Privacy Policy
This notice explains how Followlog handles information when you sign in and track your own Twitch channel. Operator and privacy contact: Motti_TV, via the channels in Legal Notice & Contact.
1. Account and authorization data
Twitch provides your user ID, login name and display name. Followlog stores access and refresh tokens encrypted on the server so it can continue checking your followers. The only requested scope is moderator:read:followers. No Twitch password, email permission or chat permission is requested.
2. Follower data
The service retrieves follower user IDs and display names from Twitch for the channel you authorized. It stores the latest complete follower list, observed membership changes, observation timestamps and follower counts. Your chosen check interval, pause state and default activity filter are also saved per account until account deletion. Data is separated by channel and is not made publicly available by Followlog. A removed entry does not establish why someone no longer appears in the list.
3. Cookies and sessions
A necessary, HttpOnly session cookie identifies your signed-in browser for up to seven days. The server stores a hash of that identifier, its account mapping, expiration and a request-protection value. A separate necessary OAuth cookie and one-time server record expire after ten minutes. The hosted service uses Secure and SameSite cookies. There are no advertising cookies, external analytics scripts or embedded third-party fonts.
Your language choice is stored in your browser until you change it or clear this site's local data.
4. Purposes
Processing provides the account and analytics service requested by the broadcaster and protects accounts from unauthorized access. Where the GDPR applies, account-service processing relies on Article 6(1)(b); operational security and the limited analysis of follower changes rely on legitimate interests under Article 6(1)(f), subject to the rights and interests of affected people. Twitch authorization grants API access; it is not consent on behalf of followers. Contact the operator to object to processing or discuss a specific record.
5. Retention and deletion
Activity history and count observations older than 90 days are removed during successful channel checks. If authorization expires, old records can remain until tracking resumes or the account is deleted. The current follower snapshot and encrypted credentials remain until you disconnect and delete your account data. Session records expire after seven days and are purged on later session creation. Expired OAuth records are purged when a new login starts.
“Verbindung & Daten löschen” removes the channel's account, credentials, sessions, current follower snapshot, count observations and activity history from the active application database. Signing out alone does not delete these records or stop tracking. You can additionally revoke the app's authorization through Twitch. Any hosting-provider backup lifecycle is separate from the active database.
Private notes you add to people are stored with your channel data until you change or delete them, and are removed with “Verbindung & Daten löschen”. Follow dates and login names provided by Twitch are stored with the follower snapshot and the activity history and follow the same retention. CSV exports and new-follower lists are created on request in your browser and are not kept by Followlog.
6. Recipients and hosting
Twitch processes OAuth requests and API calls. For the hosted version, Railway processes network requests and stores application data on a persistent volume. Hosting systems may generate technical connection and diagnostic logs. These providers may process data internationally under their own arrangements and policies. Followlog does not sell data. If you enable Discord notifications, Followlog sends the display names of new or former followers to the Discord webhook you provided; Discord processes this data under its own policies. The webhook URL is stored encrypted and removed when you delete your data. Local self-hosted copies store their database on the computer running them.
Provider information: Twitch Privacy Notice and Railway Privacy Policy.
7. Your rights
Where applicable, you may request access, correction, erasure, restriction, portability or object to processing and complain to your data protection authority. Broadcasters can delete their channel data in the dashboard. Followers can contact the operator about a specific channel and user ID. Requests may require proportionate identity verification. Contact details are below.
8. Contact and changes
For privacy requests, use Legal Notice & Contact. This notice will be updated when the service's processing changes.