Privacy Policy
Last updated: July 5, 2026
This Privacy Policy describes how GString Bot ("we," "us," or "our") collects, uses, and protects your information when you use our website, dashboard, and bot service (collectively, "the Service"). By using the Service, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
1.1 Information from Platform Sign-In (Twitch and Kick)
When you log in to the Service using Twitch or Kick OAuth, or link an additional platform account, we receive and store the following information from that platform account:
• Platform user ID (unique identifier)
• Username and display name
• Profile picture URL
• Account type and broadcaster status (Twitch)
When you authorize the bot to operate on your Kick channel, we also store the OAuth access and refresh tokens needed to act on your behalf. These tokens are encrypted at rest (AES-256-GCM) and are deleted when you unlink the platform or delete your account.
1.2 Channel and Bot Settings
When you configure the bot through the dashboard, we store your preferences including:
• Whether translation is enabled or disabled for your channel
• Whether the bot has joined or left your channel
• Command permissions (who can use !ask, mod-only settings, etc.)
• Custom AI prompt configurations
• Moderator status of the bot in your channel
• Per-channel blocked-user and whitelist entries (usernames you add)
• If you connect a Discord server: the server's ID, name, and icon, plus your relay group and relay channel configuration
1.3 Chat Messages
The bot reads messages in real time from Twitch and Kick chat channels where it is active, and from Discord channels you have configured for relay. Messages are temporarily sent to OpenAI's API for language detection, translation, and AI response generation. In the normal case, chat messages are processed in memory only and are not stored in our database.
Exception — translation quality logs. For languages whose detection we are still evaluating ("shadow mode"), we log the translated message — including the channel name, the author's display name, the original text, the translation, and detection metadata — so we can measure and improve detection accuracy. These quality logs are automatically deleted after 30 days. They may also be posted to a private, operator-only Discord channel for manual review. In addition, if a message triggers our blocked-word safety filter, an alert containing the message text is sent to a private, operator-only moderation channel.
1.4 Diagnostic and Usage Data
We collect operational data to monitor and improve the Service:
• Usage statistics — counts of messages processed and translations performed, aggregated per channel and per hour (no message content)
• API usage metrics — per-request metadata for calls to our AI provider, such as model, token counts, and latency (no message content)
• Error logs — technical error details, which may include the channel name and the username associated with the message that triggered the error; automatically deleted after 90 days
• Activity and audit logs — records of configuration actions taken in the dashboard and admin panel (who changed what, and when), kept for security and accountability
1.5 Cookies and Session Data
We use essential cookies strictly necessary for the Service to function:
• Session cookies — used to maintain your authenticated session after logging in with Twitch. These are encrypted and expire when your session ends or after a set period.
We do not use tracking cookies, advertising cookies, analytics cookies, or any third-party cookies. We do not use Google Analytics, Facebook Pixel, or any similar tracking services.
2. How We Use Your Information
We use the information we collect solely for the following purposes:
• Authentication — to verify your identity and provide access to the dashboard
• Bot operation — to join your Twitch channel, read chat messages, and send translations
• Settings management — to apply your configured preferences and command permissions
• Service improvement — to monitor performance, fix bugs, and improve translation quality
• Communication — to respond to your inquiries or support requests
We do not use your information for:
• Advertising or marketing purposes
• Selling or renting to third parties
• Profiling or behavioral tracking
• Training AI models (per OpenAI's API policy, data submitted through the API is not used to train their models; the translation quality logs described in Section 1.3 are used only to tune our own language-detection thresholds)
3. How We Share Your Information
We do not sell, rent, trade, or otherwise share your personal information with third parties for their own purposes. Your information may be shared only in the following limited circumstances:
3.1 Third-Party Service Providers
The Service integrates with the following third-party services that may process your data as part of providing functionality:
• Twitch (Amazon) — for authentication and chat integration. Your Twitch data is governed by Twitch's Privacy Notice.
• Kick — for authentication and chat integration if you sign in with or link a Kick account. Your Kick data is governed by Kick's Privacy Policy.
• Discord — if you connect a Discord server for the relay feature, and for the operator-only quality and moderation channels described in Section 1.3. Subject to Discord's Privacy Policy.
• OpenAI — for message translation and AI responses. Chat messages are sent to OpenAI's API for processing. Subject to OpenAI's Privacy Policy. OpenAI does not use API inputs to train their models.
3.2 Legal Requirements
We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to: (a) comply with a legal obligation; (b) protect and defend our rights or property; (c) prevent or investigate possible wrongdoing in connection with the Service; (d) protect the personal safety of users of the Service or the public; or (e) protect against legal liability.
3.3 Business Transfers
If the Service is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy.
4. Data Storage and Security
Your account data and channel settings are stored in a secured database. We implement reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
• Encrypted connections (HTTPS/TLS) for all data transmission
• Secure, encrypted session cookies for authentication
• Access controls limiting who can access the database and administrative functions
• Regular security reviews of the codebase and infrastructure
However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.
5. Data Retention
We retain your data for the following periods:
• Account data (platform IDs, usernames, profile pictures) — retained as long as you have an active connection to the Service
• OAuth tokens (Kick bot authorization) — retained while the platform is linked; deleted when you unlink it or delete your account
• Channel settings (bot configuration, preferences, Discord relay setup) — retained as long as your account exists, even if the bot is removed from your channel, in case you re-add it
• Chat messages — not retained, except translation quality logs for shadow-mode languages (see Section 1.3), which are automatically deleted after 30 days
• Error logs — automatically deleted after 90 days
• Session cookies — expire automatically when your session ends or after a set period
You can delete your account and all associated data yourself at any time from the dashboard (Account → Delete account). This immediately removes the bot from your channels and erases your account data, settings, Discord connections, usage records, and any quality-log entries associated with your channel or username. You may also request deletion by contacting us (see Section 13); we will act on valid requests within 30 days, except where we are required to retain data for legal or legitimate business purposes (for example, security audit records).
6. Your Rights
Depending on your location, you may have certain rights regarding your personal information. These may include the right to:
• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate personal data (note: most data is synced from Twitch, so updating your Twitch profile will update your data with us)
• Deletion — request deletion of your personal data from our systems
• Data portability — request a copy of your data in a structured, machine-readable format
• Objection — object to our processing of your personal data in certain circumstances
• Withdrawal of consent — withdraw your consent to our processing at any time by disconnecting the bot and logging out
You can exercise the deletion right yourself at any time from the dashboard (Account → Delete account). To exercise any other right, please contact us through our Discord server. We will respond to your request within 30 days.
7. Children's Privacy
The Service is not intended for users under 13 years of age, consistent with Twitch's minimum age requirement. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information as quickly as possible. If you believe we may have collected information from a child under 13, please contact us immediately through our Discord server.
8. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. By using the Service, you consent to the transfer of your information to these countries. We take steps to ensure that your data receives an adequate level of protection in the jurisdictions in which we process it.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the updated policy.
10. Do Not Track Signals
Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activity tracked. Since we do not engage in any tracking of users across third-party websites, no change in behavior occurs when a DNT signal is received.
11. California Privacy Rights
If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA). These include the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell your personal information. To exercise your California privacy rights, please contact us through our Discord server.
12. European Privacy Rights (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have certain rights under the General Data Protection Regulation (GDPR). The legal basis for our processing of your personal data includes:
• Consent — you have given consent for processing by logging in and enabling the bot
• Contract performance — processing is necessary to provide the Service you have requested
• Legitimate interests — processing is necessary for our legitimate interests, such as improving the Service and ensuring security
You have the right to lodge a complaint with your local data protection authority if you believe we have not complied with applicable data protection laws.
13. Contact Us
If you have any questions about this Privacy Policy, want to exercise your data rights, or need to report a privacy concern, please reach out to us on our Discord server.