Privacy Policy
Last updated: October 25, 2026
1. Who we are
Ouvert is a song request service for rhythm game streamers. It's run by JDL Enterprises Limited ("we", "us", "our"), a company registered in England and Wales with company number 10946659. Ouvert includes our website at https://ouvert.dev, the Ouvert chat bot, stream overlays, the Ouvert mobile app, the Ouvert Stream Deck plugin and the Ouvert API (together, the "Services").
We are the controller of the personal information described in this policy. That means we decide how and why it's used, and we're responsible for looking after it under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We're registered with the Information Commissioner's Office (ICO) under registration number ZB972263.
This policy covers two groups of people:
- People who sign in to Ouvert: usually streamers and their moderators, and viewers who request songs on the website
- Viewers who request songs in a streamer's chat: you don't need an Ouvert account for this, but we still receive some information about you, explained in section 3.2
2. The short version
- You sign in with Twitch or YouTube. We never ask for or store your email address or a password.
- When you request a song, the song and your username on that platform go into the streamer's queue. Anyone can see the queue on the streamer's song list and on their stream.
- We only use your information to run Ouvert. We don't sell it, we don't use it for advertising, and we don't use analytics or advertising cookies.
- You can ask to see, correct or delete your information at any time.
3. Information we collect
3.1 When you sign in
You sign in to Ouvert with a Twitch or YouTube account. When you do, that platform shares the following with us, and we store it:
- Your platform account details: your account ID, username, display name and profile picture
- Access tokens: the keys the platform gives us so Ouvert can do the things you've allowed, along with the permissions you granted and when they expire. We encrypt these tokens before storing them. Section 8 lists exactly what each platform lets us do.
Our login system needs an email address and password on file, so behind the scenes your account has a randomly generated placeholder email address and password. They aren't linked to you, nobody can sign in with them, and we never send anything to them.
If you're a streamer, we also store what you set up in Ouvert: your song lists for each game, your queue and request settings, bot commands and replies, overlay settings, priority rules, the moderators you add and your API keys.
3.2 When you request a song in a streamer's chat
When a streamer connects the Ouvert bot to their Twitch or YouTube chat, the bot reads the messages in that chat to spot Ouvert commands, such as song requests. When you use a command, we receive the following from the platform and store it:
- your username or display name on that platform, and your platform user ID
- which platform you used
- the song you requested, when you requested it, and what happened to it (for example played, held or removed)
We don't keep chat messages that aren't Ouvert commands. Our server logs can briefly contain messages the bot has read, which we only use to fix problems (see section 7 for how long we keep logs).
3.3 Information streamers and platforms give us about you
- Moderators: if a streamer adds you as a moderator, we store the platform, username, user ID and display name they add.
- Twitch channel events: if a streamer turns on priority requests for Twitch events, Twitch tells us when someone raids, subscribes, resubscribes, gifts subscriptions, cheers Bits or redeems a channel points reward in that channel. We receive that viewer's username and user ID and details of the event (such as the subscription tier, the number of Bits or the number of raiders), and use them to give the viewer a priority request. We ignore anonymous gifts and cheers.
3.4 Technical information
- IP addresses: we record the IP address used when your account is created and when a sign-in attempt fails. We also use IP addresses to keep Ouvert secure, block abuse and limit how often our API and live updates can be used.
- Server logs: the date and time of each request, the page or API address asked for, your IP address, your browser and device type, and any errors.
- Overlay activity: when a streamer's overlays were last loaded, so we can show whether they're set up.
We don't use analytics tools, advertising networks or tracking pixels.
3.5 The mobile app and Stream Deck plugin
The Ouvert mobile app and Stream Deck plugin connect to your account with your Ouvert API keys. The keys are kept on your device (in your phone's secure storage, or in Stream Deck's settings) and sent to us with each request. Neither collects analytics, your location, your contacts or any other information from your device.
3.6 What we don't collect
We don't collect your email address, passwords, payment details or real name. We don't knowingly collect any special category information, such as information about your health, religion or political views.
4. How we use your information
UK data protection law says we need a legal reason (a "lawful basis") for each way we use personal information. These are ours:
| What we do | Information used | Lawful basis |
|---|---|---|
| Create your account and sign you in | Platform account details, access tokens | Contract: we need it to provide the Services you've asked for |
| Run a streamer's song list, queue, overlays and bot | Streamer settings and song lists, song requests, requesters' usernames and user IDs | Contract (for the streamer). Legitimate interests (for viewers who request in chat): the streamer has asked us to take requests from their chat, and viewers choose to send them. |
| Give priority requests for Twitch events and moderator commands | Twitch event details, usernames and user IDs | Legitimate interests: running the priority rules the streamer has set up |
| Let moderators help run a channel | Moderators' platform account details | Legitimate interests: letting streamers share the work of running their queue |
| Build yearly Recaps, for each channel and for Ouvert as a whole | Request history, requesters' usernames, channel display names | Legitimate interests: giving streamers and the community a look back at their year |
| Keep Ouvert secure, prevent abuse and fix problems | IP addresses, server logs, API key usage | Legitimate interests: keeping the Services safe and working |
| Answer your questions and support requests | Whatever you send us | Legitimate interests: helping you |
| Meet our legal obligations | Anything the law requires us to keep or disclose | Legal obligation |
Where we rely on legitimate interests, we've balanced our interests against your privacy, and you can object at any time (see section 11).
We don't make decisions about you based only on automated processing that have legal or similarly significant effects. Priority rules run automatically, but streamers set them up, and all they do is change the order of a song queue.
5. Who can see your information
- Everyone: a streamer's song list page and stream overlays show the songs in their queue and the username of whoever requested each one. A streamer's public page shows their display name, profile picture and song list.
- The streamer and their moderators: they can see the channel's full request history, including who requested what and when. The streamer's Recap can list the viewers who requested the most and on the most days, and streamers can save and share a summary card of their Recap.
- Everyone, in the Ouvert-wide Recap: statistics across all of Ouvert, which can name channels (for example, the channels with the biggest song libraries).
- Everyone in the chat: when the bot replies to a command, its reply is posted publicly in that chat and can include your username.
6. Service providers and other third parties
We run Ouvert on our own servers and network in the United Kingdom, so no outside hosting company handles your information. We only share personal information with:
- BunnyCDN: our content delivery network, run by BunnyWay d.o.o. in Slovenia. It delivers our website's files from servers around the world so pages load quickly wherever you are, which means it handles your IP address and the files your browser asks for.
- Code, font and icon libraries: some pages and overlays load files from cdnjs (Cloudflare), jsDelivr, unpkg, BootstrapCDN, the jQuery CDN, the DataTables CDN, Font Awesome and Google Fonts. Your browser fetches these files directly, so these services receive your IP address and browser details. Google Fonts is only used by overlays set to use one of its fonts.
- Twitch and Google (YouTube): to sign you in, read and post in chat, and receive channel events. Each platform's own privacy policy covers what it does with your information (see section 8).
- Authorities: if the law, a court or a regulator requires it, or if it's needed to protect the rights, property or safety of us, our users or others.
- A new owner: if JDL Enterprises Limited is involved in a merger, acquisition or sale of assets, your information may be transferred as part of it. We'll tell you before your information becomes subject to a different privacy policy.
We don't sell your personal information, and we don't share it for advertising.
7. How long we keep it
- Your account and settings, including the IP address your account was created from: until you delete your account. We don't delete accounts for being inactive.
- Access tokens: until you unlink that platform account or delete your Ouvert account
- Song requests: for as long as the streamer's account exists, because they power the streamer's request history and Recap
- Server logs, bot logs and failed sign-in records: 30 days
- Messages you email us: for as long as we need them to help you, and then for up to 2 years
If you message us in our Discord server, your messages are stored by Discord and stay there until you or we delete them. The Discord Privacy Policy explains how Discord handles them.
We may keep information for longer if the law requires it or we need it to resolve a dispute.
8. Platform details
8.1 Twitch
When you sign in with Twitch, you allow Ouvert to:
- see who subscribes to your channel (
channel:read:subscriptions) - see Bits cheered in your channel (
bits:read) - see and manage your channel points rewards and redemptions (
channel:manage:redemptions)
We only use these for priority requests and other features you turn on. If you connect the bot, it joins your Twitch chat to read and reply to commands. You can remove Ouvert's access at any time by unlinking Twitch on the Connected accounts page of your dashboard, or in your Twitch settings under Connections. The Twitch Privacy Notice explains how Twitch handles your information.
8.2 YouTube
Ouvert uses YouTube API Services. When you sign in with YouTube, you allow Ouvert to view your YouTube account (youtube.readonly). We use this to identify your channel, find out when you go live and connect the bot to your live chat. We also sign up for YouTube's notifications about your channel so we know when a new live stream starts. The bot reads your live chat to spot commands and posts its replies there.
We don't use your YouTube information for anything else, and we only share it as described in this policy. The Google Privacy Policy explains how Google handles your information.
You can remove Ouvert's access at any time by unlinking YouTube on the Connected accounts page of your dashboard. This deletes the YouTube account details and tokens we hold for you and asks Google to cancel our access. You can also remove our access from your Google account's security settings. If you do it that way, contact us and we'll delete the YouTube details we still hold.
9. Cookies and similar technologies
We only use cookies and browser storage that Ouvert needs to work. We don't use analytics, advertising or tracking cookies.
| Name | What it's for | How long it lasts |
|---|---|---|
*_ci_session | Keeps you signed in while you use the site | 2 hours |
remember_code | Keeps you signed in between visits | 24 hours |
cc_cookie | Remembers that you've seen our cookie notice | 6 months |
darkModeEnabled (browser storage) | Remembers whether you've turned on dark mode in the dashboard | Until you clear your browser's storage |
You can block or delete cookies in your browser settings, but you won't be able to stay signed in without them.
10. Keeping your information safe
We protect your information with measures including encrypted connections (HTTPS), encryption of stored platform access tokens, access controls on our servers and limits on how often our API can be used. No system is completely secure, so we can't guarantee that your information will never be accessed without permission. If a data breach puts your rights at risk, we'll tell you and the ICO as the law requires.
11. Your rights
Under UK data protection law, you have the right to:
- Access: get a copy of the personal information we hold about you
- Correction: have inaccurate or incomplete information corrected
- Deletion: have your information deleted
- Restriction: ask us to limit how we use your information
- Objection: object to us using your information where we rely on legitimate interests
- Portability: get your information in a structured, machine-readable format
To use any of these rights, email us at contact@jdl-enterprises.co.uk and tell us which platform and username your request is about. We may ask you to prove the account is yours, for example by sending us a message from it. It's free, and we'll reply within one month.
If you requested a song in a streamer's chat, you can also ask the streamer or their moderators to remove your request from their queue.
If you're unhappy with how we've handled your information, please tell us first so we can try to put it right. You can also complain to the ICO, the UK's data protection regulator, at ico.org.uk/make-a-complaint or by calling 0303 123 1113. If you live in the European Economic Area, you can complain to the data protection authority in your country.
12. Deleting your account
You can unlink a platform account at any time from the Connected accounts page of your dashboard. This deletes the details and tokens we hold for that account and asks the platform to cancel Ouvert's access. You can't unlink the only account you sign in with: link another one first, or delete your Ouvert account instead.
To delete your whole Ouvert account, email contact@jdl-enterprises.co.uk with the subject "Delete my Ouvert account" and the username of the account you sign in with. [PLACEHOLDER: if you add a "Delete account" button to the dashboard, describe it here instead.] Once we've confirmed the account is yours, we'll delete it within 30 days. This deletes your linked platform accounts and tokens, song lists, settings, overlay settings, moderators, API keys and Recaps. [PLACEHOLDER: what happens to songs you requested in other streamers' channels. For example, "Requests you made in other channels stay in those streamers' history with your username removed."]
If you've requested songs without an Ouvert account and want them removed, email us with the platform and username you used.
13. Children
Ouvert isn't meant for children under 13, and we don't knowingly collect information from them. The platforms Ouvert works with also require their users to be at least 13. If you're under 18, please check with a parent or guardian before using Ouvert. If you think a child under 13 has given us information, contact us and we'll delete it.
14. Where your information is processed
Our servers are in the United Kingdom. Our content delivery network, BunnyCDN, delivers files from servers around the world, and some of the other services listed in section 6 may handle information in other countries, including the United States. When personal information leaves the UK, we make sure it's protected, either by only sending it to countries the UK government has approved as having adequate data protection, or by using the safeguards UK law provides, such as the UK International Data Transfer Agreement.
15. If you live outside the UK
If you live in the European Economic Area, you have the same rights under the EU GDPR as those described in section 11. If you live in California or another US state with a privacy law, you can make the same requests to us, and we won't treat you differently for doing so. We don't sell or share personal information as those laws define it.
16. Changes to this policy
We may update this policy from time to time. If we make a significant change, we'll let you know on the website or in your dashboard before it takes effect. We'll always update the "Last updated" date at the top of this page.
17. Contact us
If you have any questions about this policy or your information, please contact us:
JDL Enterprises Limited
62 West Hill
Rotherham, England S61 2EY
United Kingdom
Email: contact@jdl-enterprises.co.uk
Company number: 10946659
ICO registration number: ZB972263