Privacy Policy
Draft for operator review. Replace every bracketed item and verify the retention, operator, and contact details before using this page for a public listing.
Effective date: [date]. Data controller/operator: [operator legal name]. Contact: [privacy/support email and postal/contact details].
Information processed
- Joystick.tv channel identity and OAuth access/refresh tokens needed to connect the channel and receive events.
- Your OpenShock API token, selected Shocker identifiers, and activation settings.
- The channel's OBS overlay capability token, used to authorize overlay event access.
- Joystick.tv stream and chat event data needed to evaluate configured activations, display alerts, or send the requested configuration whisper.
- Operational service logs, including request status and error details. API tokens are redacted from OpenShock response logs.
- Short-lived browser cookies used to bind OAuth authorization and authenticate your dashboard session.
How information is used and shared
Information is used to operate the bot for the channel that authorized it, store that channel's configuration, send commands to OpenShock, and send configured chat messages or whispers through Joystick.tv. Joystick.tv and OpenShock process data under their own policies. The bot operator's VM and hosting/network providers may process data as needed to operate the service.
Storage and security
Channel records, including OAuth tokens and OpenShock credentials, are stored in separate per-channel files on the bot VM. Production deployment is intended to use HTTPS and restrictive owner-only file permissions. These files are not encrypted at rest by the bot. Browser dashboard sessions are held in memory and expire after 14 days or when the service restarts.
Retention and deletion
Configuration and credentials are retained while the channel uses the bot. To request removal of stored channel data, contact [privacy/support email]. Also remove or revoke the bot's authorization in Joystick.tv and revoke the OpenShock API token in OpenShock; deleting local bot data does not itself revoke third-party credentials. Backups and operational logs may persist for [retention period] before deletion.
Your choices
You may stop using the service, revoke its Joystick.tv authorization, and revoke your OpenShock API token. Contact [privacy/support email] to ask about access, correction, or deletion of data, subject to applicable law.
Contact and updates
Privacy questions: [privacy/support email and postal/contact details]. Policy updates will be posted here with a revised effective date.