Privacy Policy

The short version

Streff runs on your PC. To use it you sign in with a free Streff account. Apart from that account, the only data that leaves your computer goes to the services you connect the app to, to do what you asked — and, only if you say yes, a support or crash report and anonymous daily usage counts to Tefflabs.

If you subscribe to Streff Pro, Tefflabs also holds your subscription details, and two Pro features you choose to turn on use Streff's own server: cloud backup, and the mod view (which passes what your moderators' page shows through it, without keeping it). Stream recaps stay on your PC unless you post one to your Discord. All of it is described below.

What Streff stores on this PC

All of the following stays in your Windows user profile and is deleted when you uninstall the app and remove its data folder (%APPDATA%\streff).

• Your Twitch sign-in and OBS WebSocket password, stored encrypted so only your Windows user can read them.
• Your settings, layouts and per-module preferences (browser local storage).
• A rolling in-memory copy of recent chat, alerts, viewers and moderation events for the tiles to show — not written to disk, gone when the app closes.
• Sound files you add for channel-point rewards.
• An optional song-request log file, only if you turn logging on in Song Request settings.
• Stream recaps (Streff Pro), for your last 30 streams: each stream's title, category, start and end, viewer counts through it, the moments in it (follows, subs, cheers, raids, redemptions, finished polls and predictions, songs played, clips and your markers) with the names of the viewers involved, and how many chat messages each person sent — not what they said. Kept on this PC only, never in a cloud backup; delete any of them in the Recap window.
• Your Discord webhook address, if you add one to post recaps, stored encrypted like your Twitch sign-in.
• Your StreamElements and Streamlabs tokens, if you connect them in Settings → Donations, stored encrypted like your Twitch sign-in.
• Backups you make on this PC (Settings → Data), in Streff's data folder.

What leaves this PC, and where it goes

Each of these happens only when you use the feature that needs it.

• Twitch (id.twitch.tv, api.twitch.tv, EventSub, chat) — signing in, reading your chat, followers, subscribers, moderators, VIPs and stream info, performing the actions you take in the app (messages, bans, timeouts, raids, polls, channel-point rewards, stream markers, your title and category), and, for a stream recap, looking up that stream's clips and VOD. Governed by the Twitch Privacy Notice.
• Twitch CDN (static-cdn.jtvnw.net) — fetching emote and badge images shown in chat.
• 7TV — fetching third-party emote images for your channel.
• GIPHY — fetching GIF images that Tier 2/3 subscribers post in chat, when the app renders them.
• YouTube Music (music.youtube.com, youtube.com) — searching for songs and looking up a requested video's title, artist, length and category for song requests. Sent from your PC without a Google account. YouTube Music playback itself goes through the YTMDesktop app on your PC, not through us.
• Google Fonts (fonts.googleapis.com) — the app's typefaces are loaded from Google at launch. Google may log the request.
• Your website relay endpoint — only if you enable the Websocket tile and enter an endpoint of your own, the app pushes your live status and now-playing track to it.
• OBS — over the OBS WebSocket on your own machine or network; nothing about OBS goes anywhere else.
• Streff support (streff.tv, run by Tefflabs) — only when you send a report from Settings → Support, agree to send a crash report, or turn on automatic crash reports. A report holds what you typed, Streff/Windows versions, an anonymous install id, which modules were on and what was connected, and recent log lines — with tokens, email addresses (except one you choose to give) and your Windows username removed first. Nothing is sent in the background otherwise.
• Anonymous usage counts (streff.tv, run by Tefflabs) — only if you say yes when asked, or turn it on in Settings → Support. Once a day: an anonymous install id, the Streff version and Windows, your plan, how many times Streff was opened, crashes and minutes open, which tiles are switched on, whether you use a custom overlay theme, and how many times some features were used (for example “skipped an alert” or “spun a wheel”). Never your channel, your viewers, chat, or anything you type. Settings → Support shows today's counts exactly as they would be sent; turning it off deletes anything not yet sent. A day that can't be sent is dropped after a week.
• Your Streff account (streff.tv, run by Tefflabs) — everyone who uses Streff has one: your email address, your username, your Twitch or Discord account id and name if you sign in with one of those, and, for each Twitch account you add on streff.tv, a read-only Twitch permission to list the channels you moderate (kept encrypted until you remove that Twitch account) and that list (each channel's id and name, and when it was read), which is what shows you the mod views you can open; the channels you link (their platform, id and name: Streff proves each one with its sign-in, which is checked with the platform and then thrown away, never kept), your plan (Free or Pro) and its dates, and the anonymous install id of each computer you sign in on, so your licence can be checked and, for Pro, the computer limit applied. Streff checks your licence with Tefflabs every few hours while it is open, and keeps working without it once signed in.
• Cloud backup (Streff Pro; Streff's server, live.streff.tv) — every day, and before an import or restore, Streff sends a backup of each signed-in account's settings, pages, saved Layouts and overlay themes, with the images they use. That can include names you have typed into those settings (wheel entries, goal names, allowed users in the chat filter) and each account's Twitch name. Never passwords, tokens, hotkeys or your song-request queue and history. It is stored encrypted for your Tefflabs account — Tefflabs could technically read it, and doesn't — and only you can list, download, restore or delete it (Settings → Data). It is kept with a storage provider in the EU, encrypted, so the storage provider can't read it. Up to 10 backups you name are kept until you delete them, plus the latest automatic one of each kind (daily, before a restore, before an import), within 100 MB per account; each image is stored once. All of them are deleted when you ask, or 90 days after your Pro ends. (Backups you make on this PC stay in Streff's data folder and go nowhere.)
• Mod view (Streff Pro; Streff's server, live.streff.tv and mod.streff.tv) — only while you have the mod view on. Streff keeps a connection to Streff's server, signed in with your Pro licence, and sends your mod view settings: which of your Twitch moderators you let in (their Twitch ids and names) and what each may do, and every 10 minutes the list of your channel's moderators on Twitch, so someone you unmod on Twitch loses the mod view within minutes. The server keeps your settings for your channel (the moderator list only in memory), to check every action a moderator takes, until you ask us to delete them, or 90 days after your Streff last connected. It also sends what your moderators' page shows, as it changes: your alerts and the alert queue, the music playing and song requests, your wheel (its entries only to moderators allowed to edit them), goals, ad timer, clips, messages held by AutoMod, polls and predictions, OBS scenes and audio sources, your stream's title, category and tags, and your viewer count — which include the names (and, for held messages, the words) of viewers. These are passed straight to the moderators you let in who have the page open, and are never stored. Actions your moderators take come back the same way; Streff checks each against your settings again before doing it, and shows it in your Mod Actions tile.
• Traffic counts (Streff's server and downloads site) — like any website, Streff's server and download site see the address each request comes from. Before anything is written down, that address is cut to a coarse network (the last part removed), and it is kept that way for 14 days with what was asked for, how big it was and when — never cookies or sign-in details. From it we count traffic and connections per region, to decide where to put servers; only those regional totals are kept longer. Full addresses are never stored.
• StreamElements and Streamlabs — only if you connect them in Settings → Donations: Streff connects to that service's live feed with the token you gave it and receives the tips sent to you (the donor's name, the amount and their message), which it shows as alerts and can read out, count towards a goal and keep in your stream recap on this PC. Nothing about them is sent to us. Governed by those services' own privacy policies.
• Discord (discord.com) — only when you press Post to Discord on a stream recap: the recap goes to your own Discord webhook — your stream's title, category, date and length, its viewer and support totals, the moments you ticked (with the viewers' names in them) and your top chatters' names and message counts.
• Stripe and Link — when you buy or manage Pro, you pay through Stripe's checkout, sold as Link, which handles your card and billing details under its own privacy policy. We receive your email address, what you bought, your country (for tax) and any discount code used — never your card details. Your Twitch data is never shared with it.

Other people's data

Chat messages, usernames and viewer lists shown in Streff belong to your viewers and come from Twitch under Twitch's terms. Streff shows them to you as a channel operator. They are not sent to us, except in ways you switch on: with the mod view on, what your moderators' page shows passes through Streff's server to the moderators you let in, without being stored; and a cloud backup can include names you have typed into settings (such as wheel entries).

If you turn on text-to-speech, overlays, the song-request log or stream recaps, viewers' words may be spoken on your stream or shown in OBS, and their names may be written to the log file or kept in a recap on your PC — and posted to your Discord if you post a recap. That is your choice to make as the streamer.

Your moderators and Streff's website

To use the mod view, you and your moderators sign in at mod.streff.tv with a free Streff account, with their Twitch accounts added on streff.tv. The Streff account site then hands mod.streff.tv a short-lived signed pass saying who they are on Twitch (id, name, display name, profile picture) and which channels they moderate — nothing else, and no Twitch sign-in of theirs is kept on Streff's server. The server keeps that for up to 7 days unused, 30 at most, or until they sign out. It also keeps each moderator's own page layout for each channel until they ask us to delete it, or six months after they last changed it.

The page shows your stream and chat with Twitch's own player and chat (Twitch's terms and privacy notice apply to those), and loads song artwork from YouTube's image servers. The site has its own privacy page for moderators, who may never install Streff.

Local overlay server

Streff runs a small web server on your PC so OBS Browser Sources can show its overlays. Only programs on the same computer can reach it, and it serves nothing but the overlay pages and their live data.

Children

Streff is a tool for channel operators and is not directed at children under 13. Twitch requires its users to be at least 13.

Your rights and choices

To remove everything Streff keeps on your PC, sign out (which revokes the Twitch token), uninstall the app and delete %APPDATA%\streff. Stream recaps can be deleted one by one in the Recap window. For data held by Twitch, YouTube, 7TV, GIPHY, Google or Discord, contact those services.

You can ask to see, correct or delete what we hold about you — your Tefflabs account included — at [email protected] — including your cloud backups and your mod view settings. Moderators can sign out at mod.streff.tv at any time, and can ask the same address to delete their page layouts. Payment records are kept for as long as tax law requires.

Changes and contact

If a future version starts sending anything new off your PC, this policy will say so and the date at the top will change. Questions: [email protected].