Privacy policy
What f3ralb0t stores, what it doesn't, and how to make it forget you.
What we store
- Your Twitch and/or Kick user id and login.
- For broadcasters: your authorization to act as the bot in your channel, plus your per-channel game state (challenges, rolls, debts, standings, audit log).
- For broadcasters who connect a donation provider (Streamlabs or StreamElements): the encrypted authorization for that provider, and tip records (donor name as the provider reports it, amount, currency, and the tip message, if any) used to match tips to open money-wager debts.
- For viewers: only what's needed to play the game in a channel — wins, losses, streaks, and any open debts.
- An audit log of operator and moderator actions (config changes, debt forgiveness, mod cancellations).
What we don't store
- Raw chat-message text. The bot acts on commands (
!1v1,!feral) and never writes message bodies to disk. - Real names, email addresses, card or bank details, or anything Twitch or Kick doesn't surface to a chat bot. Tips that settle money wagers are processed entirely by the donation provider — the bot sees only the donor name, amount, currency, and tip message, never payment details.
Retention
- Game records (resolutions, debts, audit log): retained indefinitely.
- Your authorization: until you revoke it or request deletion.
- Operational logs: short-lived (days, not months).
Your rights
- Deletion. Visit data-rights/delete while signed in to delete your personal data. Game records that mention you are anonymized — your login is replaced with an opaque identifier, and your name and message on tip records are removed — but the resolution history of the channels you played in is preserved. If you are a broadcaster, the deletion also removes your channel: its settings, overlay token, event subscriptions, tip-provider connection, and the channel's own game history and audit log. The bot revokes its authorization for your account at Twitch or Kick (and at StreamElements, when connected). A linked channel on the other platform is not affected.
- Revocation. Revoke the bot's authorization at any time via Twitch's Settings → Connections, or for Kick via your kick.com account settings. The bot will detect the revocation and disable itself in your channel.
- Contact. Email me@negativeskill.com for any privacy concern.
Security
- Authorization credentials are encrypted at rest using industry-standard authenticated encryption.
- Incoming events from Twitch and Kick are cryptographically verified on every delivery; replayed or unsigned requests are rejected.
- Dashboard sign-in uses signed session cookies; no server-side session store to leak.