Privacy Policy

Last updated: June 2026

Overview

SheevChat is a free Windows desktop application that aggregates live chat from Twitch, YouTube, Kick, and TikTok into a single unified interface. This policy explains what data is collected, how it is used, and your rights as a user.

The short version: SheevChat collects almost nothing. Your OAuth tokens are stored locally on your device. Chat messages are displayed in real-time and never stored or transmitted anywhere. No analytics or telemetry are collected.

Data We Collect

SheevChat collects no personal information beyond what is required to connect to streaming platforms on your behalf. Specifically:

  • OAuth access tokens and refresh tokens are stored locally in a configuration file on your device at AppData\Roaming\SheevChat\config.json. They are never permanently stored on any SheevChat-operated server.
  • Display names and usernames returned during OAuth are stored locally in the same configuration file so the app can display "Connected as [name]".
  • Chat messages are fetched from platform APIs in real-time and displayed locally. They are never stored, logged, or transmitted to any server.
  • No analytics, telemetry, crash reports, or usage data are collected.
  • No account is required to use SheevChat.

Google API Data

SheevChat's use of data received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Data Accessed. SheevChat requests the following Google API scopes:

  • youtube.readonly — used to identify your active YouTube livestream, retrieve the live chat ID, and read live chat messages including message text, author display names, member/moderator status, super chat amounts, membership events, and author badges via the YouTube Data API v3 (liveBroadcasts, videos, and liveChat/messages endpoints).
  • youtube.force-ssl — used exclusively to send chat messages to your active YouTube livestream on your behalf via the liveChat/messages insert endpoint. Messages are only sent when you manually type and explicitly submit them.
  • openid profile email — used to retrieve your Google account display name and email address for display in the app's connected account indicator.

Data Usage. Google user data accessed by SheevChat is used solely to provide the live chat aggregation and participation features of the application. Specifically: your livestream and chat data is fetched in real-time and displayed locally within the app. Your display name and email are stored locally to show "Connected as [name]". No Google user data is used for advertising, analytics, profiling, or any purpose beyond the core chat display and send functionality described above.

Data Sharing. SheevChat does not share, sell, transfer, or disclose Google user data to any third party. Data retrieved from Google APIs is used only within the application on your local device. It is not transmitted to any SheevChat-operated server, and is not shared with any analytics, advertising, or data broker services.

Data Storage & Protection. Google OAuth tokens (access token and refresh token) are stored locally on your device at AppData\Roaming\SheevChat\config.json. They are never permanently stored on any SheevChat-operated server. All communication between SheevChat and Google APIs occurs over HTTPS. During the OAuth login flow, tokens pass through a secure relay at auth.sheevchat.com for a maximum of 5 minutes before being claimed by your device and permanently deleted from the relay.

Data Retention & Deletion. Google user data (tokens and display name) is retained locally until you disconnect your YouTube account within SheevChat, or manually delete the config file at AppData\Roaming\SheevChat\config.json. Live chat messages are never stored — they are displayed in real-time and immediately discarded. To revoke SheevChat's access to your Google account at any time, visit myaccount.google.com/permissions.

OAuth Authentication & The Auth Relay

When you connect a streaming platform account, SheevChat uses a secure OAuth relay to exchange an authorization code for tokens. This relay:

  • Temporarily holds your tokens in encrypted server-side storage for a maximum of 5 minutes while your device retrieves them.
  • Permanently and immediately deletes the tokens the moment your device claims them — or after 5 minutes if unclaimed.
  • Does not log tokens at any point.
  • Does not store any personally identifiable information.
  • Exists solely to keep platform Client Secrets out of the distributed app binary, and to avoid transmitting tokens in URLs where they could appear in browser history or server logs.

Token refresh requests (used to silently renew expired access tokens) also pass through the relay, but tokens are not stored during this process — they are returned directly to your device.

After any exchange, tokens are stored only in config.json on your local device. The relay retains nothing.

Auto-Update

SheevChat checks for updates automatically on launch by contacting GitHub's API. This request may expose your IP address to GitHub. No personal data beyond a standard HTTP request is transmitted. See GitHub's Privacy Statement.

Ko-Fi Donations

SheevChat includes an optional Ko-Fi donation prompt. Donations are processed entirely by Ko-Fi — SheevChat and the developer have no access to any payment information. Ko-Fi's own privacy policy applies. See Ko-Fi's Privacy Policy. The donation prompt can be permanently dismissed within the app.

Third-Party Services

SheevChat connects to the following third-party services on your behalf. Their own privacy policies govern your use of their platforms:

Spotify API Data

SheevChat uses Spotify OAuth to display your currently playing track in a now-playing overlay. The following scope is requested:

  • user-read-currently-playing — used to fetch the track name, artist, album, and playback progress of the song you are currently listening to on Spotify. This data is displayed locally in real-time within the application overlay and is never stored, logged, or transmitted anywhere.

SheevChat polls the Spotify API at a rate of approximately once every 5 seconds while the overlay is active. Polling stops when the overlay is not in use. No Spotify data is retained between sessions — track information is fetched live and discarded when no longer displayed. SheevChat does not control playback, access your library, playlists, listening history, or any data beyond what is currently playing. Spotify data is never shared with third parties.

To revoke SheevChat's access to your Spotify account at any time, visit spotify.com/account/apps and remove SheevChat.

TikTok API Data

SheevChat uses TikTok OAuth exclusively for user authentication and account identification. The following scopes are requested:

  • user.info.basic — used to authenticate the user and establish account ownership within the application. Returns your TikTok Open ID (a unique anonymous identifier).
  • user.info.profile — used to retrieve your TikTok display name and bio description for display within the application interface, so you can confirm which account is connected.

SheevChat does not post content, send messages, or perform any actions on TikTok on your behalf. Access is strictly limited to identifying the authenticated account. TikTok OAuth data is stored locally on your device in AppData\Roaming\SheevChat\config.json and is never transmitted to any SheevChat-operated server beyond the transient OAuth relay described below. It is never shared with third parties.

TikTok Chat

TikTok live chat is read using an open-source library (tiktok-live-connector) that connects to TikTok's public live stream WebSocket infrastructure. This is the same method used by most TikTok chat reading tools. SheevChat does not store, transmit, or process TikTok chat data beyond displaying it locally in real-time. TikTok chat is read-only — SheevChat cannot send messages to TikTok.

Data Storage and Security

All data SheevChat stores (OAuth tokens, display names, usernames, and app settings) lives exclusively on your local device in AppData\Roaming\SheevChat\. The only exception is the transient 5-minute window during OAuth login described above, after which the relay holds nothing. You can delete your local data at any time by removing the config file or using the disconnect option within the app.

Data Retention & Deletion

SheevChat retains your data only as long as necessary to provide the service. Specifically:

  • OAuth tokens and account information stored locally in AppData\Roaming\SheevChat\config.json are retained until you disconnect the platform within the app or manually delete the file.
  • Tokens temporarily held by the OAuth relay during login are deleted immediately upon claim by your device, or automatically after 5 minutes if unclaimed. Nothing is retained by the relay after this window.
  • Chat messages are never stored — they are displayed in real-time and discarded.

To delete your locally stored data, disconnect all platforms within SheevChat and delete the folder at AppData\Roaming\SheevChat\, or uninstall the application.

Data Security

SheevChat takes reasonable measures to protect your data:

  • All communication between SheevChat and the OAuth relay, and between the relay and platform APIs, occurs over HTTPS with TLS encryption.
  • OAuth tokens are stored locally on your device and are never transmitted to any SheevChat-operated server beyond the transient 5-minute relay window described above.
  • Platform Client Secrets are stored exclusively in the OAuth relay's secure environment and are never included in the distributed application binary.
  • The one-time UUID token claim flow ensures that tokens can only be retrieved once and are immediately deleted after retrieval.

While we implement these safeguards, no method of transmission or storage is 100% secure. You are responsible for maintaining the security of your device and the config.json file where tokens are stored locally.

Children's Privacy

SheevChat is not directed at children under 13. We do not knowingly collect any information from children.

How to Revoke Access

You can disconnect any platform at any time from within SheevChat. You can also revoke access directly on each platform:

Changes to This Policy

We may update this policy as the app evolves. The "last updated" date at the top of this page will reflect any changes. Continued use of SheevChat after changes are posted constitutes acceptance of the updated policy.

Contact

Privacy questions or requests: SheevChatApp@gmail.com