Privacy Policy

The short version. Maxxtopia builds free, local-first tools. We collect as little data as possible, we don't sell it, we don't run third-party ad trackers, and most of our software runs entirely on your own device.

Who we are

"Maxxtopia" ("we", "us") operates the website maxxtopia.com and a suite of apps, browser extensions, and games, including the Sprite Cannon Twitch Extension. Contact: [email protected].

Sprite Cannon (Twitch Extension)

Sprite Cannon is a play-while-you-watch game that runs as an overlay on a streamer's channel. It collects only what's needed to run a per-channel leaderboard:

• A display name you choose when you submit a score (you type it; it does not have to be your real name).
• Your best distance score for that play session.
• The Twitch channel ID of the stream you're playing on, so your score posts to that streamer's leaderboard.

This data is stored on Cloudflare infrastructure and shown publicly on the in-game leaderboard by design. We do not request or store your Twitch identity (the extension does not use Twitch Identity Linking), we do not read Twitch chat, and we do not collect email, payment, or location data. There are no ads and no third-party advertising or analytics trackers inside the extension.

Desktop apps

Our desktop apps are local-first: your media, settings, and accounts stay on your device. Where an app offers optional usage telemetry, it is off by default and anonymous when enabled.

Streammaxxing and YouTube data

Streammaxxing offers an optional Connect YouTube feature for its unified chat overlay. The integration requests the read-only youtube.readonly permission only after you choose to connect your Google account.

When connected, Streammaxxing accesses only the YouTube data needed to find and display your live chat:

• Your YouTube channel ID and channel name, so the app can identify the channel you connected.
• Your active live-broadcast and live-chat identifiers, so the app can detect when you go live and connect automatically.
• Live-chat messages and their public author details, so messages can appear in the local Streammaxxing chat and OBS overlay.

Streammaxxing does not request your Google password or email address, and it cannot upload, edit, or delete videos; manage playlists or subscriptions; or post as you.

Security and protection of Google user data

We use encryption and other technical safeguards to protect the Google user data handled by Streammaxxing. Google OAuth and YouTube API requests use HTTPS. Access tokens are held in memory while the app uses them. Before the refresh token, connected channel ID, and channel name are written to disk, Streammaxxing encrypts them with the Windows Data Protection API (DPAPI), scoped to the signed-in Windows user. The encrypted data is stored only in Streammaxxing's local Windows app-data folder, and Google OAuth tokens are not sent to Maxxtopia servers.

Streammaxxing validates the OAuth callback state before accepting a Google authorization. Live-chat messages are processed locally and are not retained by Maxxtopia or sent to Maxxtopia servers. If you add the chat overlay to OBS, you intentionally choose to display those messages on your broadcast. The Forget Google link revokes the saved authorization and deletes the encrypted local credential file.

We do not sell, share, advertise against, profile from, or use Google user data to train generalized AI or machine-learning models. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

You can stop YouTube access in Streammaxxing with Forget Google link, which revokes the saved Google authorization and removes the local encrypted token files. You can also revoke access from your Google Account connections. Uninstalling Streammaxxing stops access; use Forget Google link or Google Account connections first if you also want the saved authorization revoked.

Google and YouTube process data under their own Privacy Policy and YouTube Terms of Service. Questions about Streammaxxing's YouTube integration: [email protected].

Website

maxxtopia.com is a static site hosted on Cloudflare Pages. Standard server logs (such as IP address and request metadata) may be processed by our hosting provider to deliver and secure the site. We do not place advertising cookies.

How we use data

Only to provide the feature you're using (e.g., showing leaderboard scores) and to keep our services secure and working. We do not sell or rent your data to anyone.

Retention & your choices

Leaderboard entries persist so scores can be displayed and ranked. To have a leaderboard entry removed, email [email protected] with the channel and the name you used and we'll remove it. You can stop all data collection at any time by not submitting a score / uninstalling the extension or app.

Children

Our products are not directed to children under 13, and we do not knowingly collect personal information from them.

Third parties

When you use the extension on Twitch, Twitch's own Privacy Notice also applies to your use of Twitch. Our infrastructure runs on Cloudflare.

Changes

We may update this policy; material changes will be reflected by the "Last updated" date above.

Questions? [email protected].