When you sign in to our web app using Twitch authentication, we collect the following information from your Twitch account:

• Twitch User ID: A unique identifier for your Twitch account.
• Twitch Display Name: The public name associated with your Twitch account.
• Twitch Profile Image: The profile image associated with your Twitch account.

By signing in, you also grant us permissions to:

• Manage your Twitch Channel Point Rewards on your behalf (if you choose to create or modify them).
• Access your channel settings related to rewards, as needed for our services.

To perform these services, we securely store the authorization tokens granted during sign-in. These tokens are encrypted and stored in our database to enable us to manage rewards on your behalf.

We use this information and the authorization tokens solely to provide the requested services, and will not collect or store any additional personal data from your Twitch account unless explicitly authorized.

The information we collect from Twitch is used for the following purposes:

• To identify and authenticate your account when you sign in using Twitch.
• To personalize your experience within the app (such as displaying your Twitch display name and profile image).
• To enable the creation and management of Twitch channel point rewards on your behalf.
• To provide services and features that require your Twitch account.

We will not share, sell, or rent your personal information to third parties, except as described in this policy.

We store your Twitch User ID, Display Name, Profile Image, and encrypted Authorization Tokens securely in our database.

Your information will be retained for as long as your account remains active or as long as necessary to provide services to you.

If you decide to delete your account or revoke access, we will delete your information from our database, except where required by law or for legitimate business purposes.

We use third-party services to facilitate the operation of our web app:

• Supabase: Our database is hosted on Supabase, which securely stores the information we explicitly collect. Supabase does not have direct access to any user information other than what we store, as it operates strictly as our database provider.
• DigitalOcean: Our backend server is hosted on DigitalOcean, and they may collect certain data related to server performance and usage. Please refer to DigitalOcean’s Privacy Policy for more information.
• Vercel: Our web app is hosted on Vercel, and Vercel may collect information related to website traffic and performance. Please refer to Vercel’s Privacy Policy for more information.
• Cloudflare: We use Cloudflare for DNS and security services. Cloudflare may collect and process certain data, including your IP address, for security and performance purposes. Please refer to Cloudflare’s Privacy Policy for more information.

We take the security of your personal information seriously and implement industry-standard measures to protect it. This includes encryption of sensitive data and secure server configurations.

However, please be aware that no method of transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

Depending on your location, you may have certain rights regarding your personal data, including the right to:

• Access and request a copy of your personal data.
• Correct or update any inaccurate or incomplete information.
• Delete your account and the associated information we store.

To exercise these rights, please contact us at [email protected]

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any significant changes by posting an updated Privacy Policy on our website with an updated "Last Updated" date.

If you have any questions or concerns about this Privacy Policy, please contact us at: [email protected]