Privacy policy
What f3ralb0t stores, what it doesn't, and how to make it forget you.
What we store
- Your Twitch user id and login.
- For broadcasters: your authorization to act as the bot in your channel, plus your per-channel game state (challenges, rolls, debts, standings, audit log).
- For viewers: only what's needed to play the game in a channel — wins, losses, streaks, and any open debts.
- An audit log of operator and moderator actions (config changes, debt forgiveness, mod cancellations).
What we don't store
- Raw chat-message text. The bot acts on commands (
!1v1,!feral) and never writes message bodies to disk. - Real names, email addresses, payment info, or anything Twitch doesn't surface to a chat bot.
Retention
- Game records (resolutions, debts, audit log): retained indefinitely.
- Your authorization: until you revoke it or request deletion.
- Operational logs: short-lived (days, not months).
Your rights
- Deletion. Visit data-rights/delete while signed in to delete your personal data. Game records that mention you are anonymized — your login is replaced with an opaque identifier — but the resolution history of the channels you played in is preserved.
- Revocation. Revoke the bot's authorization at any time via Twitch's Settings → Connections. The bot will detect the revocation and disable itself in your channel.
- Contact. Email me@negativeskill.com for any privacy concern.
Security
- Authorization credentials are encrypted at rest using industry-standard authenticated encryption.
- Incoming events from Twitch are cryptographically verified on every delivery; replayed or unsigned requests are rejected.
- Dashboard sign-in uses signed session cookies; no server-side session store to leak.