Keack privacy policy

Last updated: 2 November 2026 (Keack 1.1.0)

Keack is a free browser extension for kick.com (Chrome and other Chromium-based browsers). It is an independent project and is not affiliated with, endorsed or sponsored by Kick.

This policy explains which data the Keack extension and Keack's own server (keack.melis.im) handle, why, and how you can delete it. It was written from Keack's source code.

In short

• No analytics, no tracking code, no advertising. Keack does not sell, rent or share your data and does not use it for anything other than the features described here.
• Almost every feature runs only inside your browser.
• Keack's server is used only for Chatrooms, friends and direct messages and name styles.
• Room messages and direct messages travel to the server over an encrypted connection (HTTPS), are stored encrypted on the server, and every message is deleted 24 hours after it was sent.
• Your Kick session is used only for requests to kick.com, and only while Use my Kick session is on.

Stored in your browser

Keack keeps its settings and data in the extension's own storage (chrome.storage.local) on your computer: your settings; notes you take about users; priority, ignored and hidden lists (channels, categories); moderation profiles, word lists and cross-ban channels; VOD playback positions and your video speed, quality and filter choices; the people you recently looked up with "Find user"; the Chatrooms sign-in (a Keack token, your Kick user id and username); the people you ignore in Chatrooms (Kick user id and username) and a copy of the public name style list.

Notifications: the list of the bell in the navbar is kept only here too (at most 100 notifications; the oldest go first): the type, who it came from (Kick user id and username), the time and whether you read it; for mentions in Kick chat the channel and a part of the public message of at most 120 characters; for rooms the room name. The text of direct messages and room messages is never stored. So that one event shows once across tabs, the ids of recently seen events (such as message ids, not text) are kept too. Notifications are never sent to any server and are not part of backups; Clear deletes them all, and signing out of Keack deletes the ones that came from Keack's server.

My sounds: the sound files you upload as notification sounds (at most 20, each at most 1 MB) stay only in this browser too: their names, sizes and lengths in chrome.storage.local, the audio itself in the extension's own IndexedDB database. They are never sent to any server and go into a backup file only when you turn on Include my sounds while exporting. Deleting one, or Delete data, removes them.

So that they survive a page reload, short-lived session data is kept in kick.com's own site storage: the chat session and chat statistics, the moderation log and your mentions (IndexedDB; records older than 30 minutes are discarded). Also a copy of the ad blocker, video and lightweight mode settings that the page needs before Keack has loaded (localStorage keack:adblock, keack:video, keack:lite).

Lightweight mode uses only its own settings: it collects no data, sends nothing anywhere and needs no extra permission. While lightweight mode is off, the keack:lite copy is removed too.

Keack reads the Kick pages you open (chat messages, usernames, video) in your browser to show its features.

None of this (stored data or page content) is sent to Keack's server. Settings → Data → Export only creates a backup file that you save yourself; it holds settings and data (and My sounds if you choose so), never the Keack sign-in, your notifications or the downloaded name style list.

Kick (kick.com)

Keack runs on kick.com and its subdomains (e.g. dashboard.kick.com) and talks to Kick's own servers: Kick's API, Kick's chat connection, emote images and Kick's video servers (for the player, downloads and statistics).

Some features act on your behalf: moderation (timeout, ban, deleting messages), the followed channels search, user cards, following and sending replies. For these Keack uses the Kick session of your kick.com tab. This depends on Settings → General → Use my Kick session: it is on by default, and if you are logged in to Kick, Keack also asks you once. While it is off, Keack sends no request with your session.

Your Kick session token is only ever sent to Kick (kick.com and its subdomains). Keack keeps it in memory only, never stores it and never sends it to Keack's server.

What Kick does with data is covered by Kick's own privacy policy.

Keack's server (keack.melis.im)

The server is run by the Keack owner. The extension contacts it only for the features below; the requests come from the extension itself, not from web pages, and carry no Kick cookies. The connection is always encrypted (HTTPS and secure WebSocket). Data on the server is processed only to provide these features and to protect the service from abuse.

Signing in (Chatrooms, friends)

Chatrooms, friends and direct messages need a Keack sign-in. You sign in through Kick's official login page (OAuth), where Kick asks you to let Keack read your basic user information (user:read). Keack's server then gets your Kick user id and username from Kick and stores only these two. Anything else Kick may return (such as an email address) is ignored and not stored. Kick's tokens are discarded right away; Keack never sees your Kick password or your Kick session.

The server creates a Keack sign-in token for your browser. It is stored on the server only as a SHA-256 hash and expires after 30 days. Signing out (in the Chatrooms window or in Settings) deletes it from the server.

Your Kick user id, username and the times of your first and latest sign-in are kept in the server's user list, so that rooms, friendships, bans and name styles can refer to you, until you ask for them to be deleted (see Deleting your data). Because of this list, another Keack user who looks up a username can see whether that person uses Keack.

During a sign-in the server keeps a one-time login state for at most 10 minutes.

Chatrooms

• Rooms: the channel (Kick channel name), room name, public or private, owner and creation time. A private room's password is stored only as a scrypt hash.
• Messages: the text, the author (Kick id and username), the time and, for replies, a short copy of the original message. The text and the copy are stored encrypted on the server (see Message encryption and deletion). Every message is deleted 24 hours after it was sent; a room keeps at most its last 100 messages.
• Room settings: the allowed list (usernames the room owner adds), kicked users (user id and time), who entered a private room's password correctly and the room owner's timed mutes (user id and when the mute ends; deleted when it ends).
• Closing: rooms close by themselves after 30 minutes with nobody in them or 1 hour without a message. When a room is deleted or closes, its messages, allowed list, blocks, mutes and password grants are deleted too.
• "Is typing" notices and who is in a room are only relayed live to the people in the room; they are not stored.
• Ignoring someone happens only in your browser: it is not sent to the server and nobody is told.

Everyone in a room sees its messages and usernames.

When you open Chatrooms or the Community page while signed in, the extension asks the server for the rooms of the channel you are watching, so the server sees that channel's name.

Friends and direct messages

• Friends: only people who signed in to Keack at least once can be friends. The server keeps friend requests and friendships (the two Kick user ids, who asked and the times) until the request is withdrawn or declined or the friendship ends.
• Online status: while your Keack connection is open (a kick.com tab is open and you are signed in), only your friends see you online; this is relayed live and not stored. If you turn on Appear offline, your friends see you offline; this setting is stored on the server.
• Direct messages: only between mutual friends. The text, sender, recipient, the time sent and the time read are stored; the text is stored encrypted on the server. Every message is deleted 24 hours after it was sent (a conversation keeps at most its last 1000 messages). Messages sent while you are offline are delivered later within that time. You see when the other person has read your messages, and they see when you have read theirs.
• Removing a friend or blocking someone deletes your conversation for both of you right away.
• People you block: the list of people you blocked (Kick user id and time) is kept until you unblock them. A blocked person can't send you friend requests or messages; they are not told that you blocked them.
• "Is typing" notices in direct messages are only relayed live to the other person; they are not stored.
• In your browser: the text of direct messages is never written anywhere in your browser: it stays only in the open tab's memory and is fetched from the server again when needed. So that open message windows come back after a reload, Keack keeps only which friends' windows are open (Kick user id and username) in the extension's temporary storage (chrome.storage.session) for the browser session.

Message encryption and deletion

Messages travel between the extension and the server over an encrypted connection (HTTPS / secure WebSocket). The text of room messages and direct messages is stored encrypted (AES-256-GCM) in the server's database; the key is kept apart from the database. This protects the data stored on the server: the server decrypts messages to deliver them, so the encryption does not hide messages from Keack's server. Who wrote to whom or to which room, and when, is not encrypted.

Every message is deleted 24 hours after it was sent; the server removes expired messages from its database within a minute and overwrites the deleted records with zeros.

Name styles

A name style is an optional, free look for your Kick username that other Keack users see. While Settings → Chat → Name styles → Show name styles is on (the default), the extension downloads the whole public style list from the server at most every 10 minutes. The request carries no username, sign-in token or channel. Turning the setting off stops the downloads and deletes the stored list.

If you save your own style (needs the Chatrooms sign-in), your Kick username and your style are published in that public list. Resetting it in the style editor deletes it from the server.

Server logs and abuse protection

For every request the server writes a log line with the time, the path of the requested address (e.g. the channel name in a room list request), the result, the duration and the IP address. Sign-ins are logged with the Kick user id and username, room changes with room and user ids, friend and block actions with user ids. Logs never contain sign-in tokens, passwords, message text, encryption keys or the query part of addresses. Logs are rotated by size (at most 3 files of 10 MB) and old lines are overwritten; they are used only to run the service and to look into abuse. The web server in front of it (a reverse proxy) may keep its own standard access logs (IP address, time, requested address).

IP addresses and user ids are also kept in memory for rate limits (e.g. 300 requests per minute per IP). These counters cover at most the last hour and are cleared when the server restarts.

The Keack owner can ban an account that abuses the service by its Kick user id. A ban record holds the user id, username, an optional reason and the time.

Keack's website (https://keack.melis.im/) uses no cookies, no analytics and nothing loaded from elsewhere. If you pick a language on the page, your choice is kept only in your browser (localStorage). Opening the page is logged as described above; the page's images, style and script files are not logged.

Other websites

• Open without leaving the tab: the X, YouTube, Instagram, Reddit and Streamable buttons are off by default. If you turn one on, Keack contacts that site only when you click the button, with the site's official embedded player (for YouTube: youtube-nocookie.com). The site receives the request like any embedded video and its own privacy policy applies. Kick links stay on Kick.
• Log search opens the log site you chose (kicklogz.com or kicklog.com) in a new tab, with the channel and username in the address.
• Mass moderation → Load from link reads the https address you type, without sending cookies.
• Links on user cards (X, Instagram, YouTube, TikTok, Discord) are normal links that open only when you click them.
• The ad blocker is optional and off by default. It only blocks requests from kick.com to known ad servers (with an extra browser permission that you grant) and changes how Kick's player loads ads; it never sends data to ad servers.
• The notification centre's desktop notifications are optional and off by default; they use the extension's notifications permission (requested only when you turn them on, given back when you turn them off) and are shown on your computer. Desktop notifications for mentions in Kick chat are these too. They never contain the text of direct messages or room messages, only who wrote and where.
• Downloads, stream recordings and screenshots are saved on your computer; nothing is uploaded.

What Keack does not do

• No analytics, telemetry, crash reporting, advertising or tracking code.
• No remote code: all code and styles ship with the extension.
• Data is not sold, rented or shared with anyone except as described here (Kick for Kick features; for embeds only the site you clicked).
• Data is not used to determine creditworthiness or for lending.

Deleting your data

• Sign out: in the Chatrooms window or with Settings → Chat → Chatrooms or Friends & messages → Sign out; your sign-in token is deleted from the server. If you uninstall without signing out, the token expires by itself after 30 days.
• Your rooms: delete them in the room settings. Messages are deleted within 24 hours anyway and rooms close by themselves.
• Your friends and direct messages: removing a friend or blocking someone deletes your conversation for both of you; you can unblock at any time. Direct messages are deleted within 24 hours anyway.
• Your name style: resetting it in the style editor deletes it from the server.
• Data in your browser: Settings → Data → Danger zone deletes Keack's settings and data; uninstalling Keack deletes all of the extension's storage. The short-lived session data in kick.com's site storage expires after 30 minutes; clear kick.com's site data in your browser to remove it at once.
• Your account record on the server: to have your Kick user id, username, name style and anything else linked to your account (rooms, messages, friendships and requests, blocks, direct messages and settings) deleted from the server, write to the Keack owner at the address below. The Keack owner does this with the server's deletion command (forget): all of it is deleted at once, your open connections are closed and online friends see you disappear from their lists within 30 seconds. If your account is banned, only the ban record stays (so that the ban still applies). Signing in again later creates a new record.

Children

Keack is meant for people who may use Kick under Kick's terms. It does not knowingly collect data from children.

Changes

If this policy changes, the new version is published at this address with a new date.

Contact

Questions and deletion requests: write to the Keack owner at [email protected]