Privacy Policy
Effective October 28, 2026
This policy covers the Stream Monster website and the Stream Monster Windows desktop app (formerly AICombatBuddy). It describes the data we handle and nothing else.
Website accounts
To create an account you give us an email address, a display name and a password. We store the email, the display name and a salted hash of the password. We never store the password itself. When you sign in, we set a session cookie so you stay signed in. On our side it is stored only as a hash, it expires after 30 days, and signing out deletes it.
Feedback board
When you're signed in, you can post feedback, feature requests or bug reports, and you can vote and comment. We store your posts, votes and comments with your account. Your display name is shown publicly next to your posts and comments. Your email is never shown.
Hosting
The website runs on Cloudflare. Cloudflare processes standard request data, such as IP address and browser details, so it can deliver and protect the site. We don't use advertising or tracking cookies.
YouTube data (Sign in with YouTube)
The desktop app can connect to your YouTube account using Google sign-in with the read-only scope youtube.readonly. The app uses this access only to find your current live broadcast and read its live chat, so your on-stream buddy can react to chat.
- Live chat is processed on your PC while you stream. We don't store it on our servers.
- The sign-in code exchange goes through a Cloudflare Worker that we run. That Worker passes the tokens back to your PC and doesn't keep them.
- Your refresh token is stored only on your PC, in Windows Credential Manager. It is never stored on our servers.
- We don't use YouTube data for advertising, and we don't share it with anyone.
Stream Monster's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Google's handling of your data is covered by the Google Privacy Policy. You can revoke Stream Monster's access at any time at myaccount.google.com/permissions. Disconnecting in the app also removes the token from your PC.
Data that stays on your PC
App settings, character choices and buddy memory (nicknames, session highlights and short recaps) are stored locally on your computer. They're not sent to us.
We don't sell your data
We don't sell, rent or trade personal data, and we don't share it with advertisers.
Deleting your account
Sign in, open the feedback board and click Delete my account next to your name. Confirm your password, then confirm again in the dialog. This immediately and permanently deletes your account (email, display name and password hash), all your sessions, and your votes and comments. Your posts stay on the board so that others' votes and discussions still make sense, but your name is removed and they show as "[deleted]".
Contact
Questions or requests: Sensoredrooster.com@gmail.com
Changes
If this policy changes, we'll update it here and change the effective date.