Privacy
policy
How we handle your data across Nanitabs and Nanitabs Sync.
Last updated July 26, 2026.
About this notice
This Privacy Notice for Nanitabs (“we,” “us,” or “our”) describes how and why we might access, collect, store, use, and/or share your personal information when you use our services, including when you visit Nanitabs.com, use Nanitabs Sync or engage with any of our other products, features, or services that reference this Privacy Notice.
We process personal information depending on how you interact with our Services. We only store the authentication credentials (access and refresh tokens) needed to keep your connections active. All other information we receive from connected platforms is processed live to power your widgets and is not retained.
We do not process sensitive personal information, and we do not sell your personal information. Depending on your location, you may have rights regarding your personal data.
For more information contact privacy@nanitabs.com.
What information do we collect?
We collect only personal information that you voluntarily provide to us — email addresses, contact preferences and usernames — as well as information we automatically receive from the platforms you connect to. We do not process sensitive personal information. When you authorize a connection to a third-party platform, we receive the following information:
StreamElements
Account information, channel information (followers, subscribers and stream data), and chat activity.Twitch
Username, user ID, email, channel information (followers, subscribers, channel points, stream information, etc), and chat activity.YouTube
Username, channel information (subscribers, members, etc), and chat activity. We also access public YouTube livestream chat activity without requiring a login.TikTok
Public livestream chat activity, accessed via the username you provide.Kick
Username, user information, email, channel information (followers, subscriptions and channel points), and chat activity.Spotify
Account information (name, username, email, profile picture, country, and subscription type) and currently playing music.Discord
Username, avatar, banner and voice status (whether you are connected to a voice channel and whether you are speaking). We access voice state only. We never access, record, or process voice audio, and we cannot read or send messages on your behalf.Ko-fi
Payment event information from your webhook (supporter’s name or alias, the contribution amount, and any accompanying message).
“Chat activity” always refers to public livestream chat activity, never private or direct messages. We also automatically collect log and device data such as IP address, browser and device characteristics, operating system, language preferences, referring URLs, country, and usage information.
How do we process your information?
To create and authenticate accounts, deliver requested services, respond to inquiries and provide support, fulfill and manage orders, request feedback, protect our Services through fraud monitoring, identify usage trends, and protect vital interests when necessary.
What legal bases do we rely on?
For EU and UK users: consent, performance of a contract, legitimate interests, legal obligations, and vital interests. For Canada: express or implied consent, with exceptions permitted under applicable law.
When and with whom do we share your information?
With vendors and service providers under contract — categories include cloud computing, data analytics, data storage, payment processors, sales and marketing tools, account authentication, website hosting, and order fulfillment — and in connection with business transfers such as mergers or acquisitions. We do not sell your personal information, and we do not share it with advertisers or data brokers.
Do we use cookies and other tracking technologies?
Yes. Cookies and similar technologies for security, functionality, and analytics. We do not use cookies for advertising.
Google API Services
Creators can authenticate their YouTube accounts to display live chat, events (such as subscribers, members, etc), and stream information in custom widgets using the YouTube API Services. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
By using YouTube-connected features you agree to the YouTube Terms of Service (youtube.com/t/terms) and acknowledge the Google Privacy Policy (policies.google.com/privacy). We access YouTube data only to provide this functionality, never use it for advertising, and never sell it. You can revoke Nanitabs’ access to your YouTube data at any time via the Google security settings page at security.google.com/settings/security/permissions.
How do we handle your social logins?
If you register or connect via a third-party platform such as Twitch, Kick, YouTube, Spotify, StreamElements, or Discord, we receive the profile and account information described above as made available by that provider. We are not responsible for the third party’s own privacy practices.
Is your information transferred internationally?
Our servers are located in the United States, so your data may be processed in the US and other countries. Safeguards include the European Commission’s Standard Contractual Clauses for EEA, UK, and Switzerland transfers.
How long do we keep your information?
We keep the authentication credentials for your connections for as long as you maintain an account or an active connection with us. Data received from connected platforms to power your widgets (chat activity, stream events, voice status, music information, etc) is processed live and is not retained. Account and contact information is generally kept no longer than you maintain an account with us, unless the law requires longer retention.
How do we keep your information safe?
We use appropriate technical and organizational security measures to protect your personal information. This includes encryption of data in transit (TLS) and encryption of stored credentials at rest. However, no method of transmission or storage is 100% secure and we cannot guarantee absolute security.
AI and machine learning
We do not use your personal information, or any information we receive from connected platforms, to train, develop, or improve artificial intelligence and machine learning systems.
Do we collect information from minors?
We do not knowingly collect data from children under 13 (or the applicable age in your jurisdiction). Accounts found to violate this will be deactivated and the data deleted. Contact privacy@nanitabs.com if you believe we’ve collected data from a minor.
What are your privacy rights?
Depending on your region (EEA, UK, Switzerland, Canada), your rights may include access, rectification, erasure, restriction of processing, data portability, and objection to automated decision-making. UK residents can complain to the ICO. You may withdraw consent or opt out of marketing at any time, and review, change, or terminate your account by contacting privacy@nanitabs.com.
Controls for Do-Not-Track features
We do not currently respond to browser Do-Not-Track signals, as no uniform standard exists.
Do US residents have specific privacy rights?
Residents of California, Colorado, Connecticut, and other listed states have the right to know, access, correct, delete, and obtain a copy of their data, plus non-discrimination and the right to opt out of targeted advertising, sale, or profiling. In the past 12 months we collected only identifiers and internet or network activity — no financial, biometric, geolocation, or other sensitive categories. We do not sell personal information or use it for targeted advertising or profiling. California’s “Shine the Light” rights and an appeals process are also available. Exercise your rights via privacy@nanitabs.com.
Changes to this Privacy Policy
We reserve the right to update this policy at any time. Material changes will be indicated by a revised date at the top of this page. Your continued use of the Service after any changes constitutes acceptance of the updated policy.
How can you review, update, or delete your data?
Contact privacy@nanitabs.com to request access, correction, or fulll deletion, subject to applicable law. You can also disconnect any platform connection from your account at any time, and revoke access from within that platform’s own connected-apps settings.
Contact Us
For any questions or complaints regarding this policy and your data, reach us at privacy@nanitabs.com.
