This page says what Switchbud keeps, why, and for how long. The short version: we keep what's needed to run your alerts and widgets, we never sell it, there are no ads and no tracking, and chat is never stored.
Switchbud is run by QTNET (keytodev) (see the legal notice), in France, who decides how this data is used (the “controller” under the GDPR). Write to keytodev@proton.me about anything here.
What we keep about you
- Your Twitch account: your Twitch id, username, display name and profile picture — from Twitch, when you sign in.
- Access to Twitch: the keys (“tokens”) Twitch gives us so Switchbud can work on your channel. They're encrypted and never sent to your browser.
- Bot account (if you connect one): its Twitch id, username and display name, and its encrypted chat token. Removed when you remove the bot or delete your account.
- Your settings: alert designs, widgets, your colours and font (Packs), chat commands (and how often each was used), timers, filters, quotes, giveaways, and your automations with their counters; and which page tours you have been offered, so each page asks only once.
- Your uploads: the images, videos, sounds and fonts you add.
- Packs you share: a copy of what you shared (widgets, alert designs, brand kit, their files), how many times it was installed, and reports about it — who reported, why, and their note. Its page shows your Twitch name and picture. Deleted when you stop sharing it or delete your account; a report you made is deleted with your account.
- Paid packs bought or sold: which pack, who bought it, who made it, the price, our fee, when, and whether it was refunded. If you sell packs, the id of the Stripe account you linked and whether it can take payments. Your card and bank details go to Stripe, never to us. Deleting your account removes your name from these records; the sale itself stays, without it, because we must keep our accounts. Your Stripe account is yours: it stays, at Stripe.
- Tip connections: your Ko-fi verification token or StreamElements token, encrypted, if you connect them.
- Kick and YouTube: if you link them, your account's id and name there, and the keys they give us to read and write your chat, encrypted.
- Discord: the webhook address for your go-live post, encrypted, if you add one.
- Webhooks: the addresses you save for automations to post to, encrypted. Only their names and sites are ever shown again.
- Who invited you: if you signed up through another streamer's “Made with Switchbud” link or their viewer page, which streamer, and whether they've had their free month of Pro for it. They see how many streamers joined through them, never who. Deleted with your account, or with theirs.
- What's done: whether you've added your alert box to OBS or sent a test, so the setup checklist can tick itself.
- Stream stats: for each of your last 50 streams (200 on Pro), when it ran, its title and game, the viewer counts Twitch reports, your follower count at the start and end, how many follows, subs, bits, raids and tips it had, how many chat messages and different chatters, and the display names of its three busiest chatters with their message counts — never what was said. Stats also keep a viewer count and your follower count every five minutes of each stream, the raids, hype trains, gifted-sub bursts, big cheers and ad breaks in it (with the raiding channel's name), and, if you press “Read my history from Twitch”, how many followers followed on each day and your past broadcasts (when, how long, title, replay views) — followers counted by day, never kept by name.
- Twitch's public numbers: every half hour, for each of Twitch's top categories, how many people watch, how many streams there are and what the middle one gets. Nobody's channel is named, and none of it is about you.
- Panels: the titles, icons and style of your channel panels. The images are made in your browser.
- Editors: the Twitch id, name and picture of each person you let into your dashboard, when they last signed in, and a list of their last 200 changes (which part, and when) for you to see. When an editor signs in, Twitch is asked for nothing and the key it hands us is given straight back: we keep no access to their account.
What we keep about your viewers
To show your alerts and widgets, Switchbud handles information about the people in your chat:
- Events — follows, subs, gifts, cheers, Power-ups, raids, shoutouts, watch streaks, charity donations, channel point redemptions, hype trains and tips, and if you link them, Kick's follows, subs, gifts and Kicks and YouTube's Super Chats, Super Stickers and memberships: the viewer's name and what they did (amount, message). We keep the latest 1,000 per channel, so event lists, labels and credits work; older ones are deleted automatically.
- Leaderboard totals — for leaderboards, each viewer's name and how much they tipped, cheered and gifted, added up per month (never the messages). Anonymous support isn't counted. They're kept until you delete your account, so a month or all-time board stays right after the events themselves are gone.
- Your viewer page — only if you turn it on: a public page at /c/your-name showing the parts you choose — song titles with who asked for them, your Twitch schedule (read from Twitch each time the page loads, never stored), and your commands — plus whatever you write about yourself and any links to your other places, which are your own words, not a viewer's. Nothing a viewer couldn't already see in your chat or on Twitch itself; turning it off takes it down at once. The Switchbud panel on Twitch shows the same page.
- Tips — only the name, amount, currency and message. The services also send the tipper's email, country and, for shop orders, an address; we throw that away the moment it arrives. A tip marked private on Ko-fi is shown without a name or message, and a hidden Buy Me a Coffee note isn't shown.
- Chat — from Twitch, and Kick or YouTube if you link them — is read as it happens, for the chat box, emote wall, filters and commands, and never stored. The chat bot keeps a short log of its last 50 actions (who, what, and the message it acted on) in memory only; it's gone when the server restarts.
- Read aloud — if you switch it on for an alert, its message is turned into speech on Switchbud's own server, by open-source voices running there: it's never sent to another company. The last few are kept in memory, so a replay needn't make them again, and are gone when the server restarts.
- Song requests and media share — if you switch them on: who asked (name and platform id), the YouTube video and its title, and for media share the tip's amount and message. To check a video can play and get its title, its link is sent to YouTube. The queue and the last 100 played are kept until you delete your account.
- Giveaways and quotes — entrants' Twitch id and name until you end the giveaway; quotes and who added them until you delete them.
Why we're allowed to
- To give you the service you signed up for (GDPR art. 6(1)(b)): your account, settings, uploads and the connections you choose.
- Our legitimate interest (art. 6(1)(f)): handling your viewers' events and chat so your alerts, widgets and bot work, keeping Switchbud safe from abuse, and counting visits to this site. We keep as little as we can, for as short as we can, and viewers can object.
- The law (art. 6(1)(c)): when an authority lawfully asks us for something.
Counting visits
We count the visits to this website, without cookies and without a profile of anyone. For each page we send, a number is added against the day, the page, the website the visitor came from (its name only, not the page), the language their browser prefers, and whether it looks like a phone, a computer, a search engine, an AI crawler, a link preview or another robot. To count visitors rather than page views, the visitor's IP address and browser type are scrambled in one direction with a secret that is new every day and lives only in memory: neither the address nor the scrambled value is ever stored or logged, and yesterday's cannot be matched with today's. We also count, by day and by the page they came from, how many sign-ins and Pro payment pages were started. Only we see these counts. We use them to see what works on the site and improve it; they are not shared, sold or used for advertising, and are deleted after about two years.
Cookies
One cookie keeps you signed in, and short-lived cookies carry the Twitch sign-in step: they protect it, and remember the page to come back to and, if a streamer's link brought you, who invited you. All are needed for the site to work, and the sign-in ones are gone within ten minutes. No advertising cookies, no tracking cookies, and none to count visits (see Counting visits) — which is why there's no cookie banner. Your choice of language and of light or dark mode are kept in your own browser, never sent to us.
Who else sees it
- Twitch — we call Twitch on your behalf to read your channel's events and, if you use the chat bot, to delete, time out and reply. If you have the bot set up, we also ask Twitch once a minute whether you are live, so it can keep working while OBS is closed.
- Ko-fi, StreamElements, Tipeee, Streamlabs, Buy Me a Coffee, Fourthwall and Throne — only the ones you connect.
- Kick and Google (YouTube) — only if you link them: we read your chat there and answer in it, receive your follows, subs, gifts, Kicks, Super Chats and memberships for your alerts, read whether you're live and how many watch, and set your stream title when you ask.
- Discord — only if you add a webhook: your go-live message, with your stream's title and game, and your after-stream recap if you tick it.
- Your Pro subscription: whether you have one, its status, monthly or yearly, when the period you have paid for ends, and the ids of your customer and subscription at Stripe. Your card, email and billing address go to Stripe, never to us. We keep this while your account exists; Stripe keeps its invoices as the law requires.
- Discord (ours) — only if you use Report a problem: what you wrote, your Twitch name and the screen you were on go to our team's Discord channel.
- Stripe — only if you buy or sell a paid pack. A buyer pays on Stripe's own page, with their card details and email; the money goes to the creator's own Stripe account, less our fee. A creator gives Stripe who they are and their bank on Stripe's pages. We tell Stripe the pack, its price and our fee; it tells us when a payment went through and whether a creator's account can take payments. Pro: if you subscribe, you pay Stripe on its page, with your card details and email; we tell Stripe which price and which channel it is for, and it tells us when the subscription starts, renews, fails or ends.
- Webhooks you add to automations — the message you wrote and what set it off (for example a viewer's name and the bits they cheered), sent only to the address you saved.
- 7TV, BetterTTV and FrankerFaceZ — when your chat box or emote wall loads, we ask them for your channel's emote list (by your Twitch id), and OBS loads the emote pictures from them. You can switch this off per widget.
- Sites a pack you import uses — a pack's code can load fonts, pictures or scripts from other sites (Google Fonts, for example) when OBS shows it, or when you press “Try it live” on a pack in the gallery (the studio’s packs use Google Fonts). Those sites see that request, as they would on StreamElements or Streamlabs; the pack never sees your account or your links.
- The company that hosts Switchbud — it stores the data for us, on servers in France, and may not use it for anything else: OVH SAS.
We don't sell data, share it with advertisers, or use it to train anything.
Your data is stored in France, in the EU. Twitch, Google, Discord and some of the other services above are outside it, mostly in the United States: data goes to them only because you connected them or use a feature that needs them. Where a company is certified under the EU–US Data Privacy Framework, that covers the transfer; otherwise it's needed to give you the service you asked for (GDPR art. 49(1)(b)).
How long
Until you delete your account. Deleting it (Home → Account → Delete) removes everything above at once — settings, uploads, events, tip connections, quotes — ends any Pro subscription, and hands your Twitch access back to Twitch. Signing out alone keeps your account. Backups — encrypted, and kept in France — are deleted within 30 days.
Keeping it safe
Everything travels encrypted (HTTPS). Twitch and tip tokens are encrypted in our database. Your session cookie can't be read by scripts, and we only store a scrambled form of it. Uploads are checked to be real images, videos or sounds before we keep them.
Your rights
You can see, correct or delete your data, get a copy of it, limit or object to how it's used, and — under French law — say what should happen to it after your death. Most of it you can see and change in the dashboard; for anything else, write to keytodev@proton.me. We answer within one month. Viewers who want something about them removed can write to us too, or ask the streamer.
If you think we've got it wrong, you can complain to the CNIL, France's data protection authority, at cnil.fr, or to the one where you live.
Children
Switchbud is for people old enough to use Twitch where they live (at least 13).
Changes
If this page changes, the date at the top changes. For anything important we'll tell you in the dashboard first.