Privacy Policy

Last updated: June 23, 2026

ImHumanBro ("we", "us", or "our") operates imhumanbro.com and the ImHumanBro moderation bot and Discord bot. This policy explains what personal data we collect, why we collect it, how long we keep it, and the rights you have over it.

This policy applies to users worldwide, including users in the European Economic Area (EEA), United Kingdom, California, and other jurisdictions with applicable privacy laws.

1. Information We Collect

Account data from connected platforms

Kick.com: Username, broadcaster ID, chatroom ID, and OAuth access/refresh tokens used to operate the bot in your chat.
Discord: User ID and username, if you connect Discord for alerts or use the Discord bot.
Twitch: Username, user ID, and OAuth tokens, if you optionally connect Twitch.
YouTube: Channel ID, handle, and OAuth tokens, if you optionally connect YouTube.

Viewer data (collected on behalf of streamers)

Viewer usernames and loyalty point balances in the channels where the bot is active.
Watchtime statistics associated with viewer usernames.
Chat messages are processed in real time for moderation but are not stored.

Technical data

Session identifiers stored in encrypted browser cookies (required to keep you logged in).
Server-side logs may include IP addresses for security and debugging. These are not linked to your account and are not retained beyond 30 days.

2. Legal Basis for Processing

We process your data under the following legal bases:

Contract performance: Processing your account data and OAuth tokens is necessary to provide the Service you signed up for.
Legitimate interests: Security logging and abuse prevention.
Consent: Connecting optional platforms (Twitch, YouTube, Discord) is entirely voluntary.

3. Cookies & Sessions

We use strictly necessary cookies only. Specifically:

Session cookie: A single encrypted cookie that identifies your logged-in session. It is required for the dashboard to function. It expires when you close your browser or log out.
OAuth state cookies: Temporary cookies used during the login flow to prevent CSRF attacks. These are deleted immediately after authentication completes.

We do not use advertising cookies, tracking pixels, or third-party analytics cookies. No cookie consent is required for strictly necessary cookies, but you may disable cookies in your browser at the cost of losing access to your dashboard.

4. How We Use Your Information

To operate the moderation bot in your Kick chat
To send live stream event notifications to your connected Discord server
To maintain loyalty points and watchtime for your viewers
To detect your game/category for automatic stream category updates
To authenticate you when you return to the dashboard
To monitor for abuse and maintain the security of the platform

5. Data Sharing

We do not sell, trade, or rent your personal information. We share data only in these limited circumstances:

Connected platforms: We communicate with Kick, Discord, Twitch, and YouTube APIs only as required to deliver the features you have enabled.
Infrastructure provider: Our hosting provider (Railway) stores our database and serves our application. They are contractually bound to process data only on our behalf.
Legal requirements: We may disclose data if required to do so by a valid legal process.

6. Third-Party Services

Our Service integrates with platforms under their own privacy policies:

7. Data Retention

Account data: Retained while your account is active.
OAuth tokens: Deactivated and deleted immediately when you disconnect a platform.
Viewer loyalty data: Retained while the associated streamer account is active. Deleted when the streamer account is deleted.
Server logs: Automatically purged within 30 days.
On account deletion: All personal data is permanently deleted within 30 days of your request.

8. Your Rights

Depending on where you are located, you may have the following rights over your personal data:

Rights available to all users

Access: Request a copy of the personal data we hold about you.
Deletion: Request deletion of your account and all associated data.
Correction: Request that inaccurate data be corrected.
Portability: Request your data in a structured, machine-readable format.

Additional rights for EEA / UK users (GDPR)

Restriction: Request that we restrict processing of your data in certain circumstances.
Objection: Object to processing based on legitimate interests.
Withdraw consent: Withdraw consent at any time for consent-based processing (e.g., disconnect a platform).
Lodge a complaint: You have the right to lodge a complaint with your local data protection authority.

Additional rights for California residents (CCPA/CPRA)

Know: Know what personal information we collect and how it is used.
Delete: Request deletion of personal information we have collected.
Opt-out of sale: We do not sell personal information. No opt-out is needed.
Non-discrimination: We will not discriminate against you for exercising your rights.

To exercise any of these rights, contact us at support@imhumanbro.com. We will respond within 30 days. Some rights may be exercised directly from your dashboard settings.

9. Security

We protect your data using industry-standard measures:

All data in transit is encrypted with HTTPS/TLS.
OAuth tokens are stored encrypted in our database and never exposed to third parties.
Session cookies are encrypted and flagged as HttpOnly and Secure.
Database access is restricted to application-level credentials only.

10. International Data Transfers

Our infrastructure is hosted on Railway's cloud platform. Your data may be processed in data centers outside your country of residence. Where required by applicable law, such transfers are protected by appropriate safeguards (such as standard contractual clauses). By using the Service, you acknowledge that your data may be transferred internationally.

11. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us immediately and we will delete it.

12. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. Continued use of the Service after changes are posted constitutes acceptance of the revised policy.

13. Contact & Data Requests

For privacy questions, data access requests, or deletion requests, contact us at:
support@imhumanbro.com

We aim to respond to all requests within 30 days.