Privacy & Terms

Last updated: June 26, 2026

Privacy Policy

What we collect

These tools are free, browser-based overlays. We do not require accounts, emails, or passwords. The only data handled is:

  • Twitch / Kick channel name - entered by you to connect a chat feed. The channel name is sent to the relevant platform's chat API to establish a connection. It is also recorded in our internal analytics database (see Anonymous visit analytics below) as part of the overlay load record - this is the same record that tracks which tools a channel uses and when.
  • OAuth tokens - for features that require Twitch authorization (e.g. Instant Replay), tokens are stored securely on our server and are never shared or logged beyond what is strictly required to operate the feature. You can revoke access at any time via your Twitch account's Connected Apps settings.
  • Audio snippets - for Now Playing, short audio samples are sent to a third-party recognition service (AudD or Shazam). We do not retain these samples.
  • Anonymous visit analytics - two separate, structurally unlinkable records are written when an overlay is in use:
    • When an overlay browser-source page loads (e.g. the OBS browser source hitting /emoji-decoder/channelname), we record a one-way SHA-256 hash of the requester's IP address and a timestamp truncated to the nearest hour. This table contains no game name, no channel name, and no other context. The hour-level timestamp means many different channels' loads fall within the same bucket, making it technically infeasible to correlate this record with any specific channel or person.
    • When a game's live connection opens (SSE stream), we record the game name, the channel name, and a full timestamp. This record is deduplicated to at most one entry per game per channel per 30-minute window, so OBS reconnects within the same session are not double-counted.
    The two records are stored in separate tables. Because the overlay-load table carries only an hour-level timestamp and no channel or game identifier, the records cannot be meaningfully joined. No cookies or tracking pixels are used. Setup and configuration pages are not tracked.

What we do not collect

  • No names, email addresses, or any other personal identifiers are collected or required.
  • No payment information is collected (our tools are free).
  • We do not build profiles, run ads, or perform any behavioural tracking.

How we use your information

  • To operate and deliver the overlay features you have enabled.
  • To monitor service health and understand aggregate usage trends.
  • To detect and prevent abuse or misuse of the service.

Information sharing

We do not sell, rent, or trade your information. The limited data described above is shared only in these narrow circumstances:

  • Third-party APIs - channel names and audio samples are forwarded to external APIs (Twitch, Kick, AudD/Shazam, etc.) solely to fulfil the overlay function. See the Third-party services section below.
  • Internal monitoring - a private Discord webhook is used for operational alerts. Events include channel names, song detection results, game outcomes, and Twitch usernames of chat participants who interact with game features (e.g. solving a puzzle or winning Wordle). This is not shared publicly or with third parties.
  • Legal requirements - we may disclose information if required to do so by law or in response to a valid legal request.

Cookies & local storage

We do not use first-party tracking cookies. We may use localStorage in your browser to remember customizer settings (colours, font sizes, etc.) between visits. Third-party scripts (Google Fonts) may set their own cookies subject to their respective policies.

Third-party services

Some features rely on external services, each subject to their own privacy policy:

  • Twitch - chat IRC, EventSub, Helix REST API, and the public GQL API (gql.twitch.tv) for channel display names, avatars, and follower counts shown on the internal analytics page.
  • Kick - chat WebSocket and the public channel API (kick.com/api/v2/channels) for channel info and follower counts shown on the internal analytics page.
  • AudD / Shazam - short audio samples are sent to whichever recognition provider is configured for the Now Playing feature.
  • YouTube - the VOD Loop feature uses yt-dlp to fetch video and playlist metadata (titles, thumbnail URLs, video IDs) from YouTube. No video content is downloaded; only metadata is retrieved.
  • Wikipedia / Wikimedia - the Where in the World feature fetches landmark thumbnail images from the Wikimedia image API. Image requests are proxied through our server.
  • Groq, Mistral, Google Gemini, Cloudflare Workers AI - when AI-powered game modes are enabled (Emoji Decoder, Would You Rather, Where in the World), prompts are sent to one or more of these providers to generate puzzle content. No personally identifiable information is included in these prompts.
  • Cloudflare R2 - downloaded Twitch clips for the Clips Player feature may be stored in a Cloudflare R2 bucket and served from there.
  • jsDelivr / Twemoji - emoji overlay features load the Twemoji library from the jsDelivr CDN; jsDelivr may log requests.
  • Google Fonts - fonts are loaded from Google's CDN; Google may log font requests.
  • Discord - a private webhook is used for internal operational alerts (song changes, game wins, clip creation). Channel names and winning chat usernames may appear in these alerts.

We are not responsible for the data practices of those services.

Data retention

We do not maintain a user account database. Anonymous visit analytics are retained for usage trend analysis: the overlay-load table stores only a hashed IP and an hour-level timestamp (no channel or game name), and the session table stores only game name, channel name, and a deduplicated timestamp (no IP). Because the two tables share no common identifier and timestamps are too coarse for meaningful correlation, neither table can be linked back to an individual. OAuth tokens are retained only while the associated feature is actively enabled; you can request removal at any time (see Your Rights below). All other session data exists only in memory and is discarded when a session ends.

Your rights

Because we collect no personally identifiable information, most data-subject rights are satisfied by design. However, you may at any time:

  • Request deletion of any OAuth token we hold for your channel.
  • Request confirmation of what (if any) data is associated with your channel name.
  • Stop using any overlay at any time - no account deletion or opt-out flow is required.

To exercise any of these rights, contact us via Discord.

Terms of Service

Use of the tools

These tools are provided free of charge for personal streaming use. By using them you agree to:

  • Use them in compliance with Twitch's Terms of Service and any other platform's rules.
  • Not use them to spam, harass, or harm other users.
  • Not attempt to reverse-engineer, exploit, or disrupt the service.

No warranty

These tools are provided "as is" without any warranty. Features may be changed, paused, or removed at any time without notice. We make no guarantees of uptime, accuracy (e.g. song recognition), or compatibility with every streaming setup.

Limitation of liability

Glitch Studios and its contributors are not liable for any damages arising from the use or inability to use these tools, including but not limited to missed stream content, data loss, or third-party service outages.

Changes

We may update these terms at any time. Continued use of the tools after changes constitutes acceptance of the updated terms.

Contact

Questions? Reach us on Discord.