1. Who we are
RKNKT is a community and agency for gaming and esports talents, based in Belgium. We help talents grow, and we connect them with brands for collaborations. This policy explains what personal data we collect on rknkt.com and rknkt.app (together, "RKNKT"), why, and what your rights are.
RKNKT is responsible for your data (the "controller" under the GDPR).
RKNKT is being registered as a company. Once that's done, the company name, enterprise number and address will be added here.
2. What we collect
Your account
- Your email address and name.
- Your password, stored only as a bcrypt hash. We can't read it.
- If you sign in with Google or Discord: your account id there, and the name and email address they share with us.
- If you turn on two step verification: its secret key and your recovery codes.
Your talent profile
What you tell us during onboarding and in your dashboard, for example: your display name, full and legal name, date of birth, country and city, the games you play and your game accounts, the content you make, your rates, which brands and deals you're open to, your travel preferences and nearest airport, clothing sizes, a bio and how to reach you.
If you tell us about dietary needs (for travel and events), that can reveal something about your health or beliefs. It's optional, and we only use it to arrange food for trips and events you join.
Your profile picture and Talent Passport
A profile picture, if you upload one. Your Talent Passport is a public page (your link in bio) that shows only the parts of your profile meant to be public: your display name, picture, bio, games, platforms and follower numbers. It's only visible when you make it public, and you can hide it again at any time.
Connected platforms
When you connect a platform, we receive data from it. See section 4.
Messages, offers and collaborations
Messages between you and the RKNKT team or a brand, when they're read, and the offers, collaborations and trips we arrange with you.
Brands using the contact form
Company name, your name, email address, website, what you're looking for and your message. To stop spam, we also store the IP address and browser the form was sent from.
Technical data
Cookies that keep you logged in and secure (see the Cookie Policy). We don't use analytics or advertising trackers.
3. Why we use it, and on what basis
| What | Why | Legal basis (GDPR) |
|---|---|---|
| Account, profile, messages, offers, collaborations, trips | To give you your account and dashboard, match you with brands and run the collaborations you agree to | Contract (art. 6(1)(b)) |
| Connected platforms and their stats | To show your verified numbers to you, our team and brands | Consent (art. 6(1)(a)): you choose to connect, and can disconnect at any time |
| Dietary needs | To arrange food for trips and events | Your explicit consent (art. 9(2)(a)), only if you fill it in |
| Public Talent Passport | To give you a public link in bio | Consent: you switch it on and off yourself |
| Brand contact form | To answer brands that contact us | Legitimate interest (art. 6(1)(f)) |
| IP address on the contact form, login security, rate limits | To protect RKNKT and its users against spam and abuse | Legitimate interest (art. 6(1)(f)) |
| Emails about your account (password reset, security) | Needed for your account to work | Contract (art. 6(1)(b)) |
We don't send marketing emails, and we don't sell your data.
4. Connected platforms
You can connect your accounts by signing in with the platform (for example "Connect with Twitch"). We only ask for permission to read, never to post or change anything. What we read:
| Platform | What we read |
|---|---|
| Twitch | Your username, follower count and whether you're a Partner or Affiliate. While you're live, every 10 minutes: your viewer count and the game you're streaming, to work out your average viewers, peak viewers and hours streamed. Your most viewed clips of the last 30 days, your stream schedule, and your latest videos (past broadcasts, highlights and uploads: title, link, date, length, views and preview image), all public on Twitch. |
| YouTube | Your channel name and handle, subscriber count, total views and number of videos. For your latest videos (up to 20): title, link, date, length, preview image, views, likes and comments. From YouTube Analytics, for the last 28 days: views, watch time, average view duration, subscribers gained and lost, and your viewers' age groups, gender and top countries (as percentages, never individual viewers). |
| TikTok | Your username, display name, whether your account is verified, and your follower, like and video counts. For your latest videos (up to 20): title or description, link, date, length, cover image, views, likes, comments and shares. |
| Your username, follower and post counts. For your latest posts (up to 20): caption, link, date, type (Reel or post), preview image, likes, comments, views, reach, shares and saves. For your account, the last 28 days: reach, profile views and accounts engaged. From 100 followers: your followers' age groups, gender and top countries (as percentages, never individual followers). Business and Creator accounts only. | |
| X | Your username, follower and post counts. For your latest posts (up to 20, no reposts or replies): text, link, date, the preview of an attached photo or video, impressions, likes, replies, reposts, quotes and bookmarks. |
We use this to work out your averages, engagement (likes, comments, shares and saves per view), how often you post, your best recent content and your growth, and show them to you, our team and the brands we propose you to. We keep a copy of your follower count, average views and engagement for each day, so we can show how you grow. We also keep a small copy of the preview image of your latest posts (up to 12 per platform), so your dashboard and our team can show them; a copy is deleted as soon as the post is no longer among your latest.
The access the platform gives us is stored encrypted (AES-256). We use it to refresh your numbers once a day. When you disconnect a platform in your dashboard, we delete that access, the stored numbers, the daily copies, the preview images and the viewer counts straight away.
You can also take our access away on the platform itself: Twitch connections, Google third party connections (YouTube), TikTok (Settings, Security and permissions, Apps and services), Instagram apps and websites and X connected apps.
YouTube: RKNKT uses the YouTube API Services. By connecting YouTube you agree to the YouTube Terms of Service, and Google's handling of your data is covered by the Google Privacy Policy.
6. Where your data is stored
Our server and database are in Frankfurt, Germany, in the EU. Some services in section 5 (Google, Discord, Cloudflare, Meta, X, Twitch, TikTok) can process data outside the EU, mainly in the United States. In that case we rely on the safeguards the GDPR requires, such as the EU Standard Contractual Clauses or the EU US Data Privacy Framework.
7. How long we keep it
| Data | Kept |
|---|---|
| Account, profile, picture, messages, offers, collaborations and trips | As long as you have an account. Deleted for good 30 days after you confirm deleting your account (switched off in the meantime). |
| Connected platform access and numbers | Until you disconnect the platform or delete your account |
| Twitch viewer counts while live | 30 days, then deleted automatically |
| Preview images of your latest posts | While the post is among your latest (up to 12 per platform), or until you disconnect the platform |
| Daily copies of your platform numbers (for growth) | 13 months, then deleted automatically (sooner when you disconnect the platform) |
| Login sessions | 30 days (team accounts: 12 hours) |
| "Remember this device" | 30 days |
| Password reset links | 1 hour, used once |
| Brand contact form requests | As long as needed to follow up, or until you ask us to delete them |
| Backups | 14 days, then overwritten |
8. Security
Everything goes over HTTPS. Passwords are stored as bcrypt hashes, platform access is encrypted, two step verification is available for talents and required for our team, and logins and forms are rate limited. No system is completely secure, but we work to keep your data safe. Found a security problem? Let us know (see section 12).
9. Your rights
Under the GDPR you have the right to:
- see the data we have about you, and get a copy of it;
- correct it (most of it you can change yourself in your dashboard);
- have it deleted;
- get it in a format you can take elsewhere;
- restrict or object to how we use it;
- withdraw your consent at any time, for example by disconnecting a platform or hiding your Passport.
Getting a copy and deleting your data are in your dashboard: Settings, Your data (see section 10). Most of your data you can correct yourself in your dashboard too. For anything else, contact us (see section 12). We reply within 30 days.
10. A copy of your data, or deleting it
A copy of your data: in your dashboard, go to Settings, Your data, and click "Email me my data". Within 24 hours we email you a file with everything we have about you, to the address of your account.
Deleting your account: in Settings, Your data, click "Delete account". We email you a link to confirm (no password needed). Once you confirm, your account is switched off straight away: you're logged out everywhere, nobody can log in to it and your Talent Passport goes offline. After 30 days your account and everything linked to it (profile, picture, Talent Passport, connected platforms, messages, offers, collaborations and trips) are deleted for good, and we confirm by email. Changed your mind within those 30 days? The email has a "Reactivate my account" button, and everything is back as it was. Our backups are overwritten within 14 days after that, so it's gone from those too.
To delete only the data from a connected platform, disconnect it in your dashboard (My Profile, Social accounts). That deletes it straight away.
11. Talents under 18
You must be at least 16 to make an account. If you're under 18, you need permission from a parent or guardian, and they have to sign any deal with a brand together with you.
12. Contact and complaints
Questions or requests: contact@rknkt.com.
Not happy with how we handle your data? You can complain to the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit), Drukpersstraat 35, 1000 Brussels, dataprotectionauthority.be, or to the authority in your own country.