Last updated: March 9, 2026
This Privacy Policy describes how GString Bot ("we," "us," or "our") collects, uses, and protects your information when you use our website, dashboard, and bot service (collectively, "the Service"). By using the Service, you agree to the collection and use of information in accordance with this policy.
When you log in to the Service using Twitch OAuth, we receive and store the following information from your Twitch account:
• Twitch user ID (unique numeric identifier)
• Username and display name
• Profile picture URL
• Account type and broadcaster status
When you configure the bot through the dashboard, we store your preferences including:
• Whether translation is enabled or disabled for your channel
• Whether the bot has joined or left your channel
• Command permissions (who can use !p, mod-only settings, etc.)
• Custom AI prompt configurations
• Moderator status of the bot in your channel
The bot reads messages in real time from Twitch chat channels where it is active. Chat messages are processed in memory only and are not stored in our database. Messages are temporarily sent to OpenAI's API for translation and AI response generation, after which they are discarded. We do not maintain any log or archive of chat messages.
We may collect aggregate, non-personally identifiable usage statistics to monitor and improve the Service, such as the total number of translations performed, active channels, and error rates. This data cannot be used to identify individual users.
We use essential cookies strictly necessary for the Service to function:
• Session cookies — used to maintain your authenticated session after logging in with Twitch. These are encrypted and expire when your session ends or after a set period.
• Theme preference — a local storage value to remember your dark/light mode preference.
We do not use tracking cookies, advertising cookies, analytics cookies, or any third-party cookies. We do not use Google Analytics, Facebook Pixel, or any similar tracking services.
We use the information we collect solely for the following purposes:
• Authentication — to verify your identity and provide access to the dashboard
• Bot operation — to join your Twitch channel, read chat messages, and send translations
• Settings management — to apply your configured preferences and command permissions
• Service improvement — to monitor performance, fix bugs, and improve translation quality
• Communication — to respond to your inquiries or support requests
We do not use your information for:
• Advertising or marketing purposes
• Selling or renting to third parties
• Profiling or behavioral tracking
• Training AI models (OpenAI's API is used with data processing agreements that prevent training on user data)
We do not sell, rent, trade, or otherwise share your personal information with third parties for their own purposes. Your information may be shared only in the following limited circumstances:
The Service integrates with the following third-party services that may process your data as part of providing functionality:
• Twitch (Amazon) — for authentication and chat integration. Your Twitch data is governed by Twitch's Privacy Notice.
• OpenAI — for message translation and AI responses. Chat messages are sent to OpenAI's API for processing. Subject to OpenAI's Privacy Policy. OpenAI does not use API inputs to train their models.
We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to: (a) comply with a legal obligation; (b) protect and defend our rights or property; (c) prevent or investigate possible wrongdoing in connection with the Service; (d) protect the personal safety of users of the Service or the public; or (e) protect against legal liability.
If the Service is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy.
Your account data and channel settings are stored in a secured database. We implement reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
• Encrypted connections (HTTPS/TLS) for all data transmission
• Secure, encrypted session cookies for authentication
• Access controls limiting who can access the database and administrative functions
• Regular security reviews of the codebase and infrastructure
However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.
We retain your data for the following periods:
• Account data (Twitch ID, username, profile picture) — retained as long as you have an active connection to the Service
• Channel settings (bot configuration, preferences) — retained as long as your account exists, even if the bot is removed from your channel, in case you re-add it
• Chat messages — not retained; processed in real time and immediately discarded
• Session cookies — expire automatically when your session ends or after a set period
You may request deletion of all your data at any time by contacting us (see Section 10). Upon receiving a valid deletion request, we will remove your personal data from our systems within 30 days, except where we are required to retain it for legal or legitimate business purposes.
Depending on your location, you may have certain rights regarding your personal information. These may include the right to:
• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate personal data (note: most data is synced from Twitch, so updating your Twitch profile will update your data with us)
• Deletion — request deletion of your personal data from our systems
• Data portability — request a copy of your data in a structured, machine-readable format
• Objection — object to our processing of your personal data in certain circumstances
• Withdrawal of consent — withdraw your consent to our processing at any time by disconnecting the bot and logging out
To exercise any of these rights, please contact us through our Discord server. We will respond to your request within 30 days.
The Service is not intended for users under 13 years of age, consistent with Twitch's minimum age requirement. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information as quickly as possible. If you believe we may have collected information from a child under 13, please contact us immediately through our Discord server.
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. By using the Service, you consent to the transfer of your information to these countries. We take steps to ensure that your data receives an adequate level of protection in the jurisdictions in which we process it.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the updated policy.
Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activity tracked. Since we do not engage in any tracking of users across third-party websites, no change in behavior occurs when a DNT signal is received.
If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA). These include the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell your personal information. To exercise your California privacy rights, please contact us through our Discord server.
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have certain rights under the General Data Protection Regulation (GDPR). The legal basis for our processing of your personal data includes:
• Consent — you have given consent for processing by logging in and enabling the bot
• Contract performance — processing is necessary to provide the Service you have requested
• Legitimate interests — processing is necessary for our legitimate interests, such as improving the Service and ensuring security
You have the right to lodge a complaint with your local data protection authority if you believe we have not complied with applicable data protection laws.
If you have any questions about this Privacy Policy, want to exercise your data rights, or need to report a privacy concern, please reach out to us on our Discord server.