Privacy Policy
Last updated: October 21, 2026
This Privacy Policy explains how Stream Toolkit (the "App") handles your data. The App is a streaming tool that runs on your computer, developed by SnowPompom ("we", "us").
Summary
- Your settings, records and sign-in information are stored on your own computer.
- We only handle a small amount of data when a feature needs it, such as forwarding payment notifications. That data is discarded right away or deleted automatically within 3 days.
- We do not sell your data or use it for advertising.
1. Data stored on your computer
The App stores the following in your user data folder (%APPDATA%\stream-toolkit on Windows):
- Settings: feature settings, appearance, custom CSS, hotkeys and so on.
- Records: donation records, poll and giveaway history, stream markers, song request queue, new follower history and so on. These may include the names and messages viewers posted publicly in your live chat, and the names of new Twitch followers and YouTube subscribers.
- Sign-in information and keys: Twitch and YouTube/Google sign-in tokens, and the API keys and payment platform keys you enter. These are encrypted using your operating system's built-in protection, kept in a separate file, and never synced through Steam Cloud.
If you have Steam Cloud enabled, regular settings are synced to your Steam account so you can use them on another computer. Sign-in information and keys are not synced.
You can delete that folder at any time to remove all local data.
The App does not use cookies or similar technology to track you, and does not show advertisements or let third parties serve advertisements.
2. Data that passes through our server
The App uses a server we operate on Cloudflare (the "Server") only for the following:
| Purpose | Data handled | Retention |
|---|---|---|
| Twitch sign-in | Twitch authorization code and tokens (exchanged and refreshed with Twitch on your behalf) | Not stored; discarded after being passed on |
| YouTube (Google) sign-in | Google authorization code and tokens (exchanged and refreshed with Google on your behalf, because the App's Google client secret is kept on the Server) | Not stored; discarded after being passed on |
| Donation Alerts from payment platforms (ECPay, O'Pay, PayPal, Stripe) | Payment notification contents: the name and message the payer entered, amount, currency, transaction ID | Deleted automatically after 3 days |
| Payment platform setup | The payment platform keys you provide (used to verify and decrypt payment notifications), and a random user ID generated by the App | Kept until you remove that setting |
| Feedback reports | What you write, images you choose to attach, PC specifications, the App's settings and status, and recent logs (passwords, keys and tokens are masked; viewer data is reduced to counts) | Forwarded to our Discord channel for troubleshooting |
| Exchange rates | None of your data is sent; only public rates are fetched | Not applicable |
The user ID is a random number created the first time the App runs. It contains no name, email or account information, and is only used to deliver payment notifications to the right computer.
3. Third-party services
Depending on the features you enable, the App connects directly to the following services. How they handle data is governed by their own privacy policies:
- Twitch: reading chat, follow/subscription/Bits events, creating clips.
- YouTube / Google: reading your live chat and broadcast information (see Section 4).
- DeepL, MyMemory: chat translation and voice translation. The text to be translated is sent to the service you choose.
- Speech recognition: runs on your computer; audio is never uploaded. The recognition model is downloaded from Hugging Face the first time you use it.
- 7TV, BetterTTV, FrankerFaceZ: emote images.
- Google Fonts: loaded when an overlay uses a web font.
- ECPay, O'Pay, PayPal, Stripe: you set up payments on these platforms yourself; their notifications reach the App through our Server (see Section 2).
- Steam: purchase, updates, Steam Cloud and Workshop themes.
- Discord: where feedback reports are delivered.
4. YouTube API Services
The App uses YouTube API Services. By using the App's YouTube features, you agree to be bound by the YouTube Terms of Service. For how Google handles data, see the Google Privacy Policy.
When you sign in with Google in the App, it uses the following YouTube data within the scope you authorize:
| Data | Used for |
|---|---|
| Your channel's name and ID | Showing which channel is signed in; making sure the chat bot only posts on your own streams |
| Your broadcasts (title, status, start time, live chat ID) | Finding your current stream automatically, connecting to its chat, and timing stream markers |
| Live chat messages | Letting the chat bot post replies and timed messages; looking up the Jewel amount of a gift when it is not already known |
| Your channel's recent subscribers (name and channel ID; only viewers whose subscriptions are public) | New Follower Alerts — checked only while you are live |
| Your channel's membership level names | Filling in the membership level settings when you click "Import levels from YouTube" |
| Public channel names of viewers in your chat | Showing viewers' display names instead of their @handles, if you turn that option on |
| Public video titles and playlist items | Showing the title of the stream you connected to; playing the default playlist in song requests |
If you entered your own YouTube API key in an earlier version, the App may use that key instead of your Google sign-in for the public lookups above.
This data is used only for those features, is stored only on your computer, is never sent to our Server (except the token exchange at sign-in, see Section 2), and is never shared with third parties. YouTube data is read when it is needed. YouTube data the App keeps on your computer is refreshed or deleted within 30 days:
- Viewer display names, the new follower history, the list of subscribers already announced, and learned gift Jewel amounts are deleted after 30 days.
- Your channel's name is read again every day while you are signed in.
- Imported membership level names are imported again automatically every 30 days while you are signed in.
Stream Toolkit's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Revoking access: click Disconnect next to YouTube in the App's Settings at any time — this also revokes the App's access in your Google account. In addition, you can revoke the App's access to your data at any time via the Google security settings page at https://security.google.com/settings/security/permissions. After revoking, the App stops accessing your YouTube data, and you can delete the folder described in Section 1 to remove local data.
5. Children
The App is not designed for children under 13, and we do not knowingly collect data from children.
6. Security
Keys and sign-in tokens are stored on your computer using your operating system's built-in encryption. Connections to our Server and to third-party services use HTTPS.
7. Your rights
You can at any time:
- Delete local data: delete the folder described in Section 1.
- Remove payment platform settings from the Server: clear that platform's keys in the App.
- Ask us to delete any data we hold: email us at the address below, and we will handle it within 30 days.
8. Changes to this policy
If this policy changes, we will update this page and the "Last updated" date above. Significant changes will be announced in the App's release notes.
9. Contact
Questions about this policy: snowpom.game@gmail.com