Your data, kept simple
The short version: YappyChat keeps your data on your computer, and the supporter server stores only what perks need.
On your computer
Your Twitch login token (encrypted with Windows' own protection), your settings, notes, watch list, highlights, blacklist and chat logs are stored on your computer. Logging out removes the token. Chat logs live in %APPDATA%\YappyChat\logs and you can delete them any time.
Services YappyChat contacts
- Twitch for chat, moderation and account details, using your login.
- 7TV, BetterTTV and FrankerFaceZ for emotes. They receive the channel's Twitch ID.
- The recent-messages service (recent-messages.robotty.de) for history. It receives the name of each channel you open. You can switch this off in Settings > Chat.
- The YappyChat supporter server (this website) for perks.
The supporter server
It stores, for supporters only: Twitch user ID, Twitch name, what they own, what they have equipped, and a running tip total. It does not record chat messages or browsing.
When you change your perks, YappyChat sends your Twitch token to the server so it can ask Twitch who you are. The server uses it only for that check, keeps an unreadable fingerprint of it in memory for five minutes to avoid asking twice, and never saves the token to disk. Everyone using YappyChat downloads the list of supporters and what they have equipped (public, because that is how perks are seen).
Anonymous usage statistics
Once a day, unless you turn it off, YappyChat sends the server a short report. It sends your Twitch token so the server can check the request comes from a real account, then keeps the report against an unreadable code made from your Twitch ID (the code cannot be turned back into your ID or name). The report contains the app version, the date, which settings are on or off (for example theme, whether Yappy is shown, split view), how many channels, highlights and macros you have, and how many times each feature was opened. It never contains chat messages, channel names, usernames, notes, or your token. It is used to count users and to decide which features to improve or retire. Reports older than 90 days are deleted; the bare "this code opened the app today" marks used to count daily users are deleted 13 months after the code was last seen. Turn it off in Settings → Account → "Share anonymous usage statistics".
Buying perks
In short: to buy perks you sign in with Twitch, and you pay on Stripe's or PayPal's own page. YappyChat keeps your Twitch ID and name, what you bought, the amount, and the payment provider's reference for that payment. We never see or store card numbers or PayPal passwords. We use this only to deliver your perks, handle refunds and chargebacks, and keep our accounts. We don't sell it, and we don't share it with advertisers or analytics companies.
- Signing in. "Sign in with Twitch" tells us your Twitch user ID and name. We don't keep your Twitch login token: we use it once to confirm who you are, then cancel it. Instead the website gives your browser a session cookie (strictly necessary, valid for 7 days, removed when you sign out). We store only a scrambled (hashed) copy of the cookie's value. If you open the shop from YappyChat, the app passes a one-time code (valid for 2 minutes) so you don't have to sign in again, and only after you press "Continue as …".
- Orders. For each checkout we keep the order code, the Twitch ID and name of the buyer and of the person receiving the perks, the items, the price, the date, the status, and the payment provider's reference (for example a Stripe payment ID or PayPal capture ID).
- Payment providers. Stripe and PayPal collect your payment details under their own privacy policies and tell us whether the payment worked.
- The purchase record. One line per perk: the Twitch name, what was added, the amount, the date, who gifted it (if it was a gift) and the order it came from. Partner streamers only ever see totals for their own items, not who bought them.
- What is public. Everyone using YappyChat downloads the list of supporters with their Twitch name, the perks they own and wear, and their badge level. That is how perks are seen by others. The list never says how much anyone spent. Tick "Keep me off the supporter wall" at checkout to stay off the website's wall.
How long we keep things
| What | Kept for |
|---|---|
| Your supporter entry (Twitch ID, name, perks, what you wear) | Until you ask us to delete it |
| Orders and the purchase record | 7 years, because tax law requires business records. After you ask for deletion, your name is replaced with a code and only the amounts and dates are kept for that period. |
| Unpaid or cancelled checkouts | 30 days |
| Website sign-in sessions | 7 days, or until you sign out |
| Payment provider notifications (webhooks) | 90 days |
| Anonymous usage reports (which settings are on, how often features were used) | 90 days |
| The unreadable code's "opened YappyChat on this day" marks, first and last seen date and app version (to count daily users) | 13 months after it was last seen |
| Crash reports (only if you allow them in the app) | 90 days |
| Contact form messages | 1 year |
Refunds
- Within 14 days of a purchase, you can ask for a refund for any reason.
- At any time, you get a refund (or the perk, if you prefer) when something went wrong on our side: you paid but the perk never arrived, it doesn't work, or it isn't what the shop described.
- How to ask: use the contact form (topic "Something is broken" or "Other") or email von@yappy.chat. Include your order code (it starts with YC-) or your Twitch name. Refunds go back to the original payment method, usually within 5 business days.
- What happens to the perk: when a payment is refunded or reversed (including a chargeback), the perks from that order are removed from the account automatically, and your badge level is recalculated. Perks you own through another purchase stay.
Your rights under Australian Consumer Law, and in the EU or UK, are not limited by this policy.
Crash reports
If YappyChat crashes, it writes a short report to a diagnostics log on your computer. If Settings > Account > Send crash reports is on (it is by default), the app sends that report the next time it starts. A report contains the error message and where in the code it happened, the YappyChat, Electron and Windows versions, and the time. Before anything is written or sent, tokens, anything that looks like a password or key, and your Windows user name in file paths are removed. Crash reports contain no chat, channel names, Twitch name or settings, and we keep them for 90 days.
Feature suggestions
If you use Suggest a feature in the app, the server stores your suggestion with your Twitch name and the time, so the developer can read it and credit good ideas. Nothing else from the app is sent with it. Ask for a suggestion to be deleted through the contact form.
This website
The site uses no analytics and no outside fonts or scripts. The only cookie is the sign-in session described above, and only after you sign in. If you send a message through the contact form, the server stores your name, email address, topic and message so it can be answered, plus a short one-way code made from your connection (used only to spot spam). It is emailed to the site owner, and old messages are deleted after a year.
Removing your data
Write via the contact form or von@yappy.chat from the account you used, or tell us your Twitch name. We delete your supporter entry, sessions and suggestions within 30 days. Purchase records are kept with your name removed, for as long as the law requires (see the table above). In the app, logging out removes your Twitch login from your computer. Settings > About > Start fresh removes your settings too, and you can delete the logs folder yourself.
This page describes how the app is built. The site owner should check it against their own setup.