Privacy Policy

Saucefox provides creators with private resource pages (“vaults”) that can unlock after a viewer satisfies a Twitch community rule or submits an email address. This policy explains the data we process, why we process it and the choices available to you. Contact: support@saucefox.com.

1. Data creators provide

We process account and authentication data, connected Twitch channel details, vault content, uploaded files, configuration, support messages and billing records. Payments are processed by Stripe; Saucefox does not store full card details.

2. Twitch creator data

When a creator connects Twitch, we receive the Twitch account identifier, login, display name, profile image and granted scopes needed to configure gates. Creator OAuth tokens are encrypted at rest and used only for requested Saucefox features. Creators can disconnect Twitch from the Connections page.

3. Twitch viewer verification

For follower and subscriber gates, Saucefox receives the minimum Twitch identifiers and entitlement facts needed to evaluate the selected rule. We do not request a viewer's Twitch email. The viewer identifier is converted into a salted, non-reversible hash before persistence. Viewer access tokens are used only during verification and are not stored.

4. Channel Points

When enabled by an eligible creator, Twitch EventSub sends reward-redemption events. We process the redemption and pseudonymous viewer reference needed to issue the relevant entitlement and prevent duplicate fulfillment. Saucefox cannot spend Channel Points for a viewer.

5. Email gates

If a viewer submits an email to a creator's enabled email gate, we store the address, consent timestamp, vault and creator relationship, and confirmation status. Transactional and double-opt-in email may be delivered through Resend. Creators may use exported leads only in accordance with the consent shown to viewers and applicable law.

6. Files, analytics and technical data

Files are stored privately in Cloudflare R2 and delivered through short-lived signed links. We record first-party events such as vault views, verification attempts, outcomes and downloads. Public vault pages use no third-party analytics trackers. We do not sell personal data.

7. Retention and deletion

We retain account, vault and billing data while an account is active and as required for security, tax or legal obligations. Creators can request account and data deletion. Viewers can request deletion of email-gate data. Pseudonymous entitlements expire according to their configured validity. Backup removal may take a limited additional period.

8. Service providers and transfers

We use providers including Twitch, Supabase, Vercel, Cloudflare, Stripe and Resend to operate Saucefox. They process data under their own terms and privacy obligations. Data may be processed outside your country with applicable safeguards.

9. Security and your rights

We use access controls, encryption, private object storage, expiring download links and audit records. No system is perfectly secure. Depending on your location, you may request access, correction, export, restriction or deletion by contacting support@saucefox.com.

10. Changes

We will update this page when material practices change and show the effective date above.