Privacy policy.

In short

• No ads, no trackers, and your information is never sold.
• This website sets no cookies. The app uses one cookie, to keep you logged in.
• Donation messages, donors' names and the audio are deleted within 24 hours. Only the amount is kept after that, with nothing to say who sent it.
• Login and donation platform tokens are stored encrypted, and never shown again.
• Voices are only used with the speaker's consent, and can be taken down.

Who this covers

CopyCat is run by [the operator's legal name and address], which is responsible for the information described here. This policy covers:

• visitors to this website
• people with a CopyCat account: streamers and their admins and moderators
• donors whose messages reach CopyCat through a streamer's donation platform
• people whose voices are on CopyCat, and their owners
• people who send a takedown report

This website

• This website is a set of plain pages. It sets no cookies and runs no analytics or trackers.
• Cloudflare hosts it. Like any web host, Cloudflare sees your IP address and browser details when you load a page.
• The fonts come from Google Fonts, so your browser asks Google's servers for them, and Google sees your IP address.
• The takedown form can use Cloudflare Turnstile, a spam check run by Cloudflare.

Your account

From your Kick login

Your Kick user ID, username, display name and profile picture link, and your email address if Kick shares it. The tokens Kick gives CopyCat are stored encrypted.

Staying logged in

One cookie, cc_session, for up to 30 days or until you log out. CopyCat keeps only a scrambled (hashed) copy of it, with your browser's description and when it was last used.

Your channels and team

Your channels, roles, invitations, settings and word filter lists.

The activity log

Who did what on a channel and when: dock actions, team and settings changes, and logins, including refused ones. A channel's owner and admins can see it. Kept for 90 days.

Usage

Per channel and day: how many characters were read and how many seconds of audio were made. No message text.

This is used to log you in, run your channel, show your team who did what, and plan for future pricing. Nothing else.

Donation platform connections

When a channel's owner connects Streamlabs, StreamElements or Kick, CopyCat stores what it needs to receive that channel's donations: a token for Streamlabs and StreamElements, and the channel's ID for Kick. Tokens are stored encrypted, never shown again, and deleted when the connection is removed. They're used only to receive donations.

Donations

The streamer's donation platform sends CopyCat each donation: the donor's name, the amount and currency, the message, and the platform's ID for it. CopyCat uses them to read the message aloud in the chosen voice, show the card on the overlay, and list it in the streamer's dock.

• The message, the text that was spoken and the audio clip are deleted within 24 hours.
• The donor's name and the platform's ID for the donation are deleted at the same time. After that CopyCat keeps only the amount and currency, with the channel and the date, so streamers can see their totals. Nothing in it says who the donor was.
• To make the audio, the message text is sent to the service that runs the voice engine (see who else handles it).

Donors don't have a CopyCat account. Questions about a donation can go to the streamer, or to CopyCat.

Voices

For each voice, CopyCat stores a short recording of the speaker and its transcript, who owns the voice, its sharing setting, which channels may use it, and for voices open to everyone, a record that the speaker's consent was given.

• Only voices of people aged 18 or older are accepted. A voice found to belong to someone under 18 is taken down everywhere.
• The recording is used only to make audio in that voice for the channels allowed to use it.
• CopyCat's admins can see and listen to every voice, so they can handle takedown reports.
• A taken-down voice stops working everywhere at once.

Takedown reports

A takedown report holds your name, email address and what you wrote. CopyCat also keeps a scrambled (hashed) form of your IP address, to allow at most 5 reports an hour from one connection; the address itself isn't stored.

Reports are read only by CopyCat's admins and used only to handle the report and reply to you. They're kept for 12 months after the report is closed, in case the same voice comes back, then deleted.

Who else handles it

CopyCat never sells your information or shows ads. These services handle some of it to make CopyCat work:

Cloudflare

Hosts this website, carries traffic to the app, and runs the spam check on the takedown form.

Google Fonts

Supplies the website's fonts.

Kick, Streamlabs and StreamElements

Where logins and donations come from. Their own privacy policies apply to what you do on them.

The app's server

[hosting provider and country]

The voice engine

Receives the message text and the voice recording to make each clip. [provider, and whether it keeps anything]

Keeping it safe

• Login and donation platform tokens are encrypted with a key kept outside the database.
• The login cookie can't be read by scripts on the page and is only sent over HTTPS.
• Access to the data is limited to CopyCat's admins.

Your choices

• Disconnect a donation platform from the dashboard at any time. Its token is deleted.
• Log out of any device. That device's session ends.
• A voice's owner can take it away from any channel at any time.
• Email CopyCat to ask for a copy of your information, to correct it, or to have your account deleted.
• Depending on where you live you may have further rights: [for a lawyer to add].

CopyCat isn't meant for children. You must be at least 13 to have an account, or older if that's the minimum age for an online account where you live. CopyCat doesn't knowingly collect information from children under 13; if it learns it has, it deletes it.

Changes

This policy will change as CopyCat grows. The date at the top shows the latest version, and account holders will be told about important changes before they take effect.

Contact

Questions about privacy: contact@copycat.expert.

Help using CopyCat: help@copycat.expert.

Reporting a voice: the takedown page.