1. Information we handle
The information we receive depends on how you use Slaps:
- Twitch identity and extension sessions. Twitch provides a channel identifier, an opaque extension user identifier, your role on the channel, and authorization information. When your Twitch identity is available, we also process your Twitch user ID, username or display name, and public profile image.
- Optional Twitch connection. Connecting Twitch lets us retrieve your available emotes and check follow status for follower-only placements. We store the connection's account identifiers, granted permissions, token expiry information, and encrypted access and refresh tokens. We may check subscription status and tier to enforce subscriber-only stickers.
- Activity and channel settings. We store shared sticker placements, including the artwork, model, position, size, rotation, creator information, and creation time. We also store channel settings, uploaded sticker metadata, unlock-audio settings, Slap Levels, unlocked models, and contributor totals.
- Bits purchase records. We verify Twitch's signed purchase receipt and associate the transaction ID, product SKU, and Bits amount with the saved placement. Twitch handles the purchase interface; Slaps does not receive your payment card details.
- Uploaded files and messages. We process the images and audio broadcasters upload, and information you choose to include when contacting support.
- Technical information. Requests to our website, backend, and hosting providers may produce logs containing IP addresses, browser or device information, request times, and errors.
Slaps does not request your Twitch password or an OAuth permission to read your Twitch account email.
2. How we use information
We use this information to authenticate extension requests, display available artwork, check placement eligibility, validate Bits purchases, synchronize shared canvases, save channel progression, publish rankings, respond to support requests, and investigate faults or abuse.
Where data protection law requires a legal basis, processing may be necessary to provide the service you request, protect the service and its users through legitimate interests, comply with legal obligations, or act on consent where required. Twitch authorization controls which Twitch permissions you grant.
3. What other people can see
Slaps is a shared stream experience. Stickers may be visible to channel viewers and appear in streams, recordings, clips, or screenshots. Uploaded sticker images and unlock sounds are served through public file URLs. Anyone with a file URL can access it, even if a sticker's placement is restricted to subscribers.
The public leaderboard displays channel names, profile images, Slap Levels, and all-time totals. Contributor rankings display contributor names, profile images where available, and sticker counts. Public contributor entries do not include your Twitch user ID or opaque extension identifier, but your display name and profile image can identify you.
Removing a sticker or clearing a model does not reduce the channel's all-time progression or the separately stored contributor totals. Do not upload private information or files you do not have permission to share publicly.
4. Sharing and service providers
We use Twitch for extension authorization, account information, emotes, eligibility checks, Bits transactions, and channel updates; Vercel for website and backend hosting and public file storage; and Neon Postgres for saved settings, connections, placements, and rankings. Their services process information needed to provide those functions.
Our public pages also load fonts from Google Fonts, which means your browser makes requests to Google. Links to our documentation open a separate help service. Third-party services handle their own information under their respective policies, including the Twitch Privacy Notice.
We do not sell personal information or use it for targeted advertising. We may disclose information when legally required, to protect rights or safety, or as part of a business transfer subject to applicable privacy requirements.
Providers may process information in countries outside your country of residence. Where required, applicable data protection rules govern those transfers.
5. Cookies and browser storage
Slaps uses local browser storage to remember your website color theme and extension window preferences. You can remove these preferences by clearing the site's browser data. The landing-page sticker demo runs for the current session and does not save its placements to the shared channel database.
Twitch and other services you visit may use their own cookies or storage. Their privacy settings and policies apply to those services.
6. Retention and security
Channel settings, shared placements, uploads, progression, and contributor totals persist to support continued use across streams. They do not automatically expire when you close the extension or stop watching. Uploaded assets remain until removed or replaced; cached copies and copies made by others may remain available afterward.
Disconnecting your Twitch connection in Slaps removes its stored connection record and OAuth tokens. It does not automatically erase placements, contributor totals, or channel history. You can also revoke permissions through Twitch.
We use encrypted OAuth token storage and verification of Twitch authorization and purchase receipts to protect access to the service. No internet service can guarantee absolute security. Necessary records may be retained to resolve disputes, investigate abuse, or meet legal obligations; provider logs and backups may follow their own retention cycles.
7. Your choices and privacy rights
You can stop using Slaps, disconnect your optional Twitch connection, or revoke Twitch permissions. Broadcasters can manage uploaded stickers and audio, remove placements, and configure channel access from the extension's configuration page.
Depending on your location, you may have rights to access, correct, delete, or receive a copy of your personal information, restrict or object to processing, or withdraw consent where processing relies on consent. You may also complain to your local data protection authority.
To request access, correction, or deletion, email tinysoftwareworks@gmail.com with your Twitch username, relevant channel, and the request. We may need to verify your identity. Do not send your password, access tokens, or payment details. Requests are handled subject to applicable law and any required retention exceptions.
We cannot remove recordings, screenshots, downloaded files, or other copies held independently by streamers, viewers, or third-party services.
8. Younger users
Slaps is not intended for children under 13 or anyone below Twitch's minimum permitted age. Users who have not reached legal adulthood must have the involvement and permission of a parent or legal guardian as required by Twitch's terms and applicable law. If you believe a child has provided personal information improperly, contact us so we can investigate.
9. Changes and contact
We may revise this policy as Slaps changes. The date above identifies the latest update. Where required, we will provide notice of material changes.
For questions about this policy or how the Slaps team handles your information, email tinysoftwareworks@gmail.com. Please also review our Terms of Service.