Privacy Policy

Effective date: July 9, 2026.


1. Introduction

BotOfTheSpecter, operating under the business name YourStreamingTools and registered as a subsidiary of LochStudios, Australia Business Number 20 447 022 747 (“Company,” “we,” “us,” or “our”) is committed to protecting your privacy and complying with applicable data protection laws, including the Australian Privacy Principles and the GDPR where it applies. This Privacy Policy explains how we collect, use, share, and protect personal information when you visit our websites or use our services.

Our services include the public website, account pages, dashboard, Twitch bot, Discord extension, Kick companion bot, browser-source overlays, API and WebSocket services, optional stream recording and multi-destination forwarding tools, and related ecosystem pages (together, the “Services” or “Site”).


2. Data controller & contact information

For GDPR and general privacy purposes, BotOfTheSpecter / YourStreamingTools is the data controller for personal information we process about you. If you have questions about this Privacy Policy or our data practices, contact us at questions@botofthespecter.com. For data-subject requests (access, erasure, and similar rights), use gdpr@yourstreamingtools.com.


3. Information we collect

3.1 Account and identity information

We use Twitch as our primary login provider (“Sign in with Twitch”). When you authenticate with Twitch, Twitch Interactive, Inc. may provide us with account information associated with your Twitch account, such as your Twitch user ID, username/display name, profile image, and the email address linked to your Twitch account where available/authorised. We may also store information you provide when you contact support or submit tickets through our support portal.

Your use of Twitch is governed by Twitch’s policies, including their Privacy Policy and Terms of Service.

3.2 Service and feature data

To operate the bot and dashboard features you enable, we store configuration and operational data associated with your channel/account. Depending on which features you use, this may include:

  • Channel and bot settings: preferences, feature toggles, custom commands, aliases, timers, alert settings, overlay preferences, timezone and display options, and similar configuration.
  • Community and engagement data: points/currency balances, watch time, lurker status, channel-point redemption history, death counters, counts, typos, hugs/kisses/high-fives, todos, and other feature-specific records generated through chat or dashboard use.
  • Chat and event history: messages and event metadata processed to provide commands, moderation tools, AI features (where enabled), and troubleshooting.
  • Media you upload: walk-on sounds, music, alert media, and similar assets stored for use with overlays or bot features.
  • Credentials we issue or store for you: API keys and OAuth tokens needed so your dashboard, bot instance, overlays, and integrations can authenticate to our Services. We do not collect or store full payment card numbers.

3.3 Connected integrations

If you connect or configure third-party services, we receive and store the information needed to provide those features. Integrations available in the product include:

  • Discord: OAuth tokens, Discord user/guild identifiers, channel settings, and related alert configuration when you link Discord or use the Discord extension (including Discord–Twitch account linking).
  • Spotify: OAuth tokens and account identifiers for now-playing, song requests, and related music features.
  • StreamElements and Streamlabs: OAuth/socket tokens and identifiers for tip and donation events you enable.
  • Patreon, Ko-fi, and Fourthwall: webhook event payloads (for example memberships, donations, or shop orders) routed to your channel using your API key.
  • Kick: channel event data processed by the Kick companion bot and webhook endpoints; optional Kick stream-forward settings if you configure recording/forwarding.
  • HypeRate: a heart-rate code you configure and live heart-rate values used by related commands/features.
  • YouTube (limited): URLs/titles used for song requests or media playback, and optional YouTube RTMP stream-forward keys if you enable multi-destination streaming—not a full YouTube account OAuth product.

Each third-party service has its own privacy policy. We only request access needed for the features you enable, and you can disconnect some integrations where the dashboard provides that option.

3.4 Platform services we call on your behalf

Some features use platform-operated third-party APIs (you do not supply your own keys for these). Depending on features used, this may include:

  • OpenAI: chat/AI responses and text-to-speech generation may send prompts, chat context, or TTS text to OpenAI to produce the response or audio you requested.
  • Weather providers: location strings and weather queries (for example OpenWeatherMap) to answer weather commands and drive weather overlays.
  • Shazam (via API provider): short stream-audio samples may be analysed to identify a song when that failover path is used.
  • Steam: game-name lookups to map a current game to a Steam store listing.
  • ExchangeRate-API: currency amounts and codes from chat conversion commands.
  • IP geolocation (for example IPLocate): approximate location/VPN-related flags derived from IP address for session/security views.

3.5 Usage, technical, and security data

We automatically collect technical information needed to operate and secure the Services, including:

  • Log and device data: IP address, browser/user agent, device-related headers, and approximate location derived from IP address.
  • Session and authentication data: login/logout and session identifiers used to keep you signed in and help prevent unauthorised access.
  • Technical and performance data: error reports, diagnostics, response times, WebSocket connection events, and system metrics used for reliability monitoring and debugging.

3.6 Premium and payment-related information

BotOfTheSpecter Premium is provided through a Twitch channel subscription to the bot developer Lachlan (gfaUnDead, https://twitch.tv/gfaundead). Premium eligibility is determined using Twitch subscription status (and, where applicable, an internal beta-access flag). Payment for that subscription is processed by Twitch, not by us. We receive subscription tier/status information needed to unlock premium features; we do not receive or store your full card details for Twitch subscriptions.

We do not currently operate an in-product card checkout for BotOfTheSpecter Premium. If we offer other paid products in the future, we will update this policy and identify the payment provider used at that time.

3.7 Stream recording and media (where enabled)

If you use our optional stream ingest, recording, or multi-destination forwarding tools, we may process stream media, stream keys/forward settings you provide, technical stream metadata (for example bitrate, resolution, and connection details), and operational logs needed to receive, forward, record, convert, and store streams. Recording and storage may use multi-region infrastructure (for example Australia, United States, and Europe), depending on the ingest location and storage path configured.

3.8 Cookies and similar technologies

We use cookies and similar technologies (including local storage and session storage) for core functionality and preferences, such as:

  • Strictly necessary cookies / session storage: session management, login/authentication, security protections, and enabling key site features.
  • Preference storage: remembering settings you choose (for example display theme or dashboard UI preferences) so you do not have to re-enter them each time.

On the dashboard, you may be offered cookie preference controls for certain non-essential preference cookies. Our public home Site does not currently run a third-party advertising or product-analytics cookie suite. You can also control cookies through your browser settings; disabling certain cookies may affect site functionality.


4. Lawful bases for processing

Where the GDPR or similar laws apply, we rely on one or more of the following bases:

  • Consent: where you have given consent (for example optional preference cookies where consent is requested).
  • Contractual necessity: to provide Services you have requested or entered into with us.
  • Legal obligation: to comply with laws and regulations.
  • Legitimate interests: for our legitimate business interests (such as securing our systems, preventing abuse, improving reliability, and operating features you enable), provided your rights are respected.

5. How we use your information

  • To provide, operate, maintain, and improve the Services, including bot features, dashboard configuration, overlays, APIs, and integrations you enable.
  • To authenticate you, manage accounts, and determine premium or beta entitlements.
  • To communicate with you about account changes, security notices, support requests, data-export delivery, and service updates.
  • To comply with legal and security obligations.
  • To detect, prevent, investigate, and take action against spam, abuse, fraud, and other prohibited activity, including enforcing our Terms of Service.
  • To generate diagnostics and reliability metrics that help us keep the platform available and secure.

6. Sharing your information

We do not sell your personal information. We share or disclose personal information only when necessary to operate our Services, provide requested features, comply with legal obligations, or protect the security and integrity of our systems.

Typical disclosures include:

  • Platform partners you use or connect: Twitch (login and premium status), Discord, Spotify, StreamElements, Streamlabs, Kick, Patreon, Ko-fi, Fourthwall, and similar platforms exchange data as needed for authentication and the features you enable. Their processing is governed by their own policies.
  • Service providers we use to run the product: for example email/SMTP delivery for support and data exports, object storage (including Cloudflare R2 for large export downloads), infrastructure/hosting providers, AI providers when you use AI or TTS features, weather/music-recognition/currency/IP geolocation APIs, and similar operators needed to deliver a feature.
  • Privacy data export delivery: when you request an export via Export my Data on the dashboard profile page (or via a manual privacy request), we prepare a ZIP of account-related data and deliver it to the email address linked to your Twitch account (or otherwise provided/verified). Smaller exports may be emailed as an attachment; larger exports are delivered via a time-limited download link (currently valid for up to 7 days).
  • Legal requests: where we are required to disclose information under applicable law, including lawful requests from government authorities (including from another country where applicable legal processes apply).
  • Business transfers: if we are involved in a merger, acquisition, reorganisation, or sale of assets, personal information may be transferred as part of that transaction, subject to appropriate protections.

7. International storage and transfers

We are based in Australia. Core application systems are operated as part of our Australian-based platform. Personal information may still be processed in other countries in limited cases, including:

  • when you use multi-region stream infrastructure (ingest/recording nodes and related storage in regions such as Australia, the United States, or Europe);
  • when third-party providers (Twitch/Discord and other platforms, AI providers, email delivery, object storage, weather and similar APIs) process data in their own regions; or
  • when support, security, or legal processes require access from another jurisdiction.

Where personal information is transferred internationally, we take steps designed to ensure it continues to be protected in accordance with this Privacy Policy and applicable law.


8. Data retention

We keep personal data only for as long as it is reasonably necessary to provide our Services, fulfil the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, enforce our agreements, and protect the security and integrity of our systems.

Retention depends on the type of data and why we collected it. For example:

  • Account, profile, and channel configuration: retained while you maintain an account with us so we can provide the Services you request. If your access is terminated or your account is closed, we may retain limited data for compliance, fraud prevention, security, and dispute resolution.
  • Feature and community data: retained while the related features remain active for your channel, or until deleted through available tools or a valid erasure request, subject to backup and legal retention needs.
  • Usage, security, and diagnostic logs: retained for a limited period as needed for security monitoring, abuse prevention, troubleshooting, and service reliability.
  • Premium entitlement checks: subscription tier/status is checked against Twitch (and internal beta-access flags where applicable) as needed to provide premium features.
  • Stream recordings (if used): retained according to the recording/storage path you use and any retention controls we provide; temporary intermediate files may be discarded after conversion or processing.
  • Privacy data exports: download links for large exports are time-limited (currently up to 7 days). You can request a new export if needed.

Where retention is required by law, or where we need to establish, exercise, or defend legal claims, we may retain relevant information for longer.


9. Your rights

Depending on where you live, you may have rights in relation to your personal data (subject to certain conditions and exemptions). If the GDPR applies to you, these may include:

  • Right of access: request access to the personal data we hold about you.
  • Right to rectification: request that we correct inaccurate or incomplete personal data.
  • Right to erasure (“right to be forgotten”): request deletion of your personal data in certain circumstances.
  • Right to restriction of processing: request that we limit how we use your personal data in certain circumstances.
  • Right to data portability: request a copy of certain personal data in a portable format.
  • Right to object: object to processing in certain circumstances (including certain processing based on legitimate interests).
  • Right to withdraw consent: where we rely on consent, you can withdraw it at any time (this does not affect processing already carried out).

Australian users may also have rights under the Privacy Act 1988 (Cth), including the right to request access to and correction of personal information we hold, and to complain about our handling of personal information.

To exercise these rights, contact us at gdpr@yourstreamingtools.com. To protect your privacy and security, we may need to verify your identity before completing your request. We aim to respond within the timeframes required by applicable law (generally within one month under the GDPR, and may be extended where permitted).

You may also lodge a complaint with your local data protection authority (or, in Australia, the Office of the Australian Information Commissioner) if you believe our processing of your personal data infringes applicable law.

9.1 Export my Data (automated download)

If you would like to access or export personal data we currently hold about your account/profile, you can use the Export my Data button on the dashboard profile page. When you request an export, our system collects information currently stored about your account/profile, packages it into a ZIP file, and emails delivery instructions to the email address linked to your Twitch account (shown when you start the export). Depending on size, the ZIP may be attached to the email or provided via a time-limited download link (currently up to 7 days).

If the email address shown is not correct, update your email address on Twitch, log out and log back into the dashboard, and try again. Alternatively, email us at gdpr@yourstreamingtools.com to request an export manually.


10. Security

We implement reasonable technical and organisational measures designed to protect personal data from accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.

Our security measures may include (as appropriate):

  • Access controls: limiting access to personal data to authorised personnel and systems on a need-to-know basis.
  • Encryption in transit: using HTTPS/TLS for data transmitted between your device and our Services where supported.
  • Monitoring and logging: maintaining security and diagnostic logs to detect suspicious activity, prevent abuse, and investigate incidents.
  • Operational safeguards: applying security updates, using least-privilege principles, and maintaining backup and recovery practices appropriate to the service.

You are responsible for keeping your account access secure (for example, protecting your Twitch account, connected integration credentials, API keys we issue to you, and any devices you use to access our Services). While we work to protect your personal data, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.


11. Children

Our Services are intended for streamers and users who can lawfully use Twitch and related platforms. We do not knowingly collect personal information from children in a manner that violates applicable law or platform age requirements. If you believe a child has provided personal information to us inappropriately, contact us and we will take appropriate steps to delete the information where required.


12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to our practices, technologies, legal requirements, or for other operational reasons.

When we make changes, we will post the updated policy on this page and update the “Effective date” above. Unless stated otherwise, changes take effect when they are posted.

If we make material changes, we may provide additional notice where appropriate (for example, by displaying a notice on the Site or contacting you via an email address associated with your account). We encourage you to review this policy periodically.


13. Contact us

If you have questions or would like to contact us about privacy or our Services, you can reach us at: