Privacy Policy

Account information

We store the email address you use to create an account and, if you provide it, an optional display name. Magic link sign-in tokens are one-time use, short-lived, and only exist to complete the requested sign-in flow.

Connected Twitch accounts

When you connect Twitch, we store the OAuth tokens needed to read your account and VOD history. Those tokens are encrypted at rest using the application key and are never exposed in API responses or the UI.

Storage credentials and archives

You bring your own S3-compatible storage. Access keys and secrets are encrypted at rest, never logged, and never shared with third parties. You can delete a storage profile at any time.

Archived VOD video bytes live in your own S3 bucket. We do not store those video files in our infrastructure. Our database stores VOD metadata such as titles, sizes, paths, statuses, and the storage profile associated with the archive.

Webhooks and operational records

Twitch EventSub webhooks are HMAC-validated before processing. We do not retain webhook payloads beyond the working memory needed to dispatch the relevant archive or detection job.

We keep an audit log of user-driven actions including deletes, share-link generation, and keep-forever toggles. Soft-deleted VOD records are hard-deleted after a 7-day grace period.

Data use

We do not sell user data, share it for advertising, or train machine learning models on it. We use the data only to operate the archive service, secure accounts, troubleshoot issues, and show users the state of their own archives.

Account deletion

You can delete your account. Cascading deletes remove account metadata, connected Twitch account records, storage profile records, VOD metadata, stream metadata, and related operational records. We do not automatically delete files from your bucket when your account is deleted; your storage remains under your control unless you explicitly request a purge action before deletion.

Contact

Questions about privacy can be sent to support@vodmanager.example.