Privacy Policy

Overview

plagComms is a Windows desktop application that aggregates live chat, events, and stream stats from Twitch, TikTok LIVE, and YouTube Live into a single overlay and chat view. We are committed to your privacy. This policy explains what data plagComms accesses, how it is used, and what we never do with it. plagComms runs on your own machine — it has no cloud account or backend for your data (with one optional exception, the multi-streamer rooms feature, described below).

Data We Access

plagComms only accesses data for the channels and accounts you connect, using credentials you provide. Depending on the platforms you link, that may include:

• Twitch: chat messages, display names, colors, badges and emotes; stream events (cheers, subscriptions, gift subs, new followers, raids, channel-point redemptions, watch-streak shares); moderation actions and your ad-break schedule; and channel stats (follower and subscriber counts, viewer count). Read via Twitch IRC, EventSub, and the Helix API using your authorized Twitch account.
• TikTok LIVE: chat messages, gifts, likes, follows, shares, subscriptions and superfan events, with sender display names, avatars, and badges, from the TikTok LIVE stream you specify.
• YouTube: live chat messages and Super Chats with sender names and avatars; and channel stats including your subscriber count and the names/avatars of recent public subscribers (used to show "new subscriber" notices). Read via the YouTube Data API v3 using your authorized Google account.
• Profile pictures: public avatar images are fetched from each platform's CDN to display next to messages.

How Data Is Used

All data accessed by plagComms is used to display chat, events, and stats on your own screen and in your OBS overlay in real time. It is processed entirely on your machine. It is not uploaded to any plagComms server and is never sold or shared with third parties. Two optional, local-only integrations can also receive this data on your device if you turn them on: the OBS browser-source overlay (served over a local web server) and the add-on WebSocket (a localhost endpoint that lets developer tools you choose to run react to events). The optional multi-streamer rooms feature is the one case where data leaves your machine — see below.

Local Storage Only

Your sensitive credentials — OAuth tokens (including your Google refresh token) and API keys — are stored on your device in your operating system's secure credential store (Windows Credential Manager), not in plain-text files. Your non-secret settings and local caches (profile pictures, emote images, and last-known stats) are stored in your operating system's user application data folder. plagrizr does not have access to any of these; they never leave your machine. If you enable the optional chat-logging feature, chat is written to a local database on your device that you control and can clear or export at any time; it is never uploaded.

Data Security

plagComms is a local-first application, which limits your exposure by design. Your Google user data (and all other platform data) is processed on your own machine and is not transmitted to or stored on any plagrizr server, so there is no central database of your data for an attacker to breach. All communication with Google and other platform APIs is made over encrypted HTTPS/TLS connections. Sensitive credentials such as your OAuth tokens and API keys are held in your operating system's secure credential store (Windows Credential Manager) rather than in plain-text files, so they are protected by your operating-system user account. The only feature that transmits data off your device is the optional multi-streamer rooms relay described below, and only for the messages you explicitly choose to share.

Google API Scopes

plagComms requests a single Google OAuth scope:

• .../auth/youtube.force-ssl — read your live chat and send the chat messages you type in plagComms; read your channel stats (subscriber count and concurrent viewers) and the names/avatars of recent public subscribers to show "new subscriber" notices.

plagComms does not modify or delete your YouTube videos, playlists, comments, or account settings, and the only thing it ever posts is a chat message you explicitly type and send.

Google API Services User Data Policy (Limited Use)

plagComms' use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Google user data to provide and improve the user-facing features of plagComms (showing your YouTube live chat, events, and channel stats on your own screen and overlay, and sending chat messages you type).
• We do not transfer Google user data to third parties except as necessary to provide or improve those features, to comply with applicable law, or as part of a merger or acquisition. plagComms processes this data locally on your device and does not upload it to any plagComms server.
• We do not use Google user data for serving advertisements of any kind, and we do not sell it.
• We do not allow humans to read your Google user data unless we have your affirmative consent for specific messages, it is necessary for security purposes (such as investigating abuse) or to comply with applicable law, or the data has been aggregated and anonymized. In normal operation no plagrizr employee or agent can access your Google user data at all, because it never leaves your machine.

Data Retention & Deletion

plagComms stores data only on your own device. Your Google (and other platform) OAuth tokens, settings, and local caches live in your operating system's user application data folder and remain only until you delete them. You can remove all stored data at any time by disconnecting the platform inside plagComms, clearing the app's application-data folder, or uninstalling the app — and by revoking access at myaccount.google.com/permissions. Because plagrizr operates no server that stores your Google user data, there is no server-side copy for us to retain or delete.

Twitch & TikTok Permissions

For Twitch, plagComms uses your authorized Twitch login to read chat and stream events, your channel stats and ad-break schedule, and (if you use them) to perform moderation actions, send chat, start raids/polls, and snooze an upcoming ad — only actions you trigger in the app. For TikTok, plagComms connects to the public TikTok LIVE stream you name to read its chat and events; no TikTok login or password is required.

Multi-Streamer Rooms (optional)

plagComms includes an optional "rooms" feature that lets you share chat with other streamers in real time. This is the one case where data leaves your machine: if you choose to join a room, the chat messages you share are relayed through a hosted relay server to the other streamers in that room. The relay is stateless — it forwards messages and does not store them in a database — and plagrizr does not retain, sell, or share that data. If you never join a room, no chat data ever leaves your computer.

Version Check

On launch, plagComms makes a single HTTPS request to GitHub to check for a newer version. This request includes the current app version string in the User-Agent header. No personally identifiable information is included.

What We Do Not Do

• We do not collect or store your chat data on any plagComms server. (The optional rooms relay forwards messages between room members in real time and does not retain them.)
• We do not sell or share any data with third parties.
• We do not track usage analytics or crash telemetry.
• We do not have access to your OAuth tokens or credentials.

Revoking Access

You can revoke plagComms' access at any time. For Google, visit myaccount.google.com/permissions; for Twitch, visit twitch.tv/settings/connections, and remove plagComms from the authorized apps list. You can also disconnect any platform from within plagComms' settings.

Changes to This Policy

We may update this Privacy Policy from time to time. The "Effective date" shown at the top of this page always reflects the most recent version. If we make a material change to how plagComms accesses, uses, stores, or shares your Google user data, we will update this page and revise the effective date. Your continued use of plagComms after a change takes effect constitutes acceptance of the updated policy.

Contact

Questions about this policy or a data request? Email matt@plagrizr.com or reach out on GitHub: github.com/plagrizr/plagcomms.