Last Updated: August 13, 2026
Welcome to Yellow Hearts ("Company", "we", "us", or "our"). We operate the website https://yellowhearts.gg and the platform Yellow Hearts Sparks (collectively, the "Service").
Yellow Hearts is committed to protecting your personal data and respecting your privacy rights under applicable regulations, including the General Data Protection Regulation (GDPR) for users in the European Union / European Economic Area and the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA) for residents of California, United States.
Please read this Privacy Policy carefully to understand our policies regarding your personal data and how we handle it.
1. Data Controller Information
For the purposes of applicable data protection laws, the data controller is:
2. Information We Collect
We collect information from and about users of our Service, including content creators ("Creators") and indie game developers, publishers, or agency clients ("Partners").
A. Information Provided Directly by You
- Partner Account Information: When Partners log in using a Google / Gmail account, we collect basic profile details including your name, email address, profile picture, and Google account identifier.
- Creator Account Information: When Creators register or sign in, we collect details via connected accounts:
- Steam Account Data: Steam ID, display name, avatar, and publicly available game library/activity details.
- Connected Social Media Profiles: Account identifiers, channel names, handles, public follower counts, and metric data connected via OAuth or account linking for YouTube, Instagram, TikTok, RedNote (Xiaohongshu), and BiliBili.
- Transaction and Payment Information: When Partners purchase discovery credits, payment processors process transactions on our behalf. We store transaction records, credit balances, purchase histories, and invoice contact details (we do not directly store full credit card numbers).
- Communications: Records of correspondence when you contact us at publishing@yellowhearts.gg or via our official social channels.
B. Information Collected via Third-Party APIs and Web Scraping
To facilitate Creator Discovery and Campaign Matching, we aggregate publicly available creator information through:
- YouTube API Services: Channel metrics, subscriber counts, publicly uploaded video metadata, and performance statistics.
- Third-Party API & Data Services (e.g., Apify): Public profile metadata, publicly posted content engagement metrics, handles, and follower counts from platforms including TikTok, RedNote (Xiaohongshu), and BiliBili.
C. Automatically Collected Technical Data
- IP address, browser type, operating system, referring URLs, device information, access timestamps, and usage logs recorded during interaction with https://yellowhearts.gg.
3. Legal Bases for Processing (GDPR Compliance)
If you are located in the EEA, UK, or Switzerland, we process your personal data under the following legal bases:
- Performance of a Contract: Processing is necessary to provide the Yellow Hearts Sparks platform, enable OAuth authentication, execute creator campaigns, and deliver credit-based discovery services.
- Legitimate Interests: Processing public profile metrics is necessary for our legitimate interest in operating an influencer marketing database, matching developers with relevant creators, and preventing fraudulent platform abuse.
- Consent: Where required (e.g., when you grant OAuth permissions to link your YouTube, Steam, or social media accounts), processing is based on your explicit consent, which you can withdraw at any time.
- Legal Obligation: Processing required to comply with financial accounting, legal requests, or tax laws.
4. How We Use Your Information
We use the collected information for the following purposes:
- Platform Operations: To create accounts, authenticate users, facilitate campaign invitations, and distribute Steam activation keys to authorized Creators.
- Creator Discovery & Metrics: To build searchable profiles for game developers and publishers to evaluate campaign fit based on public video and social engagement data.
- Credit System Management: To track credit usage (1 credit = 1 creator profile query/scrape attempt) for Partner accounts.
- Outreach & Communication: To notify Creators of campaign opportunities, key distribution updates, and platform announcements.
- Security & Fair Use: To prevent fraud, abuse, unauthorized scraping outside designated features, and Steam key reselling.
5. Third-Party Integrations and API Disclosures
Yellow Hearts Sparks relies on third-party APIs to deliver core functionalities:
A. YouTube API Services
Yellow Hearts Sparks uses YouTube API Services. By using YouTube integration features on our platform, you agree to be bound by the YouTube Terms of Service and the Google Privacy Policy. You can revoke Yellow Hearts Sparks’ access to your YouTube/Google data at any time via the Google Security Settings Page.
B. Steam API
Authentication and campaign key distribution utilize Valve Corporation's Steam Web API. Use of Steam login features is subject to the Steam Subscriber Agreement.
C. Apify and Social Platforms
We utilize third-party scraping infrastructure providers (e.g., Apify) to retrieve publicly available statistical data from TikTok, RedNote, and BiliBili. We do not attempt to access private messages, personal non-public credentials, or hidden settings on these third-party platforms.
6. How We Disclose Your Information
We do not sell personal data to third parties. We disclose personal data only under the following circumstances:
- Between Partners and Creators: When a Partner launches a campaign, selected Creators' public social profiles, performance statistics, and campaign activity status are displayed to the Partner.
- Service Providers: We share data with reliable third-party vendors who provide hosting, database management, email delivery, data scraping infrastructure (Apify), and payment processing under strict confidentiality agreements.
- Legal Requirements: If required by law, subpoena, or government authority, or to protect the rights, property, and safety of Yellow Hearts, our users, or the public.
- Business Transfers: In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business.
7. CCPA/CPRA Privacy Notice (California Residents)
Under the California Consumer Privacy Act (CCPA/CPRA), California residents have specific rights regarding their Personal Information:
- Right to Know / Access: Request disclosure of categories and specific pieces of Personal Information collected about you over the past 12 months.
- Right to Delete: Request deletion of your Personal Information held by us, subject to legal exceptions.
- Right to Correct: Request correction of inaccurate Personal Information.
- Right to Opt-Out of Sale or Sharing: Yellow Hearts does not sell your personal information or share it for cross-context behavioral advertising as defined under the CCPA.
- Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.
To exercise your California rights, submit a request to publishing@yellowhearts.gg.
8. International Data Transfers
Yellow Hearts is based in Jakarta, Indonesia. Information collected through our platform may be transferred to, stored, and processed in servers located outside your home country (including Indonesia and international cloud provider infrastructure). By using our Service, you consent to the transfer of your information outside your country of residence, where data protection standards may differ.
9. Data Retention and Security
- Retention: We retain personal account data for as long as your account is active or as necessary to fulfill campaign requirements, legal obligations, and dispute resolution. Scraped profile metrics are periodically refreshed or deleted upon request.
- Security: We implement reasonable physical, technical, and administrative measures to protect your information against unauthorized access, loss, or alteration. However, no internet transmission is 100% secure.
10. Your Data Protection Rights
Depending on your jurisdiction, you have the following rights regarding your personal data:
- Access & Export: Request a copy of the personal data we hold about you.
- Rectification: Request correction of inaccurate or incomplete data.
- Erasure ("Right to be Forgotten"): Request deletion of your account and personal data.
- Unlink Social / Steam Accounts: You may disconnect linked accounts through your platform settings or by revoking app permissions directly on Google, Steam, or social media platforms.
To exercise any of these rights, contact us at publishing@yellowhearts.gg.
11. Children's Privacy
Our Service is not directed to individuals under the age of 18 (or 13/16 depending on local legal requirements). We do not knowingly collect personal information from children. If we discover a child has provided us with personal data, we will delete it promptly.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Continued use of the Service after changes are posted constitutes acceptance of the updated policy.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, contact us at:
