Privacy Policy
Your stream data, your choices.
Overview#
Aarothon is a local-first Windows application for stream automation. This policy explains what data Aarothon accesses, why it is used, where it is processed and how you can remove it.
YouTube Web#
Newer versions read supported chat events, including Jewel gifts, in a browser session on your computer. Google sign-in is optional unless the selected stream requires it. That browser stores its own session locally; Aarothon does not upload its cookies or your Google password. This Web reader does not use YouTube Data API polling. The YouTube Direct OAuth description below applies only to versions that offer that integration.
Google and YouTube data#
YouTube Direct requests the single read-only scope https://www.googleapis.com/auth/youtube.readonly. The app may access your channel identity, live broadcast/chat identifiers and status, and supported Super Chat, Super Sticker and membership metadata. It does not request permission to upload, edit or delete YouTube content.
Purpose#
Google user data is used only for activated features: finding your livestream, displaying supported events and applying your local timer, notification, goals, spinwheel and leaderboard rules. Aarothon does not sell Google user data or use it for advertising.
Storage and processing#
The Google refresh token is encrypted with Windows DPAPI for the current Windows user and machine. Access tokens remain in memory. The credential broker handles authorization exchange, refresh and revocation without persisting OAuth tokens or including them in application logs. Stream events and settings are stored in the portable app’s local data folder.
Sharing#
Aarothon does not share Google user data with advertisers or data brokers. Depending on the version and integration, data travels between your app, YouTube Web or Google APIs, and Aarothon’s credential broker as needed. The separate application-access verification below sends only its stated identifiers, not chat content or Google credentials.
Application-access verification#
Versions with publisher access checks send a random installation ID and SHA-256 representations of connected source identities to Aarothon’s Cloudflare-hosted verification service over HTTPS. YouTube video links are resolved to their owner channel so a new livestream URL does not change that identity. Raw source links, integration tokens, browser cookies, donation messages and unlock codes are not sent by this check. Hashes are pseudonymous, not guaranteed anonymous: a known public channel can be matched. The service returns a signed access decision and uses connection IP information for rate limiting. Application request-body logging is disabled; Cloudflare may process technical traffic metadata under its own policies. A valid check allows up to 24 hours offline; expired verification or a publisher restriction can pause the app without deleting local data. The encrypted local cache keeps the signed decision and installation ID. The publisher’s private registry retains restricted identity hashes and rule history needed to manage restrictions and issue unlock codes; contact support to ask about access, retention or deletion.
Google API Limited Use#
Aarothon’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Diagnostic reports#
If you choose Send log/report, the app can send your message, optional contact email, app version and redacted diagnostics to our Sentry support project. Manual diagnostic attachments can include recent donor names, donation messages and amounts, source payloads, settings and notification queue state, subject to size limits. Private source URLs, tokens and credentials are redacted. Automatic connector-error reports use limited technical metadata, not these full manual captures. Avoid including credentials in text you write yourself. A local report copy is kept in data/support-reports.
Website demo#
The website demo uses fictional data in browser memory and does not connect to your donation sources. Language preferences may be saved locally in your browser. Website files and downloads are delivered through Cloudflare.
Retention, deletion and choices#
YouTube Direct is optional. Disconnecting attempts to revoke access and removes the local encrypted credential. You may also revoke access from Google Account connections. You control local history and data retention. Close the app before archiving or removing its data folder. Contact support for questions about reports already sent.
Security and contact#
We use PKCE, OAuth state checks, local callbacks and encrypted credential storage. No security measure is absolute. For privacy questions or deletion assistance, contact [email protected].