# TwiChat Privacy Policy

_Last updated: 2026-07-03_

TwiChat is a browser extension that enhances the Twitch.tv chat and viewing
experience with third-party emotes, chat UI improvements, and related
features. This policy explains what data TwiChat accesses and, just as
importantly, what it does not do with it.

## Summary

TwiChat does not collect, store, or transmit any of your data to TwiChat's
developer or to any server operated by TwiChat. All data described below
either stays on your device or is sent directly from your browser to
Twitch or the specific third-party service that feature relies on.

## What TwiChat accesses, and why

**Your Twitch session (cookies permission).** TwiChat reads the `auth-token`
cookie set by twitch.tv to make Twitch API requests (GraphQL/Helix) as you
— for example, to show your chat name color, your channel point balance,
your followed channels in the sidebar, or to let you pin/delete messages if
you moderate a channel. This token is sent only to Twitch's own API
endpoints (`gql.twitch.tv`, `api.twitch.tv`) and is never sent anywhere
else, including to TwiChat's developer.

**Twitch chat and PubSub connections.** TwiChat connects to Twitch's IRC
and PubSub/EventSub WebSocket endpoints to receive chat messages, channel
point redemptions, and raid/host events — the same data Twitch's own chat
UI already receives.

**Third-party emote providers.** To display BetterTTV, FrankerFaceZ, and
7TV emotes, TwiChat requests emote lists from those providers' public APIs
(`api.betterttv.net`, `api.frankerfacez.com`, `7tv.io`, `cdn.7tv.app`). No
personal data is sent in these requests beyond the channel name being
viewed.

**Link previews.** When a chat message contains a link to YouTube, TikTok,
Instagram, Steam, Spotify, Discord, or another Twitch channel, TwiChat
fetches a preview (title, thumbnail, embed) directly from that service's
public oEmbed/API endpoint so the preview can render in chat.

**Local settings storage.** Your TwiChat preferences (font, panel layout,
sidebar state, compressor settings, etc.) are stored using your browser's
built-in `localStorage`/`sessionStorage` for twitch.tv, scoped to your
device and browser profile. TwiChat's developer has no access to this data.

## What TwiChat does not do

- TwiChat does not run its own backend server and has no infrastructure
  that receives your data.
- TwiChat does not sell, share, or transmit your data to advertisers,
  data brokers, or analytics services — TwiChat has no analytics or
  telemetry of any kind.
- TwiChat does not read or use your Twitch auth token for anything other
  than authenticating the API requests described above.

## Changes to this policy

If TwiChat's data practices change, this page will be updated and the
"Last updated" date above will reflect the change.

## Contact

Questions about this policy can be sent to vanjoxx@gmail.com.