Privacy Policy
Gaff (gaff.gg) · last updated 14 July 2026
Gaff is a small watch-together game run by its developer. This page explains what data Gaff handles and what it's used for, in plain words.
What we store
- Account basics — your username, a securely hashed password (we never store the real one), and an email address used only for password recovery and account security.
- Gameplay data — things like your saved rooms ("gaffs"), furniture layouts, cosmetics, watch time and fish caught, plus chat moderation records.
- Technical basics — connection logs needed to run and protect the service.
Connected accounts (optional)
You can optionally link outside accounts. If you do, Gaff stores the access tokens needed to read the data below, and nothing more:
- YouTube — read-only access to your playlists, liked videos and subscriptions, shown only to you inside the game so you can queue videos. Gaff uses YouTube API Services. By connecting YouTube you also agree to the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy. API data is cached briefly (minutes, never more than 30 days).
- Twitch — read-only access to which channels you follow, shown only to you so you can find watch parties for streams you follow.
- SoundCloud — read-only access to your likes and playlists, shown only to you for queueing music (when available).
- Last.fm — used only to scrobble what your gaff plays, if you turn it on.
Disconnecting: you can disconnect any linked account at any time in Settings → connections. Disconnecting deletes the stored tokens and any cached data from that service right away. For Google, you can also revoke Gaff's access at myaccount.google.com/permissions; we delete the associated data within 7 days of revocation.
What we don't do
- We don't sell your data or share it with advertisers.
- We don't show your connected-account library to other players — only videos you deliberately queue become visible to your room.
- We don't read anything beyond the read-only scopes listed above.
Local storage
The game keeps preferences (layout, volume, login token) in your browser's or the desktop app's local storage. No third-party advertising cookies are used.
Contact & changes
Questions or data requests: contact@gaff.gg. If this policy changes materially we'll note it in the game's update notes.