HATMASTER.TV
Privacy
Effective July 10, 2026
Your login is one cookie, and it lives in your browser, not on our servers. We keep no passwords, no tokens, no card numbers, and run no trackers. That is most of the policy. The rest is detail.
The one cookie
Log in with Twitch or YouTube and we write one signed cookie to your browser. Inside it: your public id, your name, and your avatar. That cookie is your entire login. There is no copy on our side. Log out and it is gone.
What happens to tokens
When you log in, Twitch or Google hands us a token. We use it once, to ask who you are, then throw it away. It is never saved anywhere.
The Twitch login asks for zero permissions on your account. The YouTube login asks for read-only access and reads exactly one thing: your own channel's id, name, and picture. Nothing else is ever read.
Google asks apps to say this plainly, and for us it is easy: Hatmaster.tv's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Linking your accounts
Link your YouTube channel to your Twitch account and we store one line: this channel belongs to that username. Your YouTube shares move into your Twitch portfolio. That line is the entire record.
The game remembers the game
The Hatmas Market is a game, and a market with amnesia would be a bad one. Your shares, trades, dividends, and god nominations are saved under your Twitch username or YouTube channel id. Leaderboards are public. If you would rather not appear on them, flip the visibility toggle on your portfolio page. Hat balances live in the streaming tooling, under your Twitch name.
Money
The $5 priority god request happens on Stripe's checkout page, not ours. Your card number goes to Stripe and stays at Stripe. We keep what a refund needs: the god you picked, the name you typed, your message, the amount, and Stripe's receipt id.
Every cookie, listed
hatmas_session: your login. Lasts 30 days. Logging out deletes it.hatmas_oauth_stateandhatmas_oauth_link: security cookies for the login round trip. They live for ten minutes and are usually gone before you finish reading this page.
Want out?
Whisper Hatmaster on Twitch and your data gets deleted: portfolio, transactions, account link, payment records, all of it. You can also revoke this site's YouTube access any time at myaccount.google.com/permissions, though there is nothing standing to revoke.
If this changes
The new version gets posted here with a new date at the top. No silent edits.