Twitch · Twitch Privacy Notice · View original document ↗

User-Provided Sensitive Personal Information Collection

Medium severity Medium confidence Explicitdocumentlanguage Unique · 0 of 343 platforms
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for Twitch Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

Twitch collects a broad range of personal information you provide directly, including your voice, image, chat messages, date of birth, and full billing and credit card details.

This analysis describes what Twitch's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

The breadth of data categories listed, spanning biometric-adjacent data like voice and image to financial data like credit card numbers, means that your Twitch account contains sensitive personal information that warrants careful privacy management.

Interpretive note: Whether collection of voice and image data constitutes biometric processing under state biometric privacy laws depends on how Twitch processes this data technically, which is not specified in the notice.

Consumer impact (what this means for users)

Your Twitch account data includes sensitive categories such as voice recordings, image, chat communications, date of birth, and credit card details, all of which are governed by this notice and may be subject to disclosure in the circumstances described elsewhere in the policy.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    Submit a data deletion request through Twitch's Privacy Choices page; note that deleting certain data may limit your ability to access or use Twitch Services.

How other platforms handle this

Ledger Medium

At Ledger, earning and maintaining our users' trust is a top priority. That's why we are deeply committed not only to protecting your privacy and securing your personal data, but also to being fully transparent about how we handle it.

Strava Medium

We may display advertisements on our Services and those advertisements may be targeted to your interests based on your personal information. We may share your personal information with advertising partners for interest-based advertising purposes. You may opt out of interest-based advertising by visi...

eBay Medium

We collect your personal data when you use our Services, create a new eBay account, provide us with information via a web form, add or update information in your eBay account, participate in online community discussions or otherwise interact with us.

See all platforms with this clause type →

Monitoring

Twitch has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Start Monitor free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
When you register for Twitch Services; upload, purchase, view, or download certain content or products from the Twitch Services; enter contests or sweepstakes; register for or attend a live (in-person) event; or otherwise use the features and functionality of the Twitch Services, you may provide a variety of information about yourself to us, such as your name, voice, or image, the content you create and upload, your chats and communications, Twitch username, email address, postal mailing address, telephone number, date of birth, credit card number, and billing information.

— Excerpt from Twitch's Twitch Privacy Notice

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

REGULATORY LANDSCAPE: Collection of voice and image data may engage state biometric privacy laws such as Illinois BIPA and Texas CUBI, depending on whether this data is processed in a manner that extracts biometric identifiers. Credit card and billing information collection implicates PCI DSS standards for payment data security, though PCI DSS is a contractual standard rather than a direct regulatory requirement. Date of birth collection in conjunction with other identifiers may be relevant to CCPA's definition of sensitive personal information under CPRA. GDPR treats voice and image data as personal data and may treat it as biometric data if processed for identification purposes. GOVERNANCE EXPOSURE: Medium. The collection of voice and image data alongside financial information creates a data profile with significant sensitivity. If voice or image data is processed using automated recognition or matching technologies, Illinois BIPA and similar state laws may impose consent and retention obligations. The notice does not specify whether voice or image data is processed beyond storage. JURISDICTION FLAGS: Illinois BIPA creates heightened exposure for voice and image data collection if biometric identifiers are extracted. California CPRA designates certain categories including voice recordings used for identification as sensitive personal information with heightened protections. EU/EEA users are protected by GDPR's special category data provisions if voice or image data is processed for biometric identification. CONTRACT AND VENDOR IMPLICATIONS: Payment processors handling credit card and billing information should be assessed for PCI DSS compliance. Vendors processing voice or image data should be evaluated for compliance with applicable biometric privacy laws in the jurisdictions where users reside. COMPLIANCE CONSIDERATIONS: Legal teams should assess whether Twitch's processing of voice and image data constitutes biometric processing under Illinois BIPA, Texas CUBI, or similar state laws, and whether required consent and retention policies are in place. A data mapping exercise covering the specific systems that process voice and image data is recommended. Payment data handling should be confirmed against PCI DSS requirements.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Monitor free for 14 days

Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.

Applicable agencies

  • FTC
    FTC has authority over the security and handling of sensitive consumer data including financial information, and over deceptive practices regarding data use disclosures.
    File a complaint →
  • State AG
    State Attorneys General in Illinois, California, and Texas have enforcement authority over biometric data collection and sensitive personal information protections applicable to voice and image data.
    File a complaint →

Applicable regulations

CCPA/CPRA
California, USA
COPPA
United States Federal
Colorado AI Act
US-CO
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
UK GDPR
United Kingdom
Universal Opt-Out Mechanism Expansion 2026
US
VPPA
United States Federal

Provision details

Document information
Document
Twitch Privacy Notice
Entity
Twitch
Document last updated
May 5, 2026
Tracking information
First tracked
April 18, 2026
Last verified
May 10, 2026
Record ID
CA-P-009601
Document ID
CA-D-00108
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
1b823a57c9c8e168884c2ab1323129c5a0009588edccb7823ce5276fef6f2b47
Analysis generated
April 18, 2026 09:33 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Twitch
Document: Twitch Privacy Notice
Record ID: CA-P-009601
Captured: 2026-04-18 09:33:06 UTC
SHA-256: 1b823a57c9c8e168…
URL: https://conductatlas.com/platform/twitch/twitch-privacy-notice/user-provided-sensitive-personal-information-collection/
Accessed: July 4, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Related Analysis

Compliance Governance Intelligence

Need to monitor specific governance provisions?

Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Compliance free trial

Or start with Monitor →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Twitch's User-Provided Sensitive Personal Information Collection clause do?

The breadth of data categories listed, spanning biometric-adjacent data like voice and image to financial data like credit card numbers, means that your Twitch account contains sensitive personal information that warrants careful privacy management.

How does this clause affect you?

Your Twitch account data includes sensitive categories such as voice recordings, image, chat communications, date of birth, and credit card details, all of which are governed by this notice and may be subject to disclosure in the circumstances described elsewhere in the policy.

Is ConductAtlas affiliated with Twitch?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Twitch.