Privacy Policy
WolfWave has no tracking, no analytics, no servers. Tokens are stored in macOS Keychain. Now-playing data never leaves your Mac unless you enable a service.
Effective Date: February 12, 2026 Last Updated: August 11, 2026
MrDemonWolf, Inc. ("we", "us", or "our") operates the WolfWave application. This Privacy Policy explains how we handle information when you use WolfWave.
Information We Collect
Information You Provide
- Twitch Account Credentials. When you connect your Twitch account via OAuth Device Code Flow, WolfWave receives OAuth access and refresh tokens from Twitch. These tokens are stored locally in your macOS Keychain and are never transmitted to us.
- Channel Name. The Twitch channel you connect to is stored with your Twitch account record in the macOS Keychain. If you restore a backup while signed out, WolfWave temporarily stages that public channel name in UserDefaults only until a successful Twitch sign-in commits it with the account.
- Discord Application ID. Your Discord Application ID is stored in the app's build configuration and used to connect to Discord's local IPC socket.
- Song Request Blocklist. Song titles and artist names you choose to block from song requests are stored locally in your macOS UserDefaults and included in a settings backup if you export one. You can remove individual entries or clear the entire list at any time from Settings → Song Requests → Blocklist → Clear All.
- Custom Bot Commands. The triggers, replies, aliases, cooldowns, and permission levels of chat commands you author are stored locally in your macOS UserDefaults and included in a settings backup if you export one.
- Settings Backups. When you export your settings, WolfWave writes a plain JSON file to the location you choose. Backups contain portable preferences and the public Twitch channel name used to offer reconnection. They never include OAuth tokens, resolved Twitch user IDs, overlay or Stream Deck control tokens, or other Keychain secrets.
Information Collected Automatically
- Now Playing Data. WolfWave reads the currently playing track, artist, and album from Apple Music on your device using ScriptingBridge. This data is only used locally and shared with the services you explicitly enable (Twitch chat, Discord Rich Presence, WebSocket).
- Listening History (opt-in). When you enable Settings → History & Stats → Listening History, WolfWave records each scrobbled play (track, artist, album, timestamp, duration) to a local NDJSON file under Application Support. Recording only happens while the toggle is on. You set the retention window in days (0 = keep everything) and can clear all recorded history at any time from the same pane.
- Twitch Viewer Activity. When the Song Request, vote-skip, or chat-command features are enabled, WolfWave receives chat messages, channel-point redemptions, and bit cheers via the Twitch EventSub WebSocket. Ordinary chat usernames and message bodies are held in memory for the queue or vote session and discarded when that state is cleared or the app quits. Paid song-request features also use a temporary recovery queue under Application Support. A channel-point record contains broadcaster, reward, and redemption IDs, its fulfill/refund state, and a timestamp; it does not contain the viewer name or request text. A qualifying Bits-cheer record contains the EventSub message and broadcaster IDs, viewer display name, Bits amount, the boost setting, the extracted song query, and a timestamp until the action is acknowledged. Completed paid-event identifiers remain for up to 10 minutes 30 seconds to suppress Twitch redelivery. Live records are removed after completion; a damaged queue file may be retained locally with a
.corrupt-*suffix for recovery. Optional blocklist entries you create are also stored locally.
How We Use Information
WolfWave processes data entirely on your device. We do not operate servers or transmit your data to MrDemonWolf, Inc. (See Diagnostics below for the optional, on-device-only diagnostics feature.) All data flows directly between your Mac and the third-party services you connect:
| Data | Destination | Purpose |
|---|---|---|
| Now playing info | Twitch chat (via Helix API at api.twitch.tv) | Respond to !song, !last, and !stats commands |
| Now playing info | Discord (via local IPC socket at $TMPDIR/discord-ipc-{0..9}) | Display Rich Presence status |
| Now playing info | Local WebSocket server (token-gated, bound to all interfaces) | Stream data to OBS browser sources and overlays on the same machine or local network |
| Album artwork query | iTunes Search API (itunes.apple.com) | Fetch album art and Apple Music / song.link URLs |
| Song request queries | Apple Music API (api.music.apple.com), and Spotify / YouTube oEmbed + song.link when a viewer pastes one of those links | Find the requested track on Apple Music |
| EventSub subscriptions | Twitch (eventsub.wss.twitch.tv) | Receive chat messages, channel-point redemptions, and bit cheers |
| Update check | GitHub Releases (github.com/MrDemonWolf/wolfwave) | Sparkle appcast for in-app updates (skipped on Homebrew installs) |
Diagnostics
WolfWave includes an optional, opt-in diagnostics feature that is turned off by default. When you enable "Collect on-device diagnostics" in Advanced settings, WolfWave uses Apple's MetricKit framework to gather crash, hang, and performance reports.
These reports are aggregated by macOS on your device and stored locally on your Mac under Application Support. They are never uploaded. WolfWave has no analytics servers and no code that transmits diagnostics anywhere. WolfWave also keeps a local, anonymous app-launch count that never leaves your device. Turning the feature off stops collection immediately.
Data Storage
- Credentials and the configured Twitch channel are stored in the macOS Keychain, encrypted by the operating system.
- User preferences are stored in the app's UserDefaults on your device. A channel imported from backup may be staged there temporarily, but it cannot drive a connection until Twitch sign-in commits it to Keychain.
- Temporary paid-event recovery records are stored under Application Support and removed after processing and the short duplicate-delivery window described above.
- No data is stored on external servers operated by MrDemonWolf, Inc.
Third-Party Services
WolfWave integrates with third-party services that have their own privacy policies:
We encourage you to review these policies. WolfWave only sends the minimum data required for each integration to function.
Data Sharing
We do not sell, rent, or share your personal information with third parties. WolfWave does not contain advertising or tracking SDKs.
Data Retention
All data is stored locally on your device. You can clear each category at any time:
| Category | Location | How to clear |
|---|---|---|
| Paid-event recovery records | ~/Library/Application Support/WolfWave/State/twitch-redemption-resolution-outbox.json* | Removed automatically after processing; Settings → Advanced → Reset Settings clears all live or quarantined records |
| Twitch account record / WebSocket tokens | macOS Keychain | Settings → Advanced → Reset Settings |
| App preferences | UserDefaults | Settings → Advanced → Reset Settings |
| Application logs | ~/Library/Application Support/WolfWave/Logs/ | Settings → Advanced → Clear Logs |
| Listening history (opt-in) | ~/Library/Application Support/WolfWave/History/plays.ndjson | Settings → History & Stats → Clear History (retention window is also enforced on its own) |
| Song request blocklist | UserDefaults | Settings → Song Requests → Blocklist → Clear All (or per-entry remove) |
| Song request queue / vote-skip sessions | In-memory only | Quitting the app discards these immediately |
| Custom bot commands | UserDefaults | Delete them in Settings → Twitch → Custom Commands |
| Settings backups | Wherever you saved the export | Delete the JSON file yourself |
| MetricKit diagnostics (opt-in) | ~/Library/Application Support/WolfWave/Diagnostics/ | Disable the toggle in Settings → Advanced and delete the directory |
Deleting WolfWave may leave UserDefaults, Application Support files, and Keychain items on macOS. Use the in-app reset before uninstalling, or remove the remaining local files and Keychain entries manually.
Security
- External service traffic uses encrypted transport (HTTPS/WSS)
- The local OBS transport uses plaintext HTTP/WS; WebSocket connections require the per-install token, so LAN access should be limited to trusted networks
- Credentials are encrypted and protected by the macOS Keychain
- The app is sandboxed with minimum required entitlements
- The app is signed with a Developer ID certificate
Children's Privacy
WolfWave is not directed at children under 13. We do not knowingly collect information from children.
Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date.
Contact
If you have questions about this Privacy Policy, please contact us:
- Email: legal [at] mrdemonwolf.com
- GitHub: github.com/MrDemonWolf/WolfWave
- Company: MrDemonWolf, Inc.
Support the Project
Sponsor WolfWave on GitHub Sponsors and keep it free, open-source, and ad-free for Apple Music streamers on Mac. GPL-3.0 licensed. Built by MrDemonWolf, Inc.
Terms of Service
WolfWave is GPL-3.0-licensed and free to use, fork, and modify. No warranty. Apple Music, Twitch, and Discord trademarks belong to their respective owners.