Privacy policy

Data controller

The data controller is Fabio, publisher of the site (see the legal notice). For any question or request about your data: pro@fabiomoreira.dev.

Data we process

This data is only processed if you sign in or use the feature concerned.

• Account (sign-in with Twitch): Twitch ID, username, avatar and the email address provided by Twitch, Twitch access tokens. Permission to write in chat on your behalf (user:write:chat) is requested for the site’s chat.
• Session: session token, expiry date, IP address and browser (user agent) at sign-in.
• Discord link (optional): Discord ID and tokens provided by Discord (identify and guilds.join permissions), used to add you to the Discord server and grant you roles.
• Points: ledger of what you earn and spend (amount, reason, date), your reward redemptions (reward, cost, any text you entered, status) and the Discord roles granted.
• Viewing: while you watch a stream with the player loaded, the tab visible, playback running and sound on, your browser sends a signal every 60 seconds. It is recorded with the stream concerned, a random tab identifier, the start and last-signal dates, the number of signals, the points earned and, where relevant, the reason it was blocked.
• Chat: public messages from Twitch, YouTube, Kick and the other connected platforms are displayed live on the site with their author’s username, badges and text. The server only keeps the last 100 messages in memory: they are not stored in the database and disappear on restart. A message written from the site with your Twitch account is published on Twitch.
• Moderation: log of actions (action, platform, moderator, username and platform ID of the person concerned, reason), list of banned people, blocked words. This data concerns chat authors, whether or not they have an account on the site.
• Preferences: language, theme, chat density and consent to third-party players, stored in your browser (see “Cookies and local storage”).
• Technical logs: the web server and the host may log the IP address, date and requested page, for security and proper operation.

Purposes and legal bases

• Providing the service you request (sign-in, points, rewards, Discord link, sending chat messages): performance of the service you ask for (GDPR art. 6.1.b).
• Moderating chat, preventing points cheating and protecting the site (viewing sessions, moderation log, technical logs): legitimate interest in keeping chat and the points system healthy (GDPR art. 6.1.f).
• Loading third-party players (Twitch, YouTube, Kick, TikTok, Instagram): your consent (GDPR art. 6.1.a), which you can withdraw at any time.
• Remembering language and theme: needed to display the site as you chose, no prior consent required.

The Swiss FADP sets the same principles (lawfulness, proportionality, purpose limitation, transparency) and applies in the same way to people in Switzerland.

Recipients and processors

Your data is neither sold nor used for advertising. It is accessible to the publisher and, for technical operations, to the following providers:

• Infomaniak Network SA (Switzerland): hosting of the site and its database.
• Twitch, Google/YouTube, Kick, TikTok, Instagram (Meta) and Discord: sign-in (Twitch), account link (Discord), embedded players and content, chat messages. These companies process your data under their own privacy policies, as separate controllers.

Video thumbnails and avatars are loaded from the servers of the platforms concerned, which can then see your IP address.

Transfers outside the EU / Switzerland

The site is hosted by a Swiss company.

Twitch, Google, Meta (Instagram), Discord and TikTok are mostly US companies. When you sign in with Twitch, link Discord or load one of their players, data (including your IP address) is sent to them and may be processed outside the EU and Switzerland, notably in the United States, under their responsibility and with their own safeguards (standard contractual clauses, EU–US Data Privacy Framework). For players, nothing is sent before you agree.

Retention periods

• Sign-in session: 7 days, renewed while you use the site, or until you sign out.
• Account, tokens and Discord link: as long as your account exists.
• Points ledger, redemptions and granted roles: as long as your account exists, then deleted with it.
• Viewing sessions: 90 days at most.
• Moderation log: 12 months at most; banned list: as long as the measure is in force.
• Displayed chat messages: in server memory only (last 100 messages).
• Cookies and local storage: see below.

Your rights

You can request access to your data, its rectification or erasure, restriction of processing, portability of the data you provided, object to processing based on legitimate interest, and withdraw your consent at any time.

Write to pro@fabiomoreira.dev: we reply within one month. Proof of identity may be requested if in doubt. If you believe your rights are not respected, you can complain to the supervisory authority of your country: the CNIL in France (cnil.fr), the FDPIC in Switzerland (edoeb.admin.ch).

Delete my account

Write to pro@fabiomoreira.dev from the email address of your Twitch account (or give your Twitch username). We then delete your sessions, your linked accounts (Twitch, Discord) and their tokens, your points ledger, your redemptions and your viewing sessions.

Discord roles already granted and your presence on the Discord server are not removed automatically: leave the server or ask us to do it in the same message. Messages posted in a platform’s chat stay with that platform. You can also revoke the site’s access from your Twitch and Discord connection settings, and unlink Discord from the Points page.

Cookies and local storage

The site uses no advertising cookies and no audience measurement. Cookies set by the site:

• better-auth.session_token (prefixed with __Secure- over HTTPS): sign-in session; 7 days, renewed; strictly necessary; set at sign-in.
• better-auth.state: security check during Twitch sign-in or Discord linking; 5 minutes; strictly necessary.
• NEXT_LOCALE: chosen language; 1 year.
• theme: light or dark theme; 1 year; set when you change theme.
• ifamos_embed_twitch, ifamos_embed_youtube, ifamos_embed_kick, ifamos_embed_tiktok, ifamos_embed_instagram: remember “Always allow” for the platform; 180 days; set only if you tick the box.
• ifamos_oauth_*: reserved for the site administrator (connecting channel accounts); 10 minutes.

Besides cookies, your browser remembers the chat density (localStorage, key ifamos.chat.density) and an internal-navigation flag for the lifetime of the tab (sessionStorage).

Third-party players. Until you click “Load player”, no content from Twitch, YouTube, Kick, TikTok or Instagram is loaded and these companies receive nothing about your visit. Once a player is loaded, the platform concerned may set and read its own cookies, under its privacy policy; the site has no access to them. You can delete them from your browser settings.

You can withdraw your “Always allow” choices at any time. This does not delete cookies already set by the platforms.

Reset my choices

Changes

This policy may change; the date of the last update is shown at the top of the page.