Privacy Policy

Last updated: April 29, 2026

This policy explains what information Shu Shu collects and how it is used. Operator: Bruce S McNaughton (sole proprietor). Contact: bmcnaughton0@gmail.com.

1. Data We Process

• Discord identifiers and profile fields needed for login and feature operation.
• Server configuration settings you save in the dashboard.
• Twitch, YouTube, and Kick OAuth tokens for broadcasters who connect those platforms (encrypted at rest, used only for the requested integration).
• Operational logs and event metadata for reliability, moderation, and debugging.

2. How We Use Data

• To authenticate users and authorize access.
• To deliver bot features (commands, overlays, activities, moderation, and automations).
• To improve performance, reliability, and abuse prevention.

3. YouTube API Services

Shu Shu uses YouTube API Services. By authorizing the YouTube integration, you also agree to be bound by the YouTube Terms of Service and the Google Privacy Policy.

• Scope requested: youtube.readonly only. Shu Shu never posts, uploads, deletes, modifies, likes, subscribes, or otherwise writes to your YouTube account.
• Endpoints used: liveBroadcasts.list (detect when you go live), videos.list (resolve the active live-chat ID), and liveChat.messages.list (read public live-chat messages while you are streaming). Plus PubSubHubbub push subscriptions for go-live notifications.
• What we display: public YouTube live-chat messages are forwarded in real time to your OBS chat-bubble overlay so you can read your YouTube viewers alongside Twitch viewers. Messages are not stored server-side beyond the in-memory polling window- they are pushed to overlay clients via WebSocket and discarded.
• Retention: we retain only your OAuth refresh token (until revoked) and your YouTube channel ID (until you disconnect). Live-chat message content is ephemeral and is not persisted.
• Revoking access: you can revoke Shu Shu's access at any time via Google's security settings: https://myaccount.google.com/permissions. You can also disconnect the integration from your Shu Shu streamer settings page; this immediately deletes your stored tokens.
• Data deletion requests: email bmcnaughton0@gmail.com for any data-deletion request related to YouTube data.

4. Data Sharing

We do not sell personal data. Data may be processed by infrastructure providers (Cloudflare) required to run the Service. We do not share YouTube data with any third party.

5. Retention

Configuration and tokens are retained until you disconnect the integration or delete your account. Operational logs are retained for up to 30 days for reliability and abuse prevention. Live YouTube chat content is not retained.

6. Security

Reasonable technical and organizational safeguards are used to protect stored data. No system is perfectly secure.

7. Contact

For privacy questions, data-deletion requests, or removal requests, contact bmcnaughton0@gmail.com or via support Discord: https://discord.gg/XWfpGVs9D8.