposes permitted by law. We do not sell personal information.

5. Consent and legal basis

Where required by law, we request consent for optional collection or use, including linking a third-party account or using an external avatar. Information essential to an account may be needed to provide the requested service.

You may withdraw optional consent or unlink a provider. Withdrawal may prevent a feature that depends on that information, without invalidating lawful processing performed before withdrawal.

For minors, a parent or guardian must participate where the law requires parental consent. We will handle reasonable requests from a parent or guardian concerning a minor’s account after appropriately verifying authority.

6. Who we share information with

We may disclose information that is strictly necessary to a third-party provider you choose to link; hosting, database, backup, security, email, or diagnostic providers acting for us; professional advisers bound by confidentiality; or authorities and other persons where law requires or permits it to prevent fraud, protect someone, or enforce rights.

We do not disclose personal information for sale or third-party behavioral advertising.

7. International processing

The platform is offered worldwide and some providers may process information outside Quebec or Canada. Where required, we assess risks, limit the information shared, and use appropriate contractual, organizational, or technical safeguards.

The laws of a provider’s jurisdiction may permit access by authorities in that jurisdiction. Available rights may vary based on your location.

8. Retention and deletion

We retain information only as long as reasonably necessary for the purposes in this policy, service security, dispute resolution, and legal obligations.

In general, account information is retained during the account’s life and for the period needed for closure and legal obligations; external links and tokens are retained until removal, expiration, or replacement subject to security needs; sessions and security information are retained for operational and abuse-prevention purposes; and backups or technical logs may remain through their normal lifecycle before deletion or anonymization.

You may request account deletion. We may retain certain information where required for law, security, fraud prevention, or dispute resolution.

9. Your rights

Depending on applicable law, you may have the right to request access to personal information we hold, correction of inaccurate or incomplete information, deletion where retention is no longer necessary or legally permitted, withdrawal of optional consent, information about purposes, data categories, recipients, and retention, and the right to complain to the relevant privacy authority.

To exercise a right, contact [email protected] and describe your request. We may reasonably verify your identity to protect your account. We will respond within the time required by applicable law.

10. Security

We use reasonable safeguards appropriate to the risks, including application-level encryption for integration tokens, access controls, protected sessions, email verification, limited access, and monitoring of relevant events.

No electronic transmission or storage can be guaranteed absolutely secure. If an incident creates a risk to individuals, we will take the measures required by law, including required notices.

11. Cookies and similar technologies

We use cookies and similar technologies needed for sessions, security, language preferences, and portal operation. Blocking them may prevent authentication or certain features.

Any optional analytics or marketing tool will be added only with the information and choices required by applicable law.

12. Changes

We may update this policy to reflect a service, legal, or practice change. The effective date will be updated and, where necessary, notice or renewed consent will be requested.

13. Contact

MrLutin Media
Quebec, Canada
[email protected]