Privacy Policy

Donator.Ge is owned and operated by FinTech Caucasus, which is the data controller.

Donator requires no registration, account, or identity verification to watch a stream or send a donation. We do not use advertising or cross-site tracking, and we do not build marketing profiles. However, for security and platform operation we store a limited amount of technical data, described below.

During a stream, the platform stores only what is needed to display the OBS overlay: donation amount, donor name, and message. When the stream ends, this data is automatically and permanently deleted. No public stream archive or public donation list is created. The fact that a broadcast started and ended is recorded in the internal activity log described in section 4, which is not public.

If a donor leaves an email address (to receive a receipt), it is stored solely to send that receipt and is never shared. A streamer's saved bank details (IBAN, bank name, account holder) are stored only to process withdrawals and are inaccessible to other users — only the server processes them, to complete a payout.

To secure and operate the platform, we store, for each user, their most recent IP address, the approximate location (country, region, and city) derived from that IP address, and activity/last-seen timestamps. The approximate location is calculated from the IP address, and this IP-based geolocation may rely on a third-party IP-geolocation service. This data is used to detect and block harmful activity (spam, abuse, illegal content) and to administer and monitor the platform (for example, an internal admin panel used by our team). IP address records are retained for up to about 30 days where reasonable, after which they are deleted or refreshed. This operational data is accessible only to platform administrators (FinTech Caucasus). It is never sold, never shared for marketing, and is not used for advertising.

Separately, for security and regulatory compliance we keep an activity log: sign-in and sign-out, registration, the start and end of a broadcast, donations, withdrawal requests, profile changes, and verification submissions. Each entry carries the IP address and a precise timestamp, and the log covers both streamers and donors. Unlike the most-recent-IP record described above, it is not deleted after 30 days: it is kept for 5 years in restricted, secured storage and then destroyed automatically. Only platform administrators can access it, every query against it is written to the audit log, and it is disclosed to law enforcement only on a lawful request.

The platform does not use analytics cookies, trackers, or advertising systems. Minimal local storage may be used to maintain browser session state, and it is stored only on the user's device.

The platform does not share data with ad networks or analytics services. Bank withdrawals are processed through a payment provider only to the extent needed to complete the transfer. Infrastructure services (server, CDN) operate on minimal data.

A donor's email and a streamer's bank details are handled strictly for their stated purposes (receipts, withdrawals). Together with the operational technical data described in section 4 (IP address, approximate location, activity timestamps), this is the information we hold about you, and you can request its deletion by contacting info@donator.ge.

A deletion request does not extend to data we are required to keep by law or by payment-scheme rules: identification material, transaction records, and the activity log described in section 4. Those are retained to the end of the period stated in section 8, including after an account is closed.

Each category is kept only for as long as its purpose or the law requires:

• —ID scans and the selfie. Kept for 5 years in closed, publicly unreachable storage, then destroyed automatically. Accessible only to the administrator responsible for verification, and disclosed to law enforcement on a lawful request.
• —Verification record (name, personal number, screening result). Retained for the period required by law, including after the relationship ends.
• —Activity log (IP address, sign-in and sign-out, broadcasts, donations, withdrawals). Kept for 5 years, then deleted automatically.
• —Record of the daily manual review of live broadcasts. Kept for 5 years.
• —Transactions (donations, withdrawals). Retained in line with accounting and tax obligations.
• —Live stream data. Deleted automatically when the broadcast ends.
• —Stream recordings (VOD). Kept until the streamer or the platform deletes them. The temporary copy on the streaming server is deleted within 48 hours.
• —Technical telemetry (quality metrics). Deleted automatically after 30 days.
• —Reports and the moderation log. Retained for audit and dispute purposes.