Embr Privacy Policy

Last updated: 30 October 2026

Embr is an independent client for watching Twitch streams and chat on iPhone and iPad. It has no advertising and no tracking, and it keeps no analytics about what you watch or say. Your settings, watch history and block lists stay on your device. What reaches Midgar's servers is an anonymous Midgar ID and, if you leave a tip, the purchase record. What reaches Twitch and a few emote and chat-history services is what a Twitch client has to send them to work.

In short

• Your settings, favorites, watch history, muted words and blocked users are stored on your device. We never receive them.
• The app keeps an anonymous Midgar ID, a random identifier with no name, email address or other detail about you, in your iCloud Keychain.
• When you leave a tip, the purchase record from Apple is sent to Midgar's own server, linked to that Midgar ID. Apple's notifications about it are also passed on to RevenueCat.
• The app sends anonymous counts with no identifier: opening the More Apps screen in Settings (opened, shown, tapped), and how many people use the app each day, week and month.
• Nothing is used for advertising or tracking, nothing is sold, and no data is given to third parties for their own use.

Who we are

Embr is published by Midgar Oy, a company in Finland. For the information described under The anonymous Midgar ID, Tips and More Apps below, Midgar Oy is the controller. You can reach us at support@midgarcorp.cc.

What stays on your device

Your settings, favorite channels, watch history, recent channels, muted keywords and blocked users are stored in the app's private storage on your device. A diagnostic log is written there too, recording errors, the app version and the addresses and timings of the app's own network requests, never your Twitch token. It leaves your device only if you choose Share Diagnostic Logs in Settings. If you sign in with Twitch, your Twitch access and refresh tokens are stored in the device Keychain. Logging out removes them. Deleting your account in Settings also erases the rest of Embr's local data.

Sign in with Twitch

Signing in is optional and uses Twitch's official OAuth flow. Embr never sees your Twitch password. When you sign in or when your session is renewed, the authorization code or refresh token passes through Embr's server at api.midgarcorp.cc, a Cloudflare Worker that exchanges it with Twitch and returns the result to your device. It keeps no copy of the tokens. Requests for your follows, the live streams and chat then go from your device straight to Twitch with your access token. Deleting your account in Settings revokes Embr's access at Twitch.

Video, chat and emotes

Streams, video-on-demand, clips and chat come from Twitch, which receives the requests with your IP address and, when signed in, your access token. Twitch's own privacy policy governs what it collects, including through its embedded player. To show emotes, the app asks 7TV, BetterTTV and FrankerFaceZ for the emote sets of the channel you are watching, and it asks the public recent-messages service at recent-messages.robotty.de for a channel's recent chat. Those services receive the channel name or id and your IP address. Embr sends them nothing that identifies you.

To find a playable stream, the app sends the channel name to Embr's own server at api.midgarcorp.cc, which asks Twitch for a playback address and returns it. The request carries no Midgar ID and no Twitch token. As with any server, it necessarily sees the IP address the request came from. We do not store IP addresses. Midgar's servers run on Cloudflare, which may keep standard request logs for a limited time.

Reports and blocks

When you report or block a chat message or user, the message text, its author, the channel and your selected reason are sent to the developer so the report can be reviewed and acted on within 24 hours. These reports do not include your Midgar ID or your Twitch account.

The anonymous Midgar ID

The first time the app starts, it asks our server for an anonymous Midgar ID: a random identifier, and a random secret that proves the ID is yours. The server keeps the ID, a hash of the secret and the date it was created. The app keeps the ID and the secret in your iCloud Keychain, so the same ID follows you across your own devices and across Midgar's other apps. There is no name, email address, phone number, location or device name in it. When the app creates or joins the ID it may ask Apple's App Attest service to confirm that the request comes from a genuine copy of the app; we receive Apple's attestation and nothing about you. The ID is used to tie your tips to you and, on the More Apps screen, to show which Midgar apps you already use.

Tips

The optional tips are sold through Apple In-App Purchase and unlock nothing. Apple handles payment and billing, and we never receive your card details or your Apple Account details. When a tip completes, the app sends Midgar's server the signed transaction record from Apple: which tip, the price, the dates, the order identifiers, your App Store country and the Midgar ID. Our server keeps it so Midgar can count tips and keep its financial records, for as long as Apple's financial records require. Apple's own server notifications about the purchase reach the same server, which passes them on to RevenueCat (RevenueCat, Inc., United States). These notifications are transaction data from Apple, not anything the app sends: they carry the tip, the price, the dates, Apple's transaction identifiers, your App Store country and your anonymous Midgar ID, and no name, email address or IP address of yours. RevenueCat processes them on our behalf and under its own privacy policy at revenuecat.com/privacy. The app itself contains no RevenueCat software.

More Apps

Settings has a More Apps card that opens a view of Midgar's other apps. It fetches the app list from midgar-catalog.guitaripod.workers.dev and asks Apple's public iTunes lookup service for current icons, prices and ratings; your App Store country code is sent so prices are correct for your region. It reports which app tiles were displayed and which were tapped to api.midgarcorp.cc. That report contains no identifier of any kind and not your Midgar ID: only the event, the promoted app's App Store id, your App Store country code, where in the app the screen was opened, and Embr's name, version and platform. Our server stores a running total per day, event, app and platform, so there is no per-person or per-device record. This is product-interaction data, used only to decide which of our apps to promote, never for advertising or tracking. The Midgar ID is sent as a sign-in token only with the separate request that lists which Midgar apps you already use and what you own in them, so the screen does not suggest an app you already have.

The app also sends two more kinds of anonymous count to Midgar's servers in the same way: one "active" count the first time you use the app on each day, in each week and in each month, which tells us how many people use the app, and one count for each purchase that names only the product bought. Like the More Apps report, they carry no identifier and are stored only as running totals per day, event, app and platform. They are used only to understand how the app is used, never for advertising or tracking.

Midgar may publish aggregate statistics built from anonymous counts, such as weekly active installs, which never identify a person.

Children

Embr shows live user-generated content and is rated 17+. It is not directed at children, and we do not knowingly collect information from children.

What we don't do

We do not sell your data, show advertising, use advertising identifiers, run third-party analytics or crash-reporting software, or ask for tracking permission. We do not use your data to train AI models.

How long we keep data

• Your settings, history and block lists: only on your device, until you delete them or the app.
• Your Twitch tokens: only in your device's Keychain, until you log out or delete your account.
• The Midgar ID record and your tip records: until you ask us to delete them, as described below.
• Reports: kept for review, then expire automatically.
• Apple's records of your purchases, RevenueCat's copy of Apple's purchase notifications and Twitch's records of your account: kept by Apple, RevenueCat and Twitch under their own policies.

Deleting your data

In Settings, Delete Account signs you out, revokes Embr's access to your Twitch account and erases Embr's local data on that device. The app does not yet have a button that deletes the Midgar ID. To have your Midgar ID and the tip records linked to it deleted from our server, email support@midgarcorp.cc, tell us the app and the approximate date of your first tip, and we will help you do it. We delete the server records, but we cannot change Apple's own records, and we cannot refund a purchase: do that through Apple.

Your rights

Because we keep very little information about you, most requests are answered by the controls above. Where privacy law such as the GDPR gives you rights to access, correct, delete, restrict or move information, or to object to its use, contact us and we will help. We process the Midgar ID and tip records to provide and account for what you buy. Processing takes place in the European Union and the United States, by Cloudflare as our hosting provider and by RevenueCat. You may complain to your local data protection authority; in Finland that is the Office of the Data Protection Ombudsman (tietosuoja.fi).

Changes

If this policy changes we will publish the new version here with a new date, and mention material changes in the app's release notes.

Contact

For any questions, contact support@midgarcorp.cc.