樣式方案主播廣場意見回饋
主播後台觀眾後台
MOCHA Console

隱私權政策

最後更新：2026 年 11 月 7 日

這一頁說明 MOCHA Console 會存哪些資料、拿來做什麼、誰看得到，以及怎麼修改和刪除。範圍包含 MOCHA Console 桌面程式（以下稱「主程式」）、官網 mochaconsole.com（主播後台、主播公開頁、觀眾付款頁、觀眾帳號、主播廣場），以及給直播軟體用的畫面。金流商的付款頁、YouTube、Twitch 等外部網站有各自的隱私權政策。

1.存什麼

主播帳號

  • Google 登入時提供的 email、名字、Google 帳號編號（不包含 Google 密碼）。
  • 在主程式和主播後台建立的內容：歌庫、歌詞、歌單、點歌場次、直播畫面的樣式、公開頁的介紹與圖片、感謝名單、團隊設定等。
  • 收款設定：各家金流的商店代號與金鑰（Token），以及開了電子發票時綠界發票的商店代號與金鑰。金鑰加密存放，只用來和那家金流建立、確認交易或開立發票，不會再顯示在畫面上。
  • 開啟第二道驗證時，用來確認本人的資料。

觀眾的付款（斗內、點歌、抽獎）

  • 觀眾填寫的暱稱、留言、金額、付款方式與付款結果，記在那位主播的收款紀錄裡。
  • 信用卡等付款資料在金流商的付款頁輸入，MOCHA Console 不會取得。送給金流商的只有付款需要的內容（金額、訂單編號、固定的品名），不包含暱稱或留言。
  • 主播開了電子發票時，用綠界付款前要填一個 Email（必填），再選發票怎麼開：存進手機條碼或自然人憑證、捐給你填的單位（捐贈碼），或打統一編號開給公司（公司抬頭可以不填）。填了捐贈碼或統一編號，會先問綠界是哪個單位、哪家公司。這些資料加密存放，付款成功後交給那位主播的綠界開立電子發票，開好就刪除。登入的觀眾如果選了 email 給主播看，會先帶入登入的 Email，也可以改。

主播上傳的直播平台紀錄

  • 主播在主程式的「斗內紀錄」按「上傳紀錄」或「做感謝名單」時，YouTube 超級留言、會員、Twitch 小奇點與訂閱等紀錄（平台上顯示的名字、金額、留言）會存到雲端，用在感謝名單與斗內紀錄。

觀眾帳號

  • 用 Google 建立觀眾帳號時的 email、Google 帳號編號、Google 頭像網址，以及自己設定的名字、頭像、email 是否給主播看。
  • 支持累積、點數、認領舊斗內的申請，以及主播用 email 送點數時存下的 email 雜湊碼。詳細說明在觀眾說明頁。

主程式（存在主播自己的電腦）

  • 主程式的設定、本地音檔的路徑等都存在主播自己的電腦，本地音檔的路徑不會上傳。
  • 連結 Twitch 的登入資料加密存在主播的電腦。雲端只記錄連結的是哪個 Twitch 帳號（帳號編號與名稱），用來顯示是否正在直播。

系統自動記錄

  • 連線的 IP、時間、瀏覽器種類與錯誤紀錄，用來阻擋機器人、防止濫用和排查問題。
  • 看不出是誰的使用統計，例如某個功能被使用的次數。
  • 瀏覽器的 Cookie 與本機儲存，用來記住登入狀態和偏好（例如語言、記住的暱稱、上次填的發票資料、還沒儲存的草稿）。

寫給我們的內容

  • 意見回饋與來信。

2.拿來做什麼

  • 提供、維護和改善 MOCHA Console 的功能。
  • 讓主播看到自己的點歌、斗內與收款紀錄，並顯示在直播畫面、公開頁與感謝名單。
  • 處理付款、確認付款結果，避免重複或偽造的付款通知。
  • 阻擋機器人、防止濫用、回覆客服問題，以及配合法律要求。
  • 資料不會販售，也不會交給別人做廣告。我們可能公布看不出是誰的統計數字，例如使用人數。

3.誰看得到

  • 本人：在主程式、主播後台或觀眾後台看得到自己的資料。
  • 主播：看得到觀眾付給他的紀錄（暱稱、留言、金額）。觀眾登入後付款、或認領成功的斗內，還會看到觀眾帳號的名字、頭像與觀眾編號；email 照觀眾自己的選擇。主播開了電子發票時，觀眾為了開發票填的資料（Email、載具條碼、捐贈碼、統一編號與公司抬頭），主播在自己的綠界後台看得到。
  • 團隊成員：主播同意之後，團隊（例如經紀公司）看得到主播同意分享的紀錄。
  • 其他觀眾：只看得到主播選擇公開的內容，例如公開頁的排行榜與感謝名單。
  • 協助提供服務的廠商，只在提供服務需要的範圍內處理：
    • Cloudflare：網站、資料庫與圖片的存放。
    • Google：登入。
    • 各家金流（綠界、歐付寶、應援、PayPal、Tako、Midtrans 等）：處理主播收款需要的付款資料。應援的收款會經過 MOCHA Console 的固定出口主機轉送，這台主機只轉送、不保存交易內容。
    • 綠界電子發票：主播開了電子發票時，開立需要的 Email、載具條碼（手機條碼或自然人憑證）、捐贈碼、統一編號與公司抬頭、金額與品名。
  • 法律要求：依法律規定或主管機關的合法要求提供。
  • MOCHA Console：處理問題時（例如收到協助請求、或帳號被濫用）會查看需要的資料。

4.留多久

  • 已付款的斗內、付費點歌與抽獎紀錄保留 13 個月，之後自動刪除；沒有付款成功的訂單 35 天後自動刪除。
  • 電子發票：觀眾為了開發票填的資料在發票開好後刪除；沒開成功的，最多留 35 天讓主播重開，之後刪除。發票號碼與日期跟著收款紀錄保留 13 個月。
  • YouTube、Twitch 等平台紀錄保留 13 個月。
  • 主播帳號、觀眾帳號與自己建立的內容，會保留到刪除帳號為止。
  • 系統紀錄只保留處理安全與問題需要的時間。

5.怎麼改、怎麼刪

  • 主播：名字、公開頁、收款設定等，隨時可以在主程式或主播後台修改。主程式的帳號設定裡有「刪除帳號」，刪除後歌曲、點歌場次與雲端資料會一起刪除。
  • 觀眾：名字、頭像、email 是否給主播看，隨時可以在觀眾後台「設定」修改；最下面可以刪除觀眾帳號。
  • 主播自己另外保存的資料（例如自己匯出的報表），需要請那位主播處理。
  • 想查詢、複製、更正或刪除資料，也歡迎來信；依法需要保留的紀錄除外。

6.怎麼保護

  • 網站全程使用 HTTPS 加密傳輸。
  • 收款金鑰加密存放；管理用的後台另外設有存取管制。
  • 主播可以開啟第二道驗證。
  • 網路傳輸與儲存沒辦法做到百分之百安全；如果發生資料外洩，我們會依法通知受影響的人。

7.政策的更新與聯絡

  • 政策更新時會修改上面的日期，重大調整會在官網或主程式提醒。
  • 有任何問題，歡迎寫信到 mochaplugin@gmail.com，也可以一起參考服務條款。

This English version is provided for convenience. If it differs from the Chinese version, the Chinese version prevails.

This page explains what data MOCHA Console keeps, what it is used for, who can see it, and how to change or delete it. It covers the MOCHA Console desktop app (the "app"), the website mochaconsole.com (the streamer dashboard, streamer public pages, viewer payment pages, viewer accounts and the Plaza), and the screens provided for streaming software. Payment providers' pages and outside sites such as YouTube and Twitch have their own privacy policies.

1.What we keep

Streamer accounts

  • The email, name and Google account ID provided when signing in with Google (not your Google password).
  • Content created in the app and the streamer dashboard: song library, lyrics, set lists, request sessions, stream screen styles, public page introduction and images, thank-you lists, team settings and so on.
  • Payment settings: merchant IDs and keys (tokens) for each payment provider, and the ECPay e-invoice merchant ID and keys when e-invoices are turned on. Keys are stored encrypted, used only to create and confirm transactions with that provider or to issue invoices, and never shown on screen again.
  • When two-step verification is turned on, the data used to confirm it is you.

Viewer payments (tips, song requests, draws)

  • The nickname, message, amount, payment method and payment result a viewer enters are recorded in that streamer's payment records.
  • Card and other payment details are entered on the payment provider's page. MOCHA Console never receives them. Only what the payment needs (amount, order number and a fixed item name) is sent to the provider, not the nickname or message.
  • When a streamer turns on e-invoices, viewers paying with ECPay enter an email (required) and choose how the invoice is issued: kept in a mobile barcode or citizen digital certificate, donated to an organization (donation code), or issued to a company with its tax ID (the company name is optional). A donation code or tax ID is first checked with ECPay to show which organization or company it belongs to. These are stored encrypted, sent to that streamer's ECPay to issue the e-invoice after the payment succeeds, and deleted once it is issued. If you are logged in and chose to share your email with streamers, your sign-in email is filled in for you; you can change it.

Streaming platform records uploaded by streamers

  • When a streamer presses "Upload records" or "Make thank-you list" in the app's tip log, records such as YouTube Super Chats, memberships, Twitch Bits and subscriptions (the name shown on the platform, the amount and the message) are stored in the cloud and used for the thank-you list and the tip log.

Viewer accounts

  • The email, Google account ID and Google profile picture URL from creating a viewer account with Google, plus the name, picture and email-sharing choice you set yourself.
  • Support totals, points, requests to claim earlier tips, and the email hash stored when a streamer sends points by email. Details are on the viewer account privacy page.

The app (stored on the streamer's own computer)

  • App settings, local audio file paths and so on are stored on the streamer's own computer. Local audio file paths are never uploaded.
  • Twitch login data is stored encrypted on the streamer's computer. The cloud only records which Twitch account is connected (account ID and name), to show whether the streamer is live.

Recorded automatically

  • IP address, time, browser type and error logs, used to block bots, prevent abuse and troubleshoot problems.
  • Usage statistics that do not identify anyone, such as how many times a feature is used.
  • Browser cookies and local storage, used to remember your login and preferences (such as language, a remembered nickname, the e-invoice details you last entered or an unsaved draft).

What you write to us

  • Feedback and emails.

2.What it is used for

  • Providing, maintaining and improving MOCHA Console's features.
  • Letting streamers see their own song requests, tips and payment records, and showing them on stream screens, public pages and thank-you lists.
  • Processing payments, confirming payment results, and preventing duplicate or forged payment notifications.
  • Blocking bots, preventing abuse, answering support questions and meeting legal requirements.
  • Data is never sold or given to others for advertising. We may publish statistics that do not identify anyone, such as the number of users.

3.Who can see it

  • You: your own data in the app, the streamer dashboard or the viewer page.
  • Streamers: the records of what viewers paid them (nickname, message, amount). For payments made while logged in, or tips successfully claimed, they also see the viewer account's name, picture and viewer number. Whether they see the email follows the viewer's own choice. When a streamer turns on e-invoices, the details a viewer enters for the invoice (email, carrier barcode, donation code, tax ID and company name) can be seen in that streamer's ECPay back office.
  • Team members: once a streamer agrees, their team (such as an agency) can see the records the streamer agreed to share.
  • Other viewers: only what the streamer chooses to make public, such as the leaderboard and thank-you list on the public page.
  • Service providers that help run the service, only as far as needed to provide it:
    • Cloudflare: hosting the website, database and images.
    • Google: sign-in.
    • Payment providers (ECPay, O'Pay, Oen, PayPal, Tako, Midtrans and others): the payment data needed for streamers to receive payments. Oen payments pass through MOCHA Console's fixed-IP relay server, which only forwards them and does not keep transaction contents.
    • ECPay e-invoices: when a streamer turns on e-invoices, the email, carrier barcode (mobile barcode or citizen digital certificate), donation code, tax ID and company name, amount and item name needed to issue the invoice.
  • Legal requirements: provided when required by law or by a lawful request from the authorities.
  • MOCHA Console: when handling a problem (such as a request for help or an abused account), we look at the data needed.

4.How long it is kept

  • Paid tips, paid song requests and draw records are kept for 13 months and then deleted automatically. Orders that were never paid are deleted automatically after 35 days.
  • E-invoices: the details a viewer enters for the invoice are deleted once the invoice is issued; if it could not be issued, they are kept for up to 35 days so the streamer can try again, then deleted. The invoice number and date are kept with the payment record for 13 months.
  • Records from YouTube, Twitch and other platforms are kept for 13 months.
  • Streamer accounts, viewer accounts and the content you create are kept until the account is deleted.
  • System logs are kept only as long as needed for security and troubleshooting.

5.How to change or delete it

  • Streamers: names, public pages, payment settings and so on can be changed at any time in the app or the streamer dashboard. The app's account settings include "Delete account", which deletes your songs, request sessions and cloud data together.
  • Viewers: your name, picture and whether streamers see your email can be changed at any time under "Settings" on the viewer page, and the viewer account can be deleted at the bottom.
  • Data a streamer saved separately (such as a report they exported) needs to be handled by that streamer.
  • You are also welcome to email us to access, copy, correct or delete your data, except for records we are required by law to keep.

6.How it is protected

  • The website uses HTTPS encryption throughout.
  • Payment keys are stored encrypted, and the admin backend has separate access controls.
  • Streamers can turn on two-step verification.
  • No transmission or storage over the internet is 100% secure. If a data breach happens, we will notify the people affected as required by law.

7.Updates and contact

  • When this policy is updated, the date above changes. Major changes are announced on the website or in the app.
  • If you have any questions, please email mochaplugin@gmail.com. You may also want to read the Terms of Service.