Privacy Policy
Last updated: 6 November 2026
Honza IRL is a live IRL travel stream by Honza_IRL on Kick and Twitch. This page explains who is responsible for your data, what the stream's tools collect, why, who receives it and how long it is kept. We collect as little as we can.
Who is responsible
The controller of your data is the operator of Honza IRL: Jan Soudil, registered office Jablonecká 1525, 468 51 Smržovka, Czech Republic, Company ID (IČO) 22456660. Contact: hello@honza-irl.com.
What we collect, why, and on what legal basis
- Chat messages written in the Honza_IRL chat on Kick and Twitch: your platform user ID, display name, the message text, the time, and chat badges (for example moderator or subscriber). Why: to show chat and alerts on the stream overlay, to answer chat commands and to moderate the chat (hiding spam, scam links and messages that break the chat rules). Basis: our legitimate interest in running and moderating a live show (Art. 6(1)(f) GDPR).
- Channel events: follows, subscriptions, gifted subscriptions, raids and cheers on the Honza_IRL channels, with the display name of the person involved. Why: alerts on stream and recaps. Basis: legitimate interest (Art. 6(1)(f)).
- Country code, only if you type it yourself with the
!fromcommand, and challenge ideas you send with!challenge. Why: the "Where are you watching from?" map and the review of ideas. Basis: legitimate interest (Art. 6(1)(f)). - For Twitch accounts that post a link, the account creation date (from Twitch). Why: to stop spam links from brand-new accounts. Basis: legitimate interest (Art. 6(1)(f)).
- Voting page (vote.honza-irl.com), only if you sign in there: your platform user ID, display name and account creation date (as the platform gives it), the time of your first message in our chat, and your votes. We never receive or keep your platform password or login token. Why: to run the votes and keep them fair. Basis: the voting rules you take part in (Art. 6(1)(b)).
- Linked wallet, only if you linked one earlier: the public wallet address, the signed link message, and records of the wallet balance that were read from the public Solana blockchain while linking was offered. We never asked for a transaction and never hold any wallet key. Linking is no longer offered. You can unlink the wallet on the voting page or ask us to delete it. Basis: the voting rules you took part in (Art. 6(1)(b)).
- Tips (vote.honza-irl.com/tip), only if you send a tip: your platform user ID and display name, the name and message you type for the stream, your confirmation that you are 18 or older, the amount, currency, its value in USD and CZK and the time, the Solana transaction and the sending and signing wallet addresses of the transaction, and the result of our sanctions check of those addresses. We run this check on tips below the minimum amount shown on stream too. Your name and message are never written to the blockchain. Why and basis: to show your tip on stream with the name and message you chose (Art. 6(1)(b)); to keep the accounting and tax records and to comply with sanctions law, which can require us to freeze a payment and report it to the authorities (legal obligation, Art. 6(1)(c)); to moderate messages (Art. 6(1)(f)). The website shows only the total of tips per day, never names or single tips. The operator handles this data; the public blockchain is read through Helius, and notices go to Telegram (see below). You can ask for access, correction or deletion as described under "Your rights", at hello@honza-irl.com.
- Live streams and recordings: the stream shows public places and may show people passing by. It also shows the streamer's position on a live map, so it can show where a person in the picture is at that moment. Why: the live show and short clips of it. Basis: legitimate interest (Art. 6(1)(f)).
- Technical data: our server and Cloudflare see your IP address when you open our pages. We use it only for security and to keep the sites running (for example rate limits and finding errors) and never link it to your account. Basis: legitimate interest (Art. 6(1)(f)).
We do not collect passwords, payment card details or the location of viewers. We receive your e-mail address only if you write to us.
Who receives it
- Twitch (Twitch Interactive, USA) and Kick: the stream and the chat happen on their platforms, under their own privacy policies. Our bot writes in the chat. The live players on the About page load from them only after you press the player button.
- OVH (France): our server, in the European Union.
- Cloudflare (USA): delivers our websites and protects them, runs the anti-bot check (Turnstile) when you sign in, and controls access to our admin app.
- Helius (USA): our connection to the Solana blockchain. It receives the public wallet addresses we ask about.
- Google (USA): a private Google Drive folder for clips, and the YouTube player, but only when you press play on a video on our site.
- Backblaze (Netherlands, EU): encrypted backups.
- Sentry (stored in the EU): short error reports.
- Telegram: short notices in our team's group chat, for example that a vote ends in a minute.
- Telegram: the operator gets a notice of each tip in a private Telegram group: the amount, whether it was shown on stream, and the name and message you typed (also a message our filter kept off the stream). Never the wallet address. Telegram deletes these notices automatically after one month.
- The public Solana blockchain: wallet addresses and transactions are public by design.
- Authorities, only where the law requires it (for example the Czech Financial Analytical Office in a sanctions case, or the tax office).
Transfers outside the EU
Twitch, Cloudflare, Google and Helius are companies based in the USA and may process data there. Such transfers rely on the EU–US Data Privacy Framework where the company is certified, otherwise on the standard contractual clauses in the provider's terms. Kick is run from outside the EU; its own terms apply when you use Kick. Telegram is also run from outside the EU.
How long we keep it
- Chat messages: 90 days, then deleted automatically.
- Display names, platform user IDs and country codes: while the project runs, so returning viewers are recognised. You can ask us to delete them at any time.
- Channel events (follows, subscriptions, raids): while the project runs, for recaps and "fans of the day".
- Single votes: 30 days after the vote ended. The result of each vote stays, without names.
- Linked wallet: until you unlink it. Unlinking removes the wallet and its balance history at once. Daily balance records: 30 days.
- Server logs with IP addresses (our web server): kept in rolling files of limited size and deleted automatically when the files rotate or the service is updated; typically days to a few weeks. Purpose: security and operation of the sites.
- Sign-in on the voting page: a cookie that keeps you signed in for 30 days.
- Tip records (transaction, wallet address, amount, time, value, sanctions check result, 18+ confirmation): 10 years, for tax and sanctions law, then deleted automatically.
- Names, account IDs and messages of tippers: 90 days, then removed from the tip record. If a tip is frozen under sanctions law, until the case is closed.
- Tip notices with your name and message in the operator's private Telegram group: 1 month, then deleted automatically by Telegram.
- Raw stream recordings on our server: 48 hours (never longer than 30 days), then deleted automatically.
- Clips in our Google Drive folder: 10 days.
- Encrypted backups: about 15 days.
- Error reports: 30 days.
Blockchain data
A wallet address you linked is public on the Solana blockchain anyway. We cannot delete or change data on the blockchain. We can delete the link between your wallet and your account in our systems.
Wallet addresses and transactions on the blockchain are public and permanent.
Live streams and clips
The stream shows the streamer's position live on a map. Privacy mode takes the map off the stream at once. We use it, for example, near the place where the streamer sleeps and at other people's homes. If you are on the stream and do not want the place shown, you can ask the streamer to turn privacy mode on. The website never shows a position, only the next stop, the countries so far and the distance travelled.
Streams are broadcast live from public places. If you appear in a stream or a clip and want to be removed, write to hello@honza-irl.com. We will remove you from the recordings and clips we control. What was already broadcast live, and copies made by others, we cannot take back.
Where it is stored and who can see it
Data is stored on our own server in the European Union (France). Only the operator can access the database. Moderators see chat in the usual way on each platform. Anything shown on the stream overlay (your display name, your message, your country from !from) is public, like the chat itself.
Backups: an encrypted copy of the database is kept with Backblaze in the European Union (Netherlands). Only the operator holds the key that can open it; Backblaze cannot read it. The streamer's exact GPS positions are never included.
Clips: after each stream, short parts of it (the video everyone could already see) are saved to a private Google Drive folder for our video editor, with a text note of the Twitch and Kick chat messages written at that moment. Nothing is cut from times when the location was hidden.
Error reports: when our software hits an error, a short technical report (which part of the code failed) is sent to Sentry and stored in the European Union. Before it is sent we remove chat messages, request contents, cookies, IP addresses and anything location-related.
Cookies
We set no tracking or advertising cookies and use no analytics. The voting page sets one sign-in cookie when you sign in, and your browser tab may remember the page you had open. The YouTube, Twitch and Kick players and the Cloudflare anti-bot check load only after you click (play, sign in). Those third parties may set their own cookies then, under their own privacy policies.
YouTube
The level videos on our site are hosted on YouTube (Google). The preview pictures are stored on our own server, and nothing is loaded from YouTube until you press play. Then the video plays in YouTube's privacy-enhanced mode, and YouTube may receive your IP address and device data under Google's own privacy policy.
Data received from YouTube were anonymized: names, channel IDs and tokens deleted, votes and totals kept without any link to a person.
Your rights
Under the GDPR you can ask what data we hold about you, ask us to correct or delete it, ask us to restrict its use, ask for a copy in a common format (portability) and object to its use based on our legitimate interest. Write to us and include your platform and user name. We answer within one month. Some data we cannot delete: data on the public blockchain, and records the law requires us to keep (for example accounting records) until that period ends.
You can also complain to the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.gov.cz) or to the data protection authority of the EU country where you live.
Contact
Changes
If this policy changes, the new version will be posted on this page with a new date.