Privacy Policy
Last updated: October 29, 2026
GoVast (“GoVast,” “we,” “us”), operated by Besser Enterprises LLC, is self-hosted software: you run it on your own computer, and your stream data lives there too. This policy explains what that means in practice, and what the small amount of infrastructure we do operate (described below) does and doesn't do with your data.
1. Data stored on your own device
When you use GoVast, the following is stored locally in a database file on your own computer — never on a server we operate:
- OAuth access and refresh tokens for each platform you connect (Twitch, YouTube, Kick, X)
- Your destination configuration (stream keys, RTMP URLs, resolution/bitrate settings)
- Stream session history and analytics (viewer counts, bitrate samples, chat activity)
- Chat logs, viewer points balances, and giveaway/gambling history, if you use those features
- Saved title/category presets
We have no access to this data, and nothing is synced to a GoVast-operated server. Uninstalling the app removes the program itself; it does not currently delete your local data folder automatically, so it remains on disk until you remove it yourself. See the Support page for exact instructions on deleting it by hand.
2. What our relay service handles
GoVast operates one small piece of shared infrastructure: a relay service that (a) completes the OAuth login handshake with each platform without shipping platform credentials inside the app itself, and (b) forwards real-time chat events for X and Kick, which — unlike Twitch and YouTube — require a webhook endpoint rather than a direct connection from your computer.
Specifically, and only:
- During login, the relay briefly holds your newly-issued OAuth tokens — for at most 2 minutes — until your own GoVast instance retrieves them. After that, they're gone from the relay entirely.
- For X and Kick, incoming chat events are held for at most 2 minutes as a short-lived delivery buffer, and pushed to your instance in real time where possible. They are not retained afterward.
The relay does not log, analyze, or retain your stream content, chat messages, or viewer data beyond these short delivery windows.
3. Third-party platforms
GoVast connects directly to Twitch, YouTube (Google), Kick, and X using each platform's own public API, with your explicit OAuth authorization. What each of those platforms does with your account data is governed by their own privacy policies and terms, not this one:
- Twitch Privacy Policy
- Google Privacy Policy
- Kick Privacy Policy
- X Privacy Policy
You can revoke GoVast's access to any platform at any time, both from inside GoVast (Disconnect) and from that platform's own account settings.
4. Launch waitlist
If you join the launch waitlist on this website, we store the email address you submit so we can email you when GoVast launches. That's the only thing it's used for — we don't share it, sell it, or use it for anything else. You can ask us to remove it at any time by emailing [email protected].
5. No analytics or tracking
This section covers the GoVast application. It does not send usage analytics, telemetry, crash reports, or any tracking data to us or to any third-party analytics provider. The “Analytics” panel inside the dashboard is a local view of your own stream history — it is never transmitted anywhere.
This website, https://govast.io, is a separate thing from the application: it's a static marketing site hosted on Cloudflare Pages. It does not run tracking scripts or third-party analytics. Cloudflare, as our hosting provider, processes standard web server logs (IP address, requested page, timestamp) to operate and secure the site; we don't separately collect or analyze that data ourselves. The only information this website asks you to submit directly is the email address on the launch waitlist, covered above.
6. Cookies
GoVast's local dashboard sets a single session cookie so your browser stays signed in to your own, self-hosted instance. It is not used for tracking and is not shared with any third party.
7. Children's privacy
GoVast is not directed at, and is not intended for use by, children under 13. We do not knowingly collect data from children.
8. Changes to this policy
If this policy changes, we'll update the date above and post the revised version here.
9. Contact
Questions about this policy can be sent to [email protected].