RAZLINK Security
Last updated August 20, 2026
RAZLINK never collects your Twitch password.
The “Continue with Twitch” button sends you to Twitch's official OAuth authorization page on twitch.tv. Twitch returns a limited authorization token after you approve access.
Encrypted connections
RAZLINK is served over HTTPS. Twitch and Discord authorization tokens and connected-service secrets are encrypted before database storage.
Verified events
Incoming Twitch EventSub requests are checked using Twitch signatures before events are accepted by the automation engine.
Scoped permissions
RAZLINK asks providers only for permissions used by enabled creator features. Discord connection uses a channel-specific incoming webhook and cannot read server messages.
Private controls
OBS overlay URLs and trusted-admin links contain random access tokens. Treat them like passwords, share them only with trusted people, and revoke them if exposed.
Report a concern
Use the contact page to report a suspected security, privacy, or account-access problem. Security disclosure information is also published at /.well-known/security.txt.