Privacy Policy

Account Information

When you create an account, we store your chosen username and a securely hashed password. You may also provide an email address — for example, for account recovery and important account notices — which we store if you choose to add it. Providing an email is optional, and we do not collect your real name.

Platform OAuth Tokens

When you authenticate with Twitch, YouTube, or Kick, we receive and store OAuth access tokens and refresh tokens. These tokens are used solely to interact with each platform's API on your behalf (reading chat, performing moderation actions, listing channels). We do not access your platform account for any other purpose.

Chat Data

Chat messages pass through our server in real-time to be delivered to your browser. We maintain a short-lived message buffer for session continuity (so you don't lose messages on page refresh). Chat messages are not permanently stored.

Connection & Preference Data

We store which channels you've connected to and your saved channel lists so your setup persists between sessions.

In-App Usage Statistics

For logged-in users of the OmniChat desktop and mobile apps, we collect in-app usage statistics — such as device operating system, app version, and streaming activity — to understand how OmniChat is used and to improve the product. This data is kept first-party and is not shared with third-party analytics services.

We use a session cookie to keep you logged in. This cookie is HTTP-only and secure. We also use Google Analytics (GA4) to understand how OmniChat is used so we can improve it. Analytics and advertising cookies are off by default and load only if you accept them in our cookie banner. You can decline and we keep them off, enforced through Google Consent Mode. We never sell your data.

OmniChat integrates with the following third-party platforms via their official APIs:

• Twitch — for chat, moderation, and channel data
• YouTube / Google — for live chat and channel data
• Kick — for chat and channel data
• 7TV — for loading third-party emotes
• Google Analytics — for usage analytics, loaded only with your consent

Each platform has its own privacy policy. By authenticating with these platforms through OmniChat, you are also subject to their terms.

Data is stored in an SQLite database on our server. Session secrets and OAuth tokens are protected with industry-standard practices. The server runs behind HTTPS and uses secure, HTTP-only cookies with SameSite protection.

The OmniChat browser extension stores your server URL and authentication token in Chrome's synced storage. It communicates only with the OmniChat server you configure. The extension does not collect browsing history, inject ads, or track your activity outside of supported streaming platforms.

Your account data and OAuth tokens are retained as long as your account is active. If you delete your account or an admin removes it, all associated data (tokens, connections, preferences) is deleted. See our Account Deletion page for how to request deletion and what is removed; residual copies in encrypted backups are purged within 90 days. To request deletion or ask data questions, email [email protected].

You can:

• Request deletion of your account and all associated data
• Revoke OmniChat's access from each platform's settings (Twitch, YouTube, Kick)
• Clear your saved channels and connections at any time

If you have questions about this privacy policy, email us at [email protected].