Privacy Policy

This Privacy Policy describes how the Chat-Bound RPG Twitch Extension (the "Extension") collects, uses, stores, and discloses personal information from viewers and broadcasters who use it. By installing or interacting with the Extension you agree to the practices described here.

1. Information we collect

Website login and dashboard

If you use the ChatBound RPG website login, we use Twitch sign-in only to confirm your Twitch identity. The website account flow stores your Twitch user ID, Twitch login, Twitch display name, short-lived website session state, linked chat-character status, and streamer setup status when you use streamer tools. If you configure a channel RPG, we store the setup choices, private drafts, selected RPG mode, published setup state, and streamer-created settings needed to run that setup.

The website login does not request Twitch email access, does not collect your Twitch password, and does not ask for broad channel-management permissions during normal viewer login.

Twitch Extension gameplay

The Extension is a multiplayer in-stream RPG. To run the game we collect the following data tied to your Twitch identity:

• Twitch viewer ID (numeric user_id) — the only stable identifier we keep. We never store your email or password; Twitch never gives us those.
• Twitch display name + login — captured the first time you type a chat command so the extension can address you by name.
• Game state — your character race, class, level, XP, gold, equipped items, inventory, skills, autoexplore settings, quest progress, and similar in-game state.
• Chat commands you type that target the Extension (anything starting with the broadcaster's configured prefix, default !) — used to drive game actions. We do not log non-game chat.
• Twitch subscription tier — only when (a) the broadcaster has enabled the Subscription Status capability and (b) you have shared identity with the Extension. Used solely to apply broadcaster-configured XP boosts. We do not store sub status long-term.
• Aggregate XP-source telemetry — when, where, and from what action XP was earned, used to balance game economy. Tied to your viewer ID but never sold or shared.

Information we do NOT collect

• We do not collect your email address.
• We do not collect IP addresses (Twitch handles that at their edge; we never see them).
• We do not use third-party analytics SDKs (no Google Analytics, no Mixpanel, no Segment).
• We do not serve third-party advertising inside the Extension.
• We do not collect demographic information.

2. How we use it

• To run the game: persist your character, calculate combat outcomes, drop loot, advance quests.
• To display the leaderboard: per-channel rankings of player level, gold, kill count, and PvP wins.
• To prevent abuse: cooldown enforcement, anti-spam, anti-exploit detection.
• To balance the game: aggregate XP-source telemetry feeds the broadcaster's progression-pace tuning.
• To respond to broadcaster moderation requests: if a broadcaster bans a viewer from chat, we honor that ban inside the Extension.

We do not sell, rent, or trade your personal information. We do not use it for targeted advertising.

3. Data retention

Game state is retained as long as the Extension remains installed on at least one channel where you play. If you stop playing, data persists indefinitely so you can return where you left off.

You can request deletion at any time (see Your rights).

If your Twitch account is deleted, the Extension receives a webhook notification from Twitch and we delete all data tied to your viewer ID within 30 days.

4. Third-party services

• Cloudflare — hosts our backend (Workers, D1 database, KV namespace, R2 future storage). Cloudflare's privacy practices: cloudflare.com/privacypolicy.
• Twitch (Amazon) — operates the chat infrastructure, the Extension hosting CDN, and the Helper SDK we use. Twitch's privacy practices: twitch.tv/p/legal/privacy-notice.

The Extension does not integrate any other third-party services. No ad networks, no analytics SDKs, no social-share buttons, no embedded widgets.

5. Your rights

• Access — request a copy of all data we have tied to your Twitch viewer ID.
• Correction — request that we correct inaccurate data.
• Deletion — request that we delete all data tied to your viewer ID. We honor deletion requests within 30 days.
• Portability — request a JSON export of your character + inventory + game state.
• Restriction — request that we stop processing your data while a request is pending.
• Withdrawal of consent — uninstall the Extension or stop using it.

To exercise any of these rights, contact jaesonmoment@gmail.com or message Jaesaen on Twitch.

6. Cookies + local storage

The Extension uses the browser's localStorage to remember UI preferences (overlay position, panel mode, viewer-side autoexplore HP threshold). These values stay on your device and are never sent to our backend.

The Extension does not set cookies.

7. Security

• All Extension ↔ backend traffic uses HTTPS.
• The Extension authenticates with the backend via short-lived signed JWTs issued by Twitch.
• Backend secrets (Twitch app credentials, EventSub webhook secret, broadcaster OAuth tokens) are stored as Cloudflare Worker secrets and never exposed to the Extension UI.
• The Extension does not handle payment information directly. All Bits transactions flow through Twitch's monetization infrastructure; we receive only the SKU + amount + Twitch user_id of the spender.

No system is perfectly secure. If you believe your data has been compromised, contact us immediately at the email below.

8. Children's privacy

Twitch's Terms of Service require users to be at least 13 years old (or older in some jurisdictions). The Extension is not directed at children under 13 and does not knowingly collect data from anyone under that age. If you believe a child under 13 has used the Extension, contact us and we will delete their data.

9. GDPR + EU residents

If you are located in the European Union, the United Kingdom, or another GDPR-aligned jurisdiction, you have additional rights:

• Right to lodge a complaint with your local data protection authority.
• Lawful basis — we process your data on the basis of (a) contractual necessity (running the game you are playing) and (b) legitimate interest (anti-abuse + game balancing).
• EU representative — Twitch acts as our distribution platform; their EU representative is Twitch Interactive Germany GmbH. For data-protection complaints specific to the Extension, contact us directly first; we will respond within 30 days.
• Cross-border transfer — data is processed by Cloudflare's edge network, which spans multiple jurisdictions. Cloudflare maintains Standard Contractual Clauses for EU↔US transfers.

10. Contact

For any privacy question, data request, or complaint, contact:

• Email: jaesonmoment@gmail.com
• Twitch DM: @Jaesaen

11. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent change. Material changes will be announced in chat on Jaesaen's Twitch channel and via the Extension's panel before they take effect.

Chat-Bound RPG · Twitch Extension · Operated by Jaesaen. Contact: jaesonmoment@gmail.com.