twichatOn your computer
Preferences and joined channels are stored in twichat.db. Account names and tokens are kept in accounts.json; tokens are encrypted through the operating system’s secure storage. Two caches keep account and channel avatars.
The last 500 messages per channel stay in memory, not in a chat log on disk. Closing the app clears them. Signing out keeps the account available for a later sign-in.
During Twitch sign-in
You enter your password on Twitch. The sign-in server exchanges the authorization code for tokens held in memory behind a ticket valid for two minutes. The ticket is deleted when the app claims it. Token renewal also passes through this server.
Requested permissions cover reading and sending chat messages, reading followed channels and managing whispers. They do not allow the app to manage your subscriptions. You can revoke access from your Twitch account’s connections settings.
Services the app contacts
Twitch provides chat, profiles, events and video. 7TV, BetterTTV and FrankerFaceZ provide emotes. GIPHY images load when a message contains one and their display is enabled. GitHub is used to check for and download updates.
These providers receive the requests needed to deliver their services, including your IP address. Their own privacy policies apply to those exchanges.
On this website
The site code adds no analytics tool or cookie. Your theme and language choices are saved in your browser’s local storage. Fonts and images are served from this domain.
The public site uses Cloudflare and an HTTP server. These intermediaries process connection information, including IP addresses. No in-app analytics does not mean the hosting provider processes no technical data. Cloudflare’s privacy policy.
Delete data and contact us
Quit Twichat before deleting its data directory: ~/Library/Application Support/Twichat on Mac, %APPDATA%\Twichat on Windows or ~/.config/Twichat on Linux. This removes local settings, saved accounts and caches. Revoking access on Twitch is a separate action.
For this site, clear the domain’s data in your browser. Questions: [email protected]. You can inspect these mechanisms in the source code.