Extension Privacy Policy

This Extension Privacy Policy applies to the Rock Paper Scissors Championship League! Twitch Extension (the "Extension"), engineered and operated by Canon Evnt, LLC ("Canon Evnt", "we", "us", or "our"). This document describes how our Extension Backend Service (EBS) and frontend views collect, process, and protect user data when broadcasters and viewers interact with the Extension on Twitch.

1. Information We Collect & Process

The Extension operates within the official Twitch Extension Helper sandbox and securely interacts with our Google Cloud Platform backend. We process the following categories of information:

A. Twitch Authentication & User Identifiers

• Opaque User IDs: When an unlinked viewer views the Extension in Twitch Panel 1, Twitch provides a privacy-preserving opaque identifier (e.g., U12345678) to maintain anonymous match state without revealing your real personal identity.
• Explicit Twitch User IDs: If a viewer explicitly grants identity permissions to the Extension, Twitch transmits your numerical Twitch User ID to synchronize personal match statistics and leaderboard rankings.
• Broadcaster Channel ID: The numerical Twitch Channel ID where the Extension is installed, used to associate configuration settings, move queues, and channel-specific leaderboards.

B. Twitch Helix Display Names & Public Leaderboard Visibility

To celebrate match moments and populate competitive rankings, our EBS calls the official Twitch Extension Helix API using Twitch Extension Helper JWT tokens (Authorization: Extension <token>) to resolve public broadcaster and viewer display names. When you participate in interactive Bits challenges within the Extension, your public Twitch Display Name, earned digital Prestige Points, rank, and aggregated match statistics are published on in-extension leaderboards, on-stream OBS overlays, and the official web companion leaderboard at canonevnt.io.

Internal authentication tokens, numerical Twitch User IDs, and transaction records are maintained confidentially and are never published to public web endpoints.

C. Gameplay Stats & Seasonal Telemetry

• Match Records: Moves chosen (Rock, Paper, or Scissors), match outcome (win, loss, or draw), timestamp, and tier selected.
• Prestige Points: Non-monetary digital Prestige Points awarded at a guaranteed 1:1 ratio per Bit cheered in the selected Cheer Tier upon challenge completion (win, loss, or draw).
• 7-Tier Mastery Stats: Breakdown of games played, wins, and win rates across the 7 Tier levels (Scrapper to Overlord).
• Dual-Identity Stats: Current active season metrics (seasonStats) and lifetime aggregate totals (lifetimeStats).

D. Transaction Receipts & Audit Logs

When a viewer uses Bits to initiate a challenge via window.Twitch.ext.bits.useBits, Twitch sends a cryptographic transaction receipt to our EBS. We store the transaction ID, channel ID, user ID, Bits tier amount, and timestamp in an immutable audit ledger solely to prevent duplicate charges and verify transaction integrity.

2. How We Use Your Data

We process your data exclusively for operational functionality:

• To execute atomic Rock, Paper, Scissors matchmaking between viewers and pre-queued broadcaster moves.
• To broadcast real-time clash countdowns and result banners to active Viewer Panels and OBS Stream Overlays via Twitch PubSub and Server-Sent Events (SSE).
• To compile and display channel-level, global Season 1, and web companion leaderboards.
• To enforce security rules, prevent anti-self-play, and verify incoming Twitch EventSub webhooks (HMAC-SHA256).

3. Third-Party Sharing & Zero Brokerage

We never sell, rent, lease, or monetize user data. We do not share personal identifiers or gameplay stats with data brokers or advertising networks. Data is shared only with:

• Twitch Interactive, Inc.: Data communicated via official Twitch Extension APIs, PubSub, and Helix in accordance with the Twitch Developer Services Agreement.
• Google Cloud Platform (GCP): Our cloud hosting infrastructure provider (Cloud Firestore and Cloud Functions v2) operating under enterprise-grade security controls in secure US regions.

4. Data Storage, Security & Encryption

All data processed by the Extension is secured through modern cryptographic standards:

• HS256 JWT Verification: All incoming requests from client views must present a valid, unexpired Twitch Extension JWT signed with the extension's base64 secret.
• Encryption in Transit & at Rest: All communications between the Extension Helper, EBS, and Firestore are encrypted using TLS 1.3 in transit and AES-256 at rest.
• Write-Gated Security Rules: Cloud Firestore security rules strictly block direct client write or delete permissions, routing all mutations exclusively through authenticated EBS microservices.

5. Data Retention & User Deletion Rights

We retain seasonal gameplay statistics for the duration of the active competitive season. When a season resets, seasonal rankings archive, while permanent lifetime totals remain on your user profile.

Exercising Your Right to Deletion ("Right to Be Forgotten")

Viewers and broadcasters have the absolute right to request the complete deletion of their Twitch ID, display name, match history, and leaderboard records from our Cloud Firestore databases. To request data erasure, simply send an email with your Twitch username or Channel ID to:

📧 RPSChampionship@canonevnt.io (Subject: Twitch Extension Data Deletion Request)

We will verify the request and permanently delete your user document from all Firestore collections within 30 days.

6. Changes to This Extension Privacy Policy

We may update this Privacy Policy periodically to reflect technological improvements or regulatory updates. Any changes will be posted immediately to this URL with an updated effective date.

7. Contact Information

If you have any questions or data privacy inquiries regarding the Extension, please contact our privacy compliance team:

• Email: RPSChampionship@canonevnt.io
• Entity: Canon Evnt, LLC
• Location: Florida, USA
• Website: https://canonevnt.io