Privacy
This page explains how TwitchTokenGenerator handles data when you browse, authorize or use its tools.
Data we process
We record Twitch account and profile details, permissions, generation times, IP addresses and country information for operation, abuse prevention and statistics. HTTP logs include IP addresses, request identifiers and route names.
Token requests collect the requester’s name and email. Completing a request sends generated credentials to that requester through Resend. Only authorize a requester you trust.
Credential storage and retention
Stored credential payloads and requester emails are encrypted. Browser results use temporary storage; API credentials can be retrieved once and workflows expire after 24 hours.
Usage and security history have no automatic deletion schedule in the application. Backups and encrypted historical records are separate. Expiry of a token or link does not delete all these records.
Cookies and browser storage
Cookies support authorization and language preferences. Theme preferences use local storage; custom client IDs and secrets use per-tab session storage until cleared or the tab closes. Cloudflare and reCAPTCHA may set their own cookies.
Services and sharing
Twitch provides authorization and profile data. Cloudflare handles delivery, security and traffic analytics; Google reCAPTCHA checks abuse. Country lookups use our own GeoIP service. Provider policies are linked below.
Operational alerts to the maintainer may include account, permission and network details. Token-request creation alerts also include the requester’s name and email. Alerts do not include OAuth tokens.
Your chosen AI provider handles its own chat and tool data. TTG does not control that provider’s storage or retention.
Contact the maintainer
For privacy requests or a private security report, use the maintainer profiles below to arrange private contact. Never post credentials publicly.