Privacy policy
Local-first by design
Tempest Streaming Studio keeps its control service, Browser Sources, alert media, configurations, playback history, and backups on the user's computer unless the user chooses to export or share a file. Studio does not include analytics, advertising tracking, or automatic crash-report uploads.
When Studio connects to the internet
Network requests occur when a user connects Twitch or Discord, pairs a public Twitch Extension, uses a Tempest Streaming interaction, checks for software updates, or enables an optional provider. Optional providers can include GIPHY, the National Weather Service, AzuraCast, 7TV, BetterTTV, and FrankerFaceZ. Those services receive only the information needed for the feature the user selected.
Tempest Signal and the Twitch Extensions
The free Tempest Streaming Studio Extension and the separate Bits-enabled Extension named Tempest Streaming connect through Tempest Signal. Pairing either Extension is optional. Tempest Signal validates the broadcaster's Twitch authorization, then discards the access token used for that validation. The service stores the Twitch channel ID and login, a random installation ID, a one-way hash of the relay credential, timestamps, a viewer-safe interaction catalog, and the channel's selected panel appearance. The panel appearance contains display text, colors, and layout choices—not local media, file paths, OAuth tokens, or application secrets.
Twitch-signed viewer tokens, opaque viewer identifiers, and request identifiers are processed to authenticate, rate-limit, and deduplicate interactions. They are held only for the active request or replay window and are not written to the installation database. The free Studio Extension does not contain a Bits flow.
Tempest Streaming and Bits
Tempest Streaming lets an eligible, signed-in Twitch viewer use Bits for a specific Extension-defined interaction. Twitch presents and confirms the Bits exchange. Tempest Mainframe does not collect payment-card, bank-account, billing-address, or Bits-balance information and cannot access the viewer's Twitch password.
After confirmation, Tempest Signal receives a Twitch-signed transaction receipt containing the viewer's numeric Twitch user ID, product SKU, Bits amount, transaction ID, and timestamp. Tempest Signal uses those fields to verify the receipt, prevent duplicate delivery, confirm that the product maps to an interaction published by the channel's connected Studio, and route that interaction. Receipt data is retained only in bounded service memory for the active request and replay window and is not written to the installation database. Twitch maintains the viewer's Bits balance and Twitch-side transaction history under Twitch's policies.
Service providers and disclosures
Tempest Mainframe does not sell personal information or use Extension activity for targeted advertising. Twitch processes identity and Bits activity needed to operate its platform. Cloudflare, Railway, and other infrastructure providers may process network information such as IP addresses, request headers, and security logs as needed to deliver and protect the website and Tempest Signal. Information may also be disclosed when required by law or reasonably necessary to investigate fraud, abuse, or a threat to the service or its users.
Discord authorization and guest profiles
Tempest Signal forwards one-time Discord authorization codes and refresh requests to Discord's OAuth service because the desktop application must not contain the Discord client secret. It returns the resulting token to Studio and does not retain that token. Studio protects Discord tokens with Windows encryption.
The local Discord guest library can store user IDs, usernames, display names, Discord avatar URLs, last-seen voice-channel details, and streamer-assigned image and layout settings. Discord messages are not read or stored. Saved guest profiles remain local and are included only in a backup the streamer creates.
Control and deletion
Disconnecting an account removes its locally protected authorization. Forgetting a Discord guest removes that saved local profile. Revoking a public Twitch Extension installation deletes its hosted installation record, appearance, and catalog. Viewers can stop using either Extension at any time; Twitch controls Twitch-side identity and transaction records. Uninstalling Studio does not automatically remove the local data directory, allowing a user to preserve their settings for a later installation. Privacy and deletion questions can be submitted through the contact methods at the end of this page.
Website and external links
The Tempest Mainframe website does not operate a user account system. Links to Twitch, Discord, GitHub, radio hosting, and other third-party services are governed by those services' own privacy practices.
