Last updated: June 16, 2026

1. Information We Collect

Account information

When you register, we collect your email address and name through our authentication provider (better-auth).

TikTok data

To connect your live stream, we store your TikTok handle and room ID. We process chat messages in real time solely to parse song request commands (!play, !skip, !revoke).

Spotify data

When you authorize Spotify, we store OAuth access and refresh tokens server-side to control playback and search tracks. Tokens are never exposed to the browser or other users.

Usage data

We store queue history, T-Pots balances, stream settings, and moderation records to operate the Service.

2. How We Use Information

We use collected data to:

Authenticate your account and maintain your session
Parse chat commands and manage your song request queue
Control Spotify playback on your authorized device
Display queue and now-playing data in OBS overlay widgets
Enforce moderation rules and T-Pots/levels configuration

3. Data Storage

Data is stored in Supabase (PostgreSQL) hosted in the cloud. Spotify OAuth tokens and session data are stored server-side only. Authentication session cookies are managed by better-auth.

4. Third-Party Sharing

We share data with third parties only as needed to operate the Service: Spotify (track search and playback via their API) and TikTok Live (chat monitoring via a third-party connector). We do not sell your personal data.

5. Data Retention

We retain your data for as long as your account is active. After account deletion, we remove or anonymize personal data within 30 days, except where retention is required by law.

6. Your Rights

You may request access to, correction of, or deletion of your personal data by contacting us. You can delete your account from the dashboard or by reaching out via our contact page.

7. Cookies

We use essential session cookies to keep you logged in. We do not use third-party advertising or analytics cookies on the Service.

8. Children's Privacy

The Service is not intended for users under 13 years of age. We do not knowingly collect data from children.

9. International Transfers

Your data may be processed in countries other than your own where our infrastructure providers operate. We take reasonable steps to protect data regardless of location.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice on the Service.

11. Contact

Privacy questions? Visit our contact page.