Policy drafts · Publisher contact details are pending. Not ready for app-review submission.
StreamWeaver
Draft · contact details required

Privacy Policy

Draft prepared October 26, 2026 · Covers StreamWeaver 0.3.3 and this information website.

This policy is a draft, not a finalized registration document. The publisher must supply the responsible operator’s name and a working public privacy contact before publication as a final policy or submission for app review. No privacy contact has been configured on this website.

1. What StreamWeaver does

StreamWeaver is an independently distributed Minecraft client mod. It displays selected third-party chat messages and supported LIVE events in the player’s HUD. The desktop mod runs locally, using a bundled background helper. This website provides information, documentation, and downloads; it does not operate an account service, chat archive, or chat relay.

2. Information processed by the mod

3. How information is used and stored

These data are used to connect to the services you enable, authenticate authorized access, display chat and arrivals, suppress duplicate events, and save your preferences. Credentials are saved in your Minecraft profile’s config/streamweave/services.json. They are not encrypted by the mod; secret fields are masked in its interface. Layout is stored in config/streamweave.json.

The helper and Minecraft client keep bounded recent-event buffers in memory (up to 1,000 events each). The helper also keeps limited in-memory duplicate and arrival tracking. This version does not intentionally write a chat transcript to disk. Events leave these buffers as newer events replace them or when the relevant process stops. Configuration and diagnostic files remain until changed or deleted. Local backups, recording software, screenshots, and other mods may retain their own copies.

4. Connections to other providers

Enabling a source causes your computer to communicate with that service and, where required, its infrastructure or the connector’s third-party signing provider. Those providers can receive your IP address, connection and channel details, and credentials relevant to their service. TikTok uses an unofficial connector, which may use Eulerstream signing infrastructure; providing no personal signing key does not guarantee no third-party signing requests occur. Review those providers before enabling a connection.

Twitch, Google/YouTube, Discord, TikTok, Eulerstream, and any relay you configure have their own terms and privacy practices. Kick and Custom rely on an external relay configured by you. No publisher-operated relay is provided in this release. This website does not receive your locally configured tokens or chat feed. If you display the HUD on a livestream or recording, the information visible in that HUD may be disclosed to your audience.

5. Website hosting

This static website is hosted using ChatGPT Sites. Its hosting and delivery providers process technical request information, such as IP address, requested URL, browser information, and timestamps, to deliver and protect the site. Hosting-provider retention is governed by their own practices. The website’s own code adds no analytics, advertising, tracking cookies, sign-in, or forms, and loads no external fonts or scripts. Its download script assembles static file parts in your browser, checks the file checksum, and saves a single JAR; it does not upload data. Provider infrastructure may independently use security or operational mechanisms.

6. Sharing and commercial use of data

The current application has no publisher analytics, advertising, data-sale, or cross-service profiling feature. Connections transmit the data needed for the enabled service. Publicly displaying or broadcasting the HUD is under the user’s control. Do not send private credentials, account files, or unredacted diagnostics to another person.

7. Your controls and deletion

Disable a connection to stop new events being collected from that source. Hiding a source in the HUD only changes visibility; disconnect it to stop its connection. Close Minecraft to end the helper and clear in-memory buffers. In Twitch settings, Forget deletes locally stored Twitch credentials and disconnects, but does not revoke the grant at Twitch; revoke it in your Twitch account if desired.

To reset all local StreamWeaver data, close Minecraft and delete config/streamweave.json and the config/streamweave directory from that profile. This also removes the local credentials, helper runtime, and logs. Remove any backups separately. Revoking or rotating provider credentials may be needed to invalidate copied tokens. Deleting the local files does not delete the original messages or account information held by third-party platforms.

8. Security, eligibility, and privacy rights

Protect access to your computer and backups. The mod’s local service binds to loopback and uses a private pairing token, but this does not encrypt credentials on disk or replace device security. Follow Minecraft’s and each connected service’s account and age requirements. The website does not intentionally collect children’s information through registration or forms.

Privacy rights depend on where you live and which party holds your information. Local application data can be removed as described above. For data held by a platform or hosting provider, contact that provider. The responsible publisher’s identity, contact route, and any applicable jurisdiction-specific disclosures must be completed before this draft becomes final.

9. Changes and contact

Changes to connection behavior or hosting may require an updated policy before release. Material changes should be identified on this page. Publisher/operator and privacy contact: not yet provided. See support and data removal for the current configuration status.