Last updated
This notice covers the Chatto desktop app and its theme sharing service. Chatto is an independent open source project; questions go to support@chattolive.com.
The Chatto app
Chatto only asks streaming platforms for the permissions it needs to read chat (on Twitch, chat and channel points redemptions). Your streaming platform sign-in tokens are encrypted with Windows and stay on your computer; they are never sent to anyone else. Chatto collects no usage data. It only connects to the streaming platforms you sign in to (sign-in and reading chat), GitHub (checking for and downloading updates) and, when you use theme sharing, the sharing service (api.chattolive.com, hosted on Cloudflare). The sharing service keeps account data only once you sign in to a Chatto account; see the Privacy Notice on the Accounts page or at chattolive.com/privacy. Its local server serves the overlay and OBS on 127.0.0.1 only, so other devices on your network cannot read it.
Theme sharing
- When you sign in: We receive your user id and display name from the platform you sign in with. We do not receive your email, password or chat content, and we do not keep the platform credentials used to sign in.
- Account data: Your display name, linked sign-in methods, the themes you publish, and your likes and reports.
- Anonymous data: The app creates a random id to count downloads (once per day per theme). These records are summarized into totals and deleted every day.
- Connection data: To prevent abuse, IP addresses are stored only as hashes and expire within minutes.
- Public information: The themes you publish, your display name as author, and their like and download counts are public.
- Service provider: Data is stored on Cloudflare.
- Deletion: You can delete your account in the app. Your account and linked sign-in data are deleted; your themes are handled as described in the terms.
How sign-in data is used
When you sign in to theme sharing with Twitch, Google or Discord, Chatto receives only your user id and display name from that platform. It uses them only to recognise your Chatto account and to suggest your display name. They are never sold or shared, never used for advertising, and are deleted when you unlink that sign-in method or delete your account. Chatto does not request your email address, and it revokes the platform’s access token right after reading your id.