This translation is provided for information only: only the French version is legally binding. Read the French version
Privacy policy
Last updated: 8 October 2026
UndercoverTW is a Twitch extension and a website for playing the game “Undercover” live. This page describes the data we process, why, and what you can ask of us.
1. Who processes your data
The data controller is Chaherdine SAID EI, publisher of UndercoverTW (SIREN 842 933 889), 6 rue d’Armaillé, 75017 Paris, France, reachable at contact@undercovertw.com. See the legal notice.
2. What we collect
Your Twitch identity
Your Twitch ID and your display name, sent by Twitch when you open the extension or log in to the website. Logging in asks for no additional permission: we never have access to your password or your email address.
In the extension, Twitch only sends us your identity if you agree to share it, which it asks when you join a game. Without sharing, you can watch and play as a spectator: we then create no account and record nothing in your name.
Your games
For each finished game: the players (Twitch ID and username), each player’s word and role, their clues, their vote and the result. This history is used to show your statistics and the channel leaderboard, and to rotate seats among players who sign up often.
We also record your opinions on pairs (thumbs up or down), with your ID, so that the same person votes only once per pair. Votes for the best clue, reactions to clues, Chat Detective votes and debate messages are not kept after the game.
The chat, during a game only
From the player draw until the end of the game, we read the channel chat messages to spot a player who writes their secret word or reveals which player they are, which would ruin the game for the others. Messages are not kept. In case of a sanction, we record its end date and its reason: for a player who identified themselves, the phrase that gave them away; for a revealed word, a generic reason, without the word. Reading stops as soon as the game ends.
Your contributions
If you submit word pairs or packs: their content, and your identity as the author. If you report a pair: your written justification and your identity, so that a real problem can be told apart from an abusive report.
Your purchases
The amount, date and transaction ID of your purchases. Payments in Bits are processed by Twitch, payments in euros by Stripe. We neither see nor store any bank details. A creator who sells packs opens their account directly with Stripe, which carries out the identity check: we do not receive the documents.
3. Why, and on what basis
| Processing | Legal basis |
|---|---|
| Running the game and your account | Performance of the service you request |
| Detecting cheating and moderating content | Legitimate interest: a playable and safe game for everyone |
| Processing purchases and paying creators | Performance of the contract, and accounting obligations |
4. How long
- State of a game in progress: deleted automatically at the latest one hour after the game. The list of registered players not drawn, kept for the next game, follows the same rule.
- Game history and leaderboard: kept as long as your account exists.
- Sanctions: kept for the duration of the sanction, then as moderation history.
- Transactions: kept for the period required by accounting obligations.
5. Who we share it with
No one for commercial purposes. We sell no data and run no targeted advertising. Our service providers only access it to provide their service:
- Render: hosting of the website and the game server (servers in Frankfurt);
- MongoDB Atlas: database (accounts, history, content);
- Upstash: state of games in progress (servers in Frankfurt);
- Stripe: payments in euros and payouts to creators;
- Cloudflare: domain name management and forwarding of emails sent to contact@undercovertw.com;
- Twitch: login, extension and payments in Bits.
Some of these companies are based in the United States. Transfers of data outside the European Union rely on the safeguards provided by the GDPR: the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.
While in the waiting room, the list of registered players is visible to all viewers. Once the game starts, players appear under a randomly drawn number (“Player 3”), unrelated to the order of registration. Each player’s username is only revealed at the end, when the roles are revealed.
6. Your rights
You can ask to access your data, to correct it, to have it deleted, or object to its processing. Write to us at the address below; we reply within one month. You may also contact the CNIL, the French data protection authority, if our answer does not satisfy you.
Account deletion is requested by email. It erases your profile, your statistics and your unpublished contributions. In the history of games already played, which also belongs to the other players, your username is replaced by an anonymous mention.
7. Cookies and local storage
The website sets two cookies: utw_session, which keeps you logged in for seven days, and utw-lang, which remembers the language chosen with the flag for one year, so the website opens in that language. There are no advertising or audience measurement cookies. The website and the extension also remember your language choice in your browser (local storage).
8. Minors
The service follows Twitch’s age requirements. We do not knowingly collect data about a person who would not be old enough to use Twitch.
9. Contact
For any question or request about your data: contact@undercovertw.com