Privacy Policy

Last updated: October 2026

1. Information We Collect

We collect your email address and password (stored as a bcrypt hash) when you create an account. During stream sessions, we process TikTok Live event data (gifts, follows, comments) in memory to power real-time features. This data is not persisted beyond your session.

2. How We Use Your Information

Your email is used for account authentication, password resets, and service communications. We do not sell or share your personal data with third parties except as required by law or to process payments via Midtrans.

3. Data Storage

Account data is stored on servers in Southeast Asia. Your configuration data (alerts, overlays, TTS settings) is stored to persist your preferences across sessions. You can delete your account at any time, which permanently removes all stored data.

4. Cookies

We use a single HTTP-only session cookie for authentication. This cookie is strictly necessary and does not track you across other websites. The desktop app keeps that same session cookie on your computer so you stay signed in between launches.

5. Desktop Application

If you install the Thorfinity desktop app, it registers with our servers under a device name (your computer's hostname by default) and your operating system, and reports that it is online every 30 seconds while it runs. After each action it performs locally — a keystroke script, an OBS scene change, a Minecraft command, a sound, or an autoclicker run — the app sends a diagnostic entry containing the action type, what triggered it, a generic descriptor such as "keystroke (4 actions)", the result, and any error message. Those diagnostics never contain the keys you type, chat messages, viewer names, or the text of a command; that content stays on your computer. These diagnostic entries are deleted after 14 days. The app includes no analytics, advertising, or crash-reporting service — its logs stay on your machine. Settings that never leave your computer (device token, OBS and Minecraft credentials, hotkey bindings, the start-with-Windows preference) are stored locally and, on Windows, encrypted with your operating system's credential store. Uninstalling the app does not delete that local file; you can remove it by deleting the Thorfinity folder under %APPDATA%. Update checks fetch a small manifest from downloads.thorfinity.com, which sees your IP address like any other web request.

6. Contact

For privacy questions or data deletion requests, contact us via Discord at discord.gg/thorfinity.