Privacy Policy

The Broadside is a tool for political and news react streamers to triage links their chat submits. This page explains what we collect, why, and who else sees it — in plain language, not boilerplate.

What we collect

From Twitch, when you connect:

• Your Twitch user ID, login, and display name.
• An OAuth access/refresh token, encrypted at rest. It's used only to read your channel's chat (via Twitch EventSub) and, if you click “Post to chat,” to send that one message as you. We never post, moderate, ban, or take any other action on your behalf.

From your chat, once connected:

• Messages are scanned for URLs. When one is found, we store the link, the submitting username, the message text, and their sub/mod/VIP status at the time. We don't otherwise read, store, or process chat that doesn't contain a link.

From the links themselves:

• Titles, descriptions, thumbnails, and (for video) transcripts are fetched from the source, and a summary, publisher-credibility tag, copyright-risk flag, and content-warning flag are generated using Anthropic's Claude AI.
• Related-coverage suggestions are looked up via the Brave Search API.
• A snapshot of the page can be captured via the Internet Archive's Wayback Machine.

Account/session:

• A signed session cookie identifying who you are while you're signed in. We don't use third-party analytics, advertising, or tracking cookies of any kind.

What we don't do

• We don't sell or share your data with advertisers.
• We don't run analytics or tracking scripts on this site.
• We don't post to your chat, moderate, or take any action on Twitch without you clicking a button to do it.

Who else processes it

Running the service means a few outside providers handle pieces of it, each only for what they're named for:

• Twitch — authentication and chat access.
• Anthropic (Claude) — AI summaries, credibility, and risk tagging.
• Google (YouTube Data API) — video metadata.
• Brave Search — related-coverage lookups.
• Internet Archive — Wayback Machine snapshots.
• Supabase — database hosting.
• Vercel — application hosting.

How long we keep it

Submission history, settings, and connection tokens persist until you ask us to remove them or an admin removes your access. Signing out only ends your browser session — it doesn't delete anything from our database. If you want your data removed, see “Contact” below; there's no automated self-service deletion yet.

Stopping chat capture

You can narrow what gets captured any time in Settings (a submit command, an allow-list of subs/mods/VIPs only, ignored usernames). To stop capture entirely, revoke The Broadside's access under your Twitch account's connected-apps settings, or email us and we'll disconnect it for you.

Security

OAuth tokens are encrypted at rest (AES-256-GCM). Session cookies are HMAC-signed and HTTP-only. All traffic is served over HTTPS.

Changes

If this policy changes materially, we'll update the date at the top of this page.

Contact

Questions, data requests, or takedown requests: mapletakestv@gmail.com.