Privacy Policy

This Privacy Policy explains how Stadium Thumbs ("Stadium Thumbs", "we", "us", or "our") collects, uses, and shares personal information when you use our website and thumbnail tools at https://thumbs.stadiumstream.co (the "Service").

Stadium Thumbs is the thumbnail product of Stadium. Shared sign-in, Stadium+, and Enhance token billing are provided with other Stadium products, including Stadium Rumble and https://stadiumstream.co.

Who we are

Stadium Thumbs is operated as part of Stadium. If you have questions about this policy or your data, contact us at admin@stadiumstream.co.

Who this policy applies to

We process personal information about creators who sign in with Google and use Stadium Thumbs to compose thumbnails, store a library, and run Enhance.

Information we collect

Information you provide

• Creator account data — when you sign in with Google, we receive information from your Google account such as your email address, name, profile details, and Google account identifiers. We request basic profile scopes only on this site.
• Library and canvas data — images you upload (including faces and branding), folder names, labels, canvas compositions, and finished or Enhanced thumbnails you keep in history.

Payment information

Enhance token purchases and Stadium+ subscriptions are processed by Stripe through Stadium billing. We do not store full card numbers. We receive token wallet balances and related billing metadata needed to decide whether an Enhance can run.

Information collected automatically

• Usage and device data — pages viewed, feature usage, and approximate technical information such as browser type.
• Error monitoring — we use Sentry to diagnose crashes and service issues.
• Cookies and local storage — see the Cookies section below.

How we use information

We use personal information to:

• Provide, operate, and improve Stadium Thumbs
• Authenticate creators and maintain your session across Stadium products where configured
• Store your library, canvas work, and generation history
• Send compositions you choose to Enhance to our AI image generation provider
• Check and update Enhance token balances
• Monitor performance, prevent abuse, and fix bugs
• Comply with legal obligations and enforce our Terms of Service

Legal bases for processing (EEA/UK users)

Where applicable data protection law requires a legal basis, we rely on:

• Contract — to provide the Service you request
• Legitimate interests — to secure, improve, and operate the Service, prevent fraud, and support creators
• Consent — where required for optional communications
• Legal obligation — where we must retain or disclose information by law

How we share information

We share personal information only as needed to operate the Service, including with:

• Service providers — hosting, database, authentication, error monitoring, storage, and AI image generation providers that process data on our behalf
• Other Stadium products — shared sign-in and token balances needed for Enhance
• Payment processors — Stripe, via Stadium billing, for token and Stadium+ purchases
• Legal and safety purposes — if required by law or to protect rights, safety, and integrity of the Service

We do not sell your personal information.

Subprocessors and infrastructure

Our providers may include:

• Supabase (authentication, database, and file storage)
• Google (sign-in only — basic profile and email scopes on this site)
• Stripe (token and Stadium+ checkout via Stadium billing)
• An AI image generation provider (to produce Enhance results from compositions you submit)
• Vercel (application hosting)
• Sentry (error monitoring)

International transfers

We and our service providers may process personal information in countries other than your own, including the United States and the European Economic Area. Where required, we use appropriate safeguards for cross-border transfers.

Cookies and similar technologies

We use cookies and similar storage technologies for purposes such as:

• Keeping you signed in (Supabase authentication cookies)
• Sharing sign-in state with other Stadium sites on the same domain where configured
• Securing OAuth flows
• Remembering in-app preferences in your browser

You can control cookies through your browser settings. Disabling essential cookies may prevent you from signing in or using core features.

Data retention

We retain personal information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. When you delete library items, generations, or your account, we delete or anonymise information where reasonably practicable, subject to legal and operational requirements.

Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to certain processing of your personal information, and to data portability or withdrawal of consent.

You can delete many library items and generations in the product. To exercise privacy rights, contact admin@stadiumstream.co.

If you are in the EEA or UK, you may also lodge a complaint with your local data protection authority.

Children

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will take appropriate steps.

Security

We use technical and organisational measures designed to protect personal information. No method of transmission or storage is completely secure.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date. Material changes may also be communicated through the Service where appropriate.

Contact

Questions about this Privacy Policy or our data practices: admin@stadiumstream.co.