Chrome Extension · Privacy Policy

Twitch Moments
Privacy Policy

We believe privacy is a right, not a feature. Here's exactly what we do and don't do with your data.

📅 Last Updated: May 16, 2026 🔖 Version 1.0.0 GDPR & CCPA Compliant 🛡️ Chrome Web Store Approved
📋
Section 01
Overview
🔮
Twitch Moments is a Chrome extension that helps you capture and relive your best moments from Twitch live streams and VODs. We are fully committed to protecting your privacy. Your chat messages stay on your device we never sell or share your data.

This policy explains in plain language what data we collect, why we collect it, how it's protected, and what control you have over it. We've designed this extension with privacy-first principles from the ground up.

🏠 Local First

Chat data lives on your device only, never our servers.

🚫 No Selling

We never sell, trade, or monetize your personal data.

🔍 Transparent

Every data point collected is documented here. No surprises.

🎛️ Full Control

Delete your data any time, instantly, from extension settings.

📊
Section 02
Data Collection

What We Collect

💬 Chat Messages
Timestamp, text content, HTML (with emotes), sender username, and video ID. Stored locally only never transmitted to our servers.
🔑 License Key (Pro only)
Sent securely via HTTPS to verify Pro subscription status. Verification result cached locally for 6 hours. The key itself is never logged on our servers.
⚙️ Preferences
Theme preference and username for tracking. Stored in local Chrome storage only. Never transmitted to any server.

What We Never Collect

💾
Section 03
Data Storage

Local Storage (All Users)

All chat messages, preferences, and cached results are stored in your browser using Chrome's chrome.storage.local API.

Cloud Storage (Pro Plan — Optional)

☁️
Cloud storage is strictly opt-in. It is only activated when you enable it with a valid Pro license. You can disable it any time in extension settings.
What's stored
Chat messages, timestamps, stream metadata, VOD URL & duration, channel name, game, title (~2–5 KB per moment)
Storage provider
Supabase PostgreSQL — TLS 1.3 in transit, encrypted at rest
Access control
License key + device ID authentication. Only you can access your data.
Sync interval
Every 5 minutes, bidirectional. Works offline; syncs when reconnected.
Retention
Monthly Pro: 90 days after expiry · Lifetime Pro: permanent · 30-day download window after expiry before deletion
🎯
Section 04
How Your Data Is Used

Chat Messages

Used exclusively for extension features on your device:

License Key (Pro Only)

Data Sharing

🚫
We do not share your data with any third party. The only external communication is license verification (Pro users only). External links to Gumroad or social media are always user-initiated no automated sharing occurs.
🔒
Section 05
Data Security
🔐 HTTPS + TLS 1.3

All external communication uses HTTPS with TLS 1.3 encryption and proper certificate validation.

🧹 XSS Protection

All chat HTML is sanitized with a whitelist-based approach, blocking malicious scripts.

📦 No Remote Code

Fully Manifest V3 compliant. All code is bundled locally no remote code execution.

🛡️ CSP Protected

Content Security Policy prevents unauthorized code injection attacks.

🔑 No Key Logging

License keys are never logged or stored on our servers in any form.

💾 Encrypted Storage

Chrome's built-in storage encryption protects all locally-stored data.

⚖️
Section 06
Your Rights & Control

You have full, granular control over your data at all times:

How to Exercise Your Rights

1
Clear Your Data: Open Twitch Moments → Settings (⚙️) → "Clear All Data" → Confirm deletion
2
Export Your Data: Chrome DevTools (F12) → Application → Storage → Local Storage → twitch.tv domain → copy entries
3
Disable Cloud Sync: Open Twitch Moments → Settings → Cloud Storage → Toggle off
4
Full Removal: Right-click extension icon → "Remove from Chrome" → Confirm (all data deleted)
🤝
Section 07
Third-Party Services

Supabase — Cloud Storage & Verification (Pro Only)

Purpose
License key verification and optional cloud moment storage for Pro users only
Data Transmitted
License key only for verification. Moment data for cloud storage (only if opted in).
Security
TLS 1.3 in transit · AES-256 encrypted at rest · GDPR & CCPA compliant
Privacy Policy

Gumroad — Payment Processing

💳
Gumroad handles all payment transactions. We never receive or store your payment card details. Gumroad is PCI DSS compliant. View their policy at gumroad.com/privacy ↗

Children's Privacy

Twitch Moments is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, please contact us immediately so we can delete it.

📜
Section 08
Compliance
🌐
Chrome Web Store
Developer Program Policy & Manifest V3
🇪🇺
GDPR
European Union Data Protection
🇺🇸
CCPA
California Consumer Privacy Act
👶
COPPA
Children's Online Privacy Protection
🇧🇷
LGPD
Brazilian General Data Protection
🇨🇦
PIPEDA
Canadian Privacy Law

Policy Updates

We may update this policy periodically. Significant changes will be communicated via in-extension notifications, GitHub announcements, and email (Pro users). Minor corrections like typos or clarifications will simply update the date above.

📞
Section 09
Contact & Support

Have a question about how we handle your data? Reach us through any of these channels:

GitHub Issues
Create an Issue ↗
⏱ 24–72 hrs
Support
Contact Email ↗
⏱ 12–48 hrs
Privacy Concerns
File a Priority Issue ↗
⏱ 12–24 hrs (priority)
🌍
We offer full support in English. For other languages, we'll do our best using translation assistance.