Privacy Policy

Who handles the information

Viewer Link is independently operated by its developer, publicly known as FierceGreen. Viewer Link and FierceGreen are public product and creator names, not a claim of incorporation. The shared account service and database are hosted on Render in Oregon, United States; desktop settings, game paths and local event records remain on the streamer’s computer. Information sent from another country is processed in the United States and by connected providers in the locations covered by their policies. For privacy questions, contact viewerlinkapp@gmail.com; see also Contact details.

Information used by Viewer Link

Account and channel information

Provider account identifiers, channel identifiers, display names and avatar URLs identify viewers and streamers. YouTube sign-in reads the signed-in user’s channel information through YouTube API Services. Provider access tokens used for viewer sign-in are used during authentication and are not retained; Viewer Link keeps its own login-session records as described below. Separate streamer YouTube linking requests read-only offline access for live-broadcast checks; those access and refresh tokens are stored encrypted by the service. Twitch viewer sign-in reads the authenticated account identifier, display name and avatar.

TikTok sign-in and account linking

TikTok Login Kit verifies the account you authorize. Website viewer sign-in uses basic profile access to read an app-specific account identifier, display name and avatar. Linking a streamer account also requests profile access to read the username and associate the correct LIVE account. These correspond to user.info.basic and, for streamer linking, user.info.profile. Tokens for the linked streamer account are retained encrypted by the service to maintain and recheck it; provider access tokens used for viewer sign-in are used only during authentication. Viewer Link separately maintains its own login session. Viewer Link does not ask for your TikTok or Google password.

Effects and LIVE interactions

Effect requests, supported quantities, timestamps, game/session identifiers, results and viewer attribution support delivery, activity and recaps. When a streamer connects LIVE, a separate receiver using the third-party PirateTok library connects to TikTok to process supported gift, like, follow, share, join and comment events, including sender identifiers, names, avatar URLs, event identifiers and counts. The receiver receives the connected username, not Login Kit tokens. It is separate from official TikTok Login Kit; sign-in approval does not grant approval or availability of LIVE event access. Incoming comment text is compared with the streamer’s saved exact-text filter. Configured filters, mapping progress, and duplicate-event and combo records support delivery without repeating the same event.

Sparks and settings

Per-streamer balances, grants, claims, reservations, refunds and refill deadlines persist between sessions. Streamer effect settings, account-link settings and configured game paths are stored for the app’s operation.

Plan and sandbox billing records

Streamer plan state, test customer and subscription identifiers, payment-event references, cancellation status and manual refund-review notes support Stripe sandbox subscriptions. Checkout and payment-method entry are hosted by Stripe; Viewer Link does not store full card numbers or security codes. Real payments are disabled.

Account moderation

Verified, stable provider account and channel identifiers, internal streamer identifiers, moderation reasons, case references, decision timestamps and audit records support account restrictions and appeals. Linked identity records help prevent a banned account from bypassing a restriction by changing its display name, unlinking a platform or creating another Viewer Link registration with the same verified platform account.

Support correspondence

If you email support, your email provider and the support mailbox process your address and the information you send. Share only what is needed to investigate the issue. Do not send identity documents, payment-card details, passwords or tokens. Do not send real card details when testing sandbox checkout.

Connection and diagnostic information

The service processes network addresses and connection state for delivery and rate limiting. Error and operational records help diagnose failures. The hosting service also processes operational and network information needed to run the hosted service.

How it is used and who can see it

Information is used to authenticate accounts, find sessions, deliver effects, maintain balances, prevent duplicate requests and show results. Streamers can see the identity and effect activity associated with requests to their game. Streamers can opt into Live Streamers; their verified platform name, avatar, current game and platform watch link appear only while a platform broadcast and Viewer Link game session are active. Viewer sign-in alone does not enable listing. If the streamer enables an overlay, viewer names, avatars and effect information may appear in the broadcast or its recordings. Viewer recaps and wallet responses are scoped to the signed-in viewer.

The private owner dashboard lists registered streamers even when they are offline. The owner can review linked platform identities, plan and connection state, last-seen time, restrictions, cancellation results and refund-review notes. This private account list is separate from the public Live Streamers directory.

Render processes service data and operational information as the host. Google/YouTube, TikTok and Twitch receive the authentication and API requests for their integrations. Stripe processes sandbox checkout and subscription information, and Gmail handles support correspondence. The Twitch extension loads Twitch’s extension helper. Loading a remote profile or gift image sends a request to its image host, which can receive your network address. These providers handle their services under their own policies. Viewer Link does not sell personal information or share it for cross-context behavioral advertising. It does not embed advertising or analytics trackers.

Cookies and browser storage

Essential cookies maintain authentication and the sign-in flow. Viewer login cookies last up to seven days, sign-in flow cookies up to ten minutes, and billing and overlay-editor cookies up to one hour. Signing out clears the corresponding login or billing session; it does not unlink every connected account. Browser storage remembers preferences such as reduced motion and, for overlays, reconnection state. Blocking essential cookies can prevent sign-in. Clearing browser storage does not delete server-side history or Sparks.

Tracking choices: Viewer Link does not currently change its behavior in response to browser Do Not Track signals. It does not use advertising or cross-site analytics trackers. Authentication, embedded platform tools, provider-hosted checkout and remote images can involve third-party cookies or device/network information under those providers’ policies; Viewer Link does not control their activity across other services.

Retention and your controls

Effect and activity history: 90 days. Detailed records of completed, failed, rejected or canceled effect requests are eligible for automatic removal 90 days after their most recent terminal update. Ended session details are removed after 90 days once associated requests are resolved and their details have expired. Requests whose game outcome is unknown, pending work and reserved Sparks stay available until they can be resolved. Older session records without a recorded end time receive a conservative 90-day period from the first cleanup observation. Cleanup runs in small batches, so expiry is not an instantaneous deletion guarantee.

Account settings and Sparks: saved settings, balances and refill deadlines persist between sessions and remain until a verified deletion request is handled. Provider profile data has the shorter YouTube limits below. Expired authentication and linking records are cleaned automatically. Audit events are eligible for removal after 90 days; overlay display payloads are cleared after two minutes in bounded cleanup batches. Minimal hashed request and session receipts may remain to prevent old requests being executed again. These receipts are pseudonymous, not necessarily anonymous, and contain no effect descriptions, parameters, names or pictures.

Recovery backups: 30 days. The hosted service creates encrypted database recovery copies daily and expires managed copies after 30 days. Recovery keys and the current deletion journal are kept separately from the backup files. These copies share the existing private hosting volume and help recover from application mistakes; they are not an offsite backup against losing the entire volume. Storage or service failures can delay backup creation and cleanup and are recorded for operator review. Backups may contain earlier account data for up to 30 additional days after its removal from the live database, except for YouTube API profile data, which is excluded from new recovery copies and stripped from older managed copies. All supported restores also remove that API data. A managed restore requires the current deletion journal, reapplies authorized deletions, clears restored sign-in credentials, and checks data integrity before the restored copy can be used. Expired managed copies cannot be restored through this workflow. Provider infrastructure snapshots and operational records are also governed by the hosting provider's practices.

You can sign out, leave a viewer session, download an available recap, unlink your streamer YouTube account in desktop Settings, or use Unlink Account on the desktop TikTok page. Unlinking TikTok stops the receiver, removes the stored TikTok link and attempts to revoke its token. It does not automatically erase history, necessary moderation identity links or a streamer's recordings. You can also manage access through Google's security and third-party access settings or your TikTok account settings. Provider revocation does not by itself delete your Viewer Link settings, Sparks or effect execution records. The YouTube-specific controls below remove API profile data separately.

Access, correction and deletion: email viewerlinkapp@gmail.com with your platform, display name and request. A display name alone is not proof of ownership; the operator verifies the relevant platform identity before exporting or deleting records. Do not send passwords, tokens, identity documents or payment-card details. Requests are handled manually using private tools, with separate viewer, streamer and TikTok LIVE-sender records where needed. TikTok sign-in and LIVE events use different account identifiers; verifying one does not automatically identify the other. Exports exclude authentication secrets and unrelated users' private records. Complete Viewer Link account deletion is operator-assisted. The separate YouTube data control below removes API profile data without deleting your whole account.

Deletion is performed during controlled maintenance after active sessions, pending effects and reservations have been resolved. Streamer deletion can remove the relevant profile, service credentials, settings, balances and activity while preserving minimal duplicate-prevention receipts. Viewer deletion removes the viewer profile, linked login records and balances, replaces their attribution in requests with “Deleted viewer”, and removes their avatar. The remaining effect details follow the 90-day history schedule; this is not a promise that every request becomes anonymous or is immediately removed. Unresolved billing, bans, appeals and refund reviews require individual handling first. Necessary billing, security and abuse-prevention records may be retained separately to resolve those matters or meet applicable obligations; the operator reviews the reason and any remaining steps rather than promising complete removal of all records. Removing service credentials does not claim a provider grant has been revoked: unsuccessful or outstanding revocations need separate follow-up. Local desktop files, support email, platform-held information and broadcast recordings are outside the service database and may need separate deletion. Deleting Viewer Link records does not delete information held by YouTube, TikTok or Twitch. Provider-specific removal obligations may require earlier handling than the general activity schedule. We will explain any retained records and outstanding steps when responding to your request.

YouTube data and disconnecting access

YouTube channel identifiers, names, profile pictures and their copies in effect activity are refreshed or removed within 30 days. Linked streamer profiles are normally refreshed daily while the service is running. If a profile can no longer be refreshed, it is replaced with a generic YouTube label; settings, Sparks and the effect result remain. Unknown-age legacy profile data is cleared rather than treated as newly collected.

Disconnecting YouTube in desktop Settings or using Remove YouTube data below removes the associated API profile data from the service and queues revocation of stored Google grants. Transient revocation failures are retried for up to seven days; the result tells you when to finish revocation in Google account permissions. Revoking a Google grant can affect other YouTube links made with the same Google account. Signing in again authorizes a fresh lookup and cancels older pending revocation attempts.

Google account sign-in identifiers and opaque security/ownership bindings are separate from the removed YouTube profile data. They keep your existing Viewer Link account, balance and restrictions associated with you. Detailed effect execution records can follow the general 90-day schedule with generic attribution. Full account deletion remains available through support. Verified requests for YouTube API data removal are handled as soon as possible and within seven calendar days; the control below performs service-side removal immediately, without waiting for pending game effects to finish.

Sign in with YouTube to use the data-removal control, or email viewerlinkapp@gmail.com for help verifying and handling your request.

Broadcast recordings, user exports and platform-held copies are outside the hosted database. Current desktop builds avoid saving viewer profile dictionaries in request diagnostic logs and disk queues; older desktop installations and files copied elsewhere may need separate cleanup.

Security and age requirements

Viewer Link uses HTTPS for the hosted service, encrypted storage for retained provider tokens and managed backups, and restricted operator access. These measures reduce risk but cannot guarantee that every system or transmission is secure. Keep your desktop, sign-in accounts and private access links protected.

Viewer Link is not intended for children under 13. You must also meet any higher age or eligibility requirement of the platform and feature you use, including LIVE and gifting. We do not claim to verify every user’s age. If you believe a child has provided personal information, contact support so we can investigate, restrict access where appropriate and handle removal.

Connected services and future changes

Use of connected services is also covered by their policies, including the Google Privacy Policy, TikTok Privacy Policy, Twitch Privacy Notice, Render Privacy Policy and Stripe Privacy Policy.

Enabling real payments or introducing new data uses requires this policy to be reviewed and updated. Material changes will be described in a dated notice on this page; any additional permission required for a new use must be obtained before that use begins. This policy describes current practices, not a claim of platform approval. For privacy questions or complaints, email viewerlinkapp@gmail.com.

November 1, 2026 update: confirmed the 90-day resolved-history and 30-day managed-backup schedules; clarified account deletion, provider access, cookies, tracking choices and the operator contact.

Live Streamers directory

Listing is off by default. If a streamer chooses to appear in the directory, Viewer Link may show their verified platform display name, avatar, platform, current game and links to their viewer page and live channel while their broadcast is verified live and their Viewer Link session is active. Private email addresses, viewer wallet records and account credentials are not included. Streamers can turn listing off in the desktop app.

The website stores only the last opened streamer’s public profile ID in this tab’s session storage to provide a Back to effects link. This navigation record contains no session code, sign-in token or Sparks balance.