Privacy

MrsMalvic is a Twitch chat bot, run by one person. It keeps what it needs to answer commands and not much else. Your password, your email and your card details never come into it, because Twitch doesn't hand any of that to a bot in the first place. You can opt out of any command whenever you want, and if you'd rather your data was gone entirely, ask and it will be.

Authorising at /add-to-channel grants a single Twitch scope: reading and sending chat in your channel. Stored from that are your Twitch user ID, your channel login, whatever per-channel settings you change, and an access token that is encrypted at rest and used for nothing except connecting to your chat.

To get the bot out again, use Remove bot from channel on the page you added it from. Revoking access in Twitch's Connections settings amounts to the same thing. The token stops working the moment you revoke it, and the bot leaves rather than staying on a plain chat connection. Either way, adding it back later means authorising again.

The bot reads chat so it can spot commands. Ordinary messages aren't archived. What it holds onto depends entirely on which features you use: game and casino balances, emote counts, your AFK status and the message you set, reminders you asked it to deliver, quotes you saved, a Last.fm username if you linked one, and when you were last seen. It counts command usage too, for rate limiting and for the public leaderboards.

AI commands work differently. Your prompt and the reply that comes back are both logged, so the feature can be debugged and abuse can be traced.

Twitch, unavoidably. Emote features query 7TV, BetterTTV and FrankerFaceZ; music features go to Last.fm; AI features send your prompt to whichever model provider answers it. Past that, a command calls the one API it exists to reach, and carries only what that call needs. Weather sends a location. Search sends a query.

The bot, this site and the database all sit on third-party hosting. This site also runs Vercel Analytics and Speed Insights, which count page views without cookies or cross-site tracking. None of it is sold, and none of it goes to advertisers.

?optout <command> in chat stops a command working on you, and ?optout all covers the lot. A few commands take a hidden option instead, so they answer you without putting the detail in chat. The same preferences are on your profile page.

If you want what's stored deleted outright, ask the bot's author (below). Otherwise it stays until the feature it belongs to has no further use for it.

MrsMalvic is built and operated by MrMalvic. Send deletion requests, privacy questions and complaints there.