Privacy Notice
What the extension processes
- Your Twitch user ID, login, display name, and profile image.
- An anonymous Firebase identifier.
- Friend requests, accepted friendships, and your public encryption key.
- Short-lived presence encrypted separately for each accepted friend.
- Limited security and rate-limit data, including an IP address in hourly request counters.
What is not collected
Twitch Friends does not collect cookies, advertising identifiers, messages, email addresses, or general browsing history. It detects a Twitch channel only to provide the friend-presence feature. Private encryption keys stay in extension-owned IndexedDB on your device.
Twitch authorization
Twitch access and refresh tokens are processed briefly by the Cloudflare Worker to verify account ownership. They are not persisted and are revoked after verification.
Storage and retention
Profile and friendship metadata remain until you disconnect Twitch or choose Delete my data. Encrypted presence expires within two minutes and is not retained as viewing history. OAuth state expires after ten minutes. Operational rate-limit records are deleted automatically.
Service providers
Cloudflare provides the API and D1 database. Firebase provides anonymous authentication and encrypted presence delivery. Twitch provides OAuth and profile verification. These providers may process technical request data under their own policies.
Limited use
The use of information received from Chrome APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.
Your controls
Disconnect Twitch removes your server profile, friendship data, public key, and shared presence. Delete my data also removes the anonymous Firebase account and local extension data.
Contact
Questions or deletion requests can be sent to yuravychivskii@gmail.com or @vychivsky.