Privacy policy

Last updated: October 28, 2026

This site (tools.cyanfen.com, ".Cyan") is a set of free tools for streamers, run by CyanFen. This page explains, in plain language, what the site stores, why, and what you can do about it. Questions? Use the contact form.

The short version

• We only store what the tools need to work.
• No ads, no analytics or tracking scripts, and we never sell or share your data for marketing.
• Passwords and connection keys are stored hashed or encrypted.
• You can unlink, disconnect or delete your account (Settings) at any time.

What we store

Your account. When you sign in with Twitch, Kick or YouTube we store that account's ID, username, display name and profile picture, and when you linked it. We do not store your email address. If you set a backup username and password, the password is stored only as a secure hash. Settings shows a short activity log (for example "linked Kick") that only you can see.

Where you're signed in. For each browser you sign in with: a label for it (like "Chrome on Windows", from what the browser reports), when you signed in and when it was last used, so you can see and sign them out in Settings. Each is deleted when it's signed out, or after 30 days unused. No IP address is kept.

Permissions you grant. When you allow a feature such as sending chat, moderating, polls, predictions or events, we store the access key the platform gives us, encrypted. It is used only to do what you ask (send your message, start your poll) and to receive events for your own channel.

What you set up in the tools. Your channels and display settings, overlay and dock links, and the wheels, counters and other items you create.

Uploads. Pictures and sounds you upload to your library, with their name and when you uploaded them. They're shown wherever you use them, and kept until you delete them or your account.

Mods. The Twitch, Kick and YouTube accounts you add as mods, and (as suggestions) mods seen chatting in your channel.

Chat. To show recent chat, the public chat messages of the channels you open are kept for a short time: at most the latest 300 per channel, and never longer than 24 hours.

Events. Your latest 100 events (follows, subs, gifts, cheers, raids, tips, orders, memberships, wishlist gifts and similar) are kept so the Events page and dock can show them. These include what the platform or service sends for display: the supporter's name, message and amount. Events from YouTube are kept for at most 30 days.

Event overlays. For your goal bars and labels: each goal's current number, your latest follower, sub, gifter, cheer, tip, raid and Kicks (name and amount), and your top tippers, cheerers and gifters this stream and all time (name and total, at most 300 per list). They're kept until you start them over or delete your account. Supporters who asked a service to keep them private are never shown or listed, though their amount still counts toward a goal. Tips in other currencies are converted with the European Central Bank's daily exchange rates; nothing about you is sent to get them.

Connected services (Streamlabs, Ko-fi, Fourthwall, Patreon, Throne). We store the keys needed to receive your events, encrypted. Some services also send a supporter's email or postal address with each event; we ignore those and never store them.

Contact form. What you write, plus the name and email you choose to give, and your account if you are signed in.

In your browser. Your sign-in key and a few display preferences are kept in your browser's local storage, and short-lived cookies are used while signing in. There are no advertising or analytics cookies.

Technical data. Your IP address is used briefly to limit repeated sign-in and contact attempts and is not saved. Server logs may hold technical details for a short time for security and fixing problems.

YouTube

The site uses the YouTube API Services when you connect a YouTube channel. Google's handling of your data is covered by the Google Privacy Policy, and using the site's YouTube features means you agree to be bound by the YouTube Terms of Service.

• What the site reads from YouTube: your channel's ID, handle, name and picture (to sign you in and show your account); while you have the chat page, dock or overlay open, your own channel's live chat (kept at most 24 hours, like other chat) and its Super Chats, Super Stickers and memberships (shown as events, kept at most 30 days); and, for YouTube mods you add, their channel's ID, handle, name and picture.
• What it does on YouTube, only when you ask: send your chat messages, delete messages, time out or ban chatters, start and end polls, and change your live stream's title and category (Stream Info). Each needs the "manage your YouTube" permission, which you choose to give when connecting.
• How it's kept: the access key is stored encrypted; names and pictures from YouTube are refreshed or removed within 30 days; nothing from YouTube is sold, shared or used for anything but these features.
• Revoking access: disconnect YouTube in Settings, or remove the site at Google's security settings page (then what the site holds from YouTube is removed within 30 days). Deleting your data here is separate: use Delete my account in Settings. Deleting your data here doesn't change anything on YouTube.

Who else sees data

• The platforms and services you connect receive the actions you take through the site (for example the chat message you send) under their own privacy policies.
• Cloudflare handles the site's traffic and security, and our hosting provider runs the servers. Both process data only to deliver the site.
• Emote providers (7TV, BetterTTV, FrankerFaceZ) and the platforms serve emote and badge images directly to your browser.
• Anyone you give an overlay, dock or share link to can see what that link shows. Keep those links private.
• Pictures, sounds and videos you link to are loaded from the site they're on, which sees the request. YouTube videos in a bracket play in YouTube's privacy-enhanced player (youtube-nocookie.com).

How long we keep it

Chat and events are kept only as described above. Permission and service keys are deleted when you unlink the account or disconnect the service. Everything else is kept while your account exists.

Your choices

• See your connections and activity, unlink accounts and disconnect services in Settings.
• To delete your account and all its data, use Delete my account at the bottom of Settings: it happens straight away, and the site's access to your Twitch, Kick, YouTube and Joystick accounts is revoked. It only deletes what this site keeps, not anything on those platforms.
• To ask what we hold about you, or for a deletion you can't do yourself, use the contact form ("Account or data request"). Deletion requests are handled within 7 days, other requests within 30.
• You can also revoke the site's access from your Twitch, Kick, YouTube or service settings at any time.

Security

Connection keys are encrypted (AES-256-GCM), passwords are hashed, and the site is only served over HTTPS. No system is perfectly secure, but we keep what we store to a minimum.

Children

The site is not meant for children under 13, and we don't knowingly store their data. If you think a child has used it, contact us and we'll delete the account.

Changes

If this policy changes, the date at the top changes too; bigger changes will be noted on the site.