Privacy policy

Last updated: 19 October 2026

YTBot is a free chat bot for YouTube Live. This policy explains what we access, what we store, how we use it and how you can delete it.

YouTube API Services

YTBot uses YouTube API Services. By using YTBot you agree to be bound by the YouTube Terms of Service. Google's handling of your data is described in the Google Privacy Policy.

YTBot's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

What we access when you sign in

You sign in with Google using the read-only youtube.readonly scope. We use it once, at sign-in, to read your YouTube channel ID and channel title. Google access and refresh tokens are not stored after login; they are discarded as soon as your channel is identified.

What we store

• Your channel: YouTube channel ID and channel title.
• Bot configuration: your commands, timers, moderation filter settings (including banned words) and points settings.
• Loyalty points: for viewers who chat in your streams, their YouTube channel ID, display name and point total.
• Clips: clip title, the viewer who clipped it, the video and the timestamp.
• Discord webhook: if you add one, it is stored encrypted (AES-GCM) and never shown again.
• Overlay URL: only a hash of its secret token is stored.
• Session: one strictly necessary cookie keeps you signed in. We use no advertising, analytics or third-party cookies.

Live chat messages are read through the YouTube Data API to answer commands, award points and apply your filters. We do not keep a log of chat messages.

How we use and share data

Data is used only to run the bot features you configure. We do not sell data or use it for advertising. It is shared only:

• with YouTube, to read your live chat and post or moderate messages as the YTBot moderator account;
• with Discord, when you set a webhook: clip titles, names and timestamped links are posted to your channel.

Delete your data

Open the dashboard, go to Account and choose Delete my data. This immediately and permanently deletes your channel record, commands, timers, points, clips, webhook and sessions.

Revoke access

You can revoke YTBot's access to your Google account at any time at myaccount.google.com/permissions. To stop the bot moderating your chat, also remove it as a moderator in YouTube Studio.

Security

All traffic uses HTTPS. Secrets are encrypted at rest, and session and overlay tokens are stored only as hashes.

Changes

If this policy changes, we will update the date above.