Privacy Policy

This Privacy Policy explains what data Emote Exchange ("we", "the extension", "the service") collects when you use the Emote Exchange Twitch Extension, why we collect it, how we use it, and what rights you have over it.

Emote Exchange is operated by an independent developer based in the United States. For any privacy question or request, email support@emote.exchange.

At a glance

Data we collect

From viewers (anyone using the panel)

• Opaque Twitch user ID — a per-extension identifier that Twitch issues in the extension JWT. We use it to scope your virtual balance and holdings to you. It is not your Twitch username.
• Your Twitch user ID, display name, and profile image — only if you choose to share your Twitch identity with the extension. We use this so you can use Bits-activated Market Buffs and so you can appear on the channel leaderboard with your name and avatar. Viewers who don't share their identity can still play the game; they simply don't appear on the public leaderboard.
• In-game state — your virtual buying power, the emotes you hold, your transaction history, and your subscriber status on the channel.
• Emote usage — when you post a chat message containing one of the channel's emotes, we record that the message contained that emote and which viewer posted it. We do not store the text of your chat messages.

From broadcasters (channel owners who install the extension)

• Twitch user ID and login — captured during the broadcaster OAuth flow.
• OAuth tokens — stored server-side and used only to subscribe to EventSub topics for your channel. We do not share these with anyone.
• Channel configuration — the emotes you've listed on the exchange, your tuning presets (stream size, volatility, category automation), and other settings you choose in the Configure view.
• EventSub event data — when your channel goes online or offline, when chat messages are posted, when subscriptions or Gift Subs occur, when Hype Trains run, and when Bits are used in the extension. We use this data to drive the game state in real time.

Cookies and similar technologies

The extension uses cookies only to remember UI preferences (theme, layout). We do not use cookies for tracking or advertising.

What we don't collect

• We do not collect chat message contents beyond detecting which emotes appear in a message.
• We do not collect email addresses, and we do not log IP addresses inside the application itself. (See the Cloudflare note in "Who we share data with" — Cloudflare sits in front of our servers and processes network metadata, including IP addresses, for security and routing.)
• We do not run any first-party or third-party analytics inside the extension or our application code. We use no advertising or marketing pixels.

How we use your data

• To run the in-game economy: track your balance, holdings, transactions, and leaderboard position on each channel.
• To deliver real-time updates to the panel via WebSockets.
• To respect channel subscriber status (subscribers receive a reduced transaction fee).
• To process Bits-activated Market Buffs and Gift Sub stimulus payouts.
• To diagnose and fix problems with the service.

We do not use your data to profile you, target advertising, train AI models, or make automated decisions that affect you legally.

Who we share data with

We share the minimum data necessary with the following processors so the service can function:

• Twitch — required for authentication, EventSub event delivery, and Bits transactions. Twitch's Privacy Notice governs the data Twitch collects about you separately.
• Cloudflare — our domains (api.emote.exchange and widgets.emote.exchange) are proxied through Cloudflare for TLS termination, DDoS protection, and DNS. Cloudflare processes network metadata (including IP addresses, request headers, and traffic patterns) when routing your requests, and aggregates that data for the operational and security analytics it provides to us. We do not enable Cloudflare's optional client-side analytics scripts. Cloudflare's handling of your data is governed by Cloudflare's Privacy Policy.
• Our hosting infrastructure — the application and database run on virtual servers we operate in the United States.

We do not share your data with advertisers, data brokers, marketing analytics providers, or third-party marketers.

Data retention and deletion

• While the extension is installed on a channel — we keep your in-game state on that channel so your balance, holdings, and rank persist between visits.
• When a broadcaster uninstalls the extension or revokes our authorization — we mark the channel inactive immediately and stop collecting new data for it. After 30 days, we permanently delete all data associated with that channel, including viewer balances, holdings, transactions, and emote-usage records. The 30-day window lets a broadcaster re-install without losing community history.
• On request — you can request deletion of your data at any time by emailing support@emote.exchange. We will complete the deletion within 30 days.

Your rights

Depending on where you live, you may have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — request that we correct inaccurate data.
• Deletion — request that we delete your data.
• Objection — object to specific processing.
• Portability — receive your data in a structured, machine-readable format.

To exercise any of these rights, email support@emote.exchange from the email address associated with your Twitch account, or include enough information for us to verify your identity (such as your Twitch login). We will respond within 30 days.

International users

The service is operated from the United States. If you access it from outside the United States, your data will be transferred to and processed in the United States, which may have different data protection laws than your home country. By using the extension, you consent to this transfer.

Children

Emote Exchange is not directed to children under 13, and we do not knowingly collect data from anyone under 13. Twitch's own Terms of Service require users to be at least 13 years old. If you believe a child under 13 has used the extension, please email support@emote.exchange and we will delete the associated data.

Security

We use industry-standard security measures to protect your data, including TLS encryption in transit, restricted server access, and encrypted credentials storage. No system is perfectly secure, but we take reasonable steps to prevent unauthorized access. If we ever discover a security incident affecting your data, we will notify affected users and Twitch as required by applicable law.

Changes to this policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top. Material changes will be announced in the extension's release notes. Continued use of the extension after a change means you accept the updated policy.

Contact

Privacy questions, deletion requests, or anything else:

support@emote.exchange