Privacy policy

What we collect

• Account details: your name, email address and, if you sign up with email, a password, which we store only as a salted hash.
• Connected Twitch and Google accounts: the account ID, the permissions you granted, and the access and refresh tokens the platform gives us. Tokens are encrypted before they're stored.
• Chat from your channels: while you have a session running, the chat messages posted on the Twitch and YouTube channels you connected, with each author's platform user ID, display name and roles (for example moderator or subscriber), and what the filter decided about each message.
• Your settings and game progress: the games you play, how far you've got, your filter settings, the moderators you invite to update your progress, and a log of progress changes.
• Corrections: when you mark a message as a spoiler or not, we keep that message's text, the text of the few messages before it (without their authors), the filter's original decision and your verdict.
• Technical data: your IP address and browser user agent, stored with your sign-in sessions and used for rate limiting, plus standard request logs.

How we use it

• To sign you in and keep your account secure, including bot protection and rate limiting.
• To read chat from the channels you connect, filter it for spoilers and show it to you.
• To send you account emails: email verification and password resets. We don't send marketing email.
• To improve the spoiler filter using the corrections you make.

We don't sell your data, use it for advertising, or share it with anyone except as described below.

Google user data

If you connect a Google account, we ask for read-only access to your YouTube account (the youtube.readonly scope). We use it only to find your current live broadcast and read its live chat, so we can filter it for you. We don't read anything else, and we never post, edit or delete anything on YouTube.

Spoiler Curator's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can remove our access at any time from your Google account permissions page, or by disconnecting Google in your Spoiler Curator account settings.

Twitch user data

If you connect Twitch, we ask for permission to receive your channel's chat (the user:read:chat, user:bot and channel:bot scopes). We use it only to read chat on your own channel while you have a session running. We never post or moderate in your chat. You can remove our access from Twitch's Connections settings.

How long we keep it

• Chat: a stream session's chat is deleted 24 hours after the session ends, or as soon as you start your next session if that's sooner. Messages held for your review are kept until you review them, for up to 7 days. Any chat older than 48 hours is deleted regardless, apart from messages still waiting for review.
• Corrections: kept while your account exists, because they're how the filter improves.
• Account, settings and progress: kept while your account exists.
• Sign-in sessions: expire after 7 days without use.

Who processes it for us

• Cloudflare hosts the app and stores its data, runs the AI model that checks messages for spoilers, and delivers verification and password reset emails.
• OpenRouter and the model provider it routes to (Google) turn chat messages and spoiler descriptions into numerical representations (embeddings) so similar spoilers can be found. They receive the message text only, not who wrote it.
• Twitch and Google provide your chat and sign-in, under their own privacy policies.

Deleting your data

You can delete your account at any time from your account settings. That deletes your account, connected accounts and tokens, settings, progress, invitations, corrections and any chat we're holding for you, and stops our access to your Twitch and YouTube chat. You can also email us at privacy@chatcurator.uwuwhatsth.is and we'll delete it for you.

If you're a viewer

If you chat in a channel whose streamer uses Spoiler Curator, your messages, platform user ID, display name and roles are processed as described above, and shown only to that streamer. They're deleted on the schedule above. To ask about your data, email privacy@chatcurator.uwuwhatsth.is.

Children

Spoiler Curator isn't meant for children under 13, and we don't knowingly collect their data.

Changes and contact

If we change this policy, we'll update the date at the top, and tell account holders by email about significant changes. Questions: privacy@chatcurator.uwuwhatsth.is.