Legal
Privacy Policy
Updated 10 September 2026
1. Who we are
This policy explains what data Jar (jarassist.stream) collects and why. Jar is a toolkit for streamers: a support page, widgets, a Discord bot and Jar Assist.
By using Jar you agree to this policy and the terms of service.
2. Data we collect
Account: email, name, a hashed password or Google sign-in.
Donation page: nickname, bio, theme, social links and the Monobank jar you connect.
Streaming: Twitch, Discord, YouTube and TikTok tokens if you connect them. Tokens are encrypted. We do not keep videos from those platforms longer than needed to make a clip.
Jar Assist: an uploaded or imported VOD, transcripts, clips and publish logs for YouTube or TikTok.
Technical data: IP, session cookies, donation page views.
3. Google / YouTube data
When you sign in with Google or connect YouTube, we may access: Google account basic profile (name, email) for authentication; YouTube channel ID and title (youtube.readonly) to show the connected channel; permission to upload a video you choose to publish (youtube.upload).
We use this data only to sign you in and to publish clips as YouTube Shorts at your explicit request. We store OAuth tokens encrypted. We do not sell Google user data, do not use it for advertising, and do not use it to train generalized AI/ML models.
We share data with Google / YouTube only as needed to complete the OAuth and upload actions you initiate. You can disconnect YouTube or delete your account in the dashboard; we then remove stored tokens and related connection data.
4. Why we use it
To show your donation page, alerts, analytics and dashboard.
To import a VOD, make a clip and, after you click publish, post it to TikTok or YouTube Shorts.
To sign you in, protect the account and answer support requests.
5. Who we share with
Donation payments go to Monobank, not through Jar as a bank.
If you connect Twitch, Google / YouTube, TikTok or Discord, those services receive data under their own rules and only within the permissions you grant.
Hosting, email and infrastructure analytics may process technical logs. We do not sell personal data and do not transfer Google user data to third parties for advertising or unrelated purposes.
6. Retention
Account data is kept while the account exists. After you delete it in settings we remove the page, connections and Jar Assist project files as far as technically possible.
A public clip link expires. An exported video stays until you delete it.
OAuth tokens for Google / YouTube are kept only while the connection is active and are removed when you disconnect or delete the account.
7. Your rights
You can view and edit your profile in the dashboard, disconnect Twitch, YouTube, TikTok, Discord and the jar, and delete the account.
Questions about data: use in-app support or the email listed on the site.
8. Cookies
Jar uses only essential cookies needed for the site to work. We do not set third-party advertising or marketing cookies.
jar_session — keeps you signed in while you use the dashboard.
jar-locale — remembers whether you use the Ukrainian or English site.
A short cookie notice may appear so you know about these cookies; dismissing it is stored in your browser (localStorage) and is not used for tracking.
9. Security
We use HTTPS and encrypt OAuth tokens at rest. Access to production systems is limited to operators who need it to run the service.
No method of transmission or storage is perfectly secure; we take reasonable steps to protect confidentiality of your data.
10. Changes
The current version is always on this page. Material changes mean that continued use of Jar is agreement to the new version.
