Twitch

Is Twitch safe?

For adults who mostly watch, Twitch is fairly safe. The risks are the ones that come with live video and open chat: harassment, mature streams that are hard to filter in advance, scams in chat and, for younger users, strangers. We score it 53/100, close to YouTube at 54 and Discord at 56.

Two things pull the score down beyond the content itself. Twitch is part of Amazon's advertising business, and Apple's privacy label shows your device ID is used to track you across other companies' apps. And in October 2021 a server misconfiguration let an outsider copy Twitch's source code and a subset of creator payout data, which later cost it a fine in Turkey.

What happened in the 2021 Twitch leak?

On 6 October 2021 Twitch confirmed that data had been "exposed to the internet" after a configuration change on one of its servers allowed improper access. Its final update, on 15 October, said the leaked files were documents from its source code repository and creator payout data that affected a small fraction of users. Twitch said login credentials, which it stores with bcrypt hashing, were not accessed, and neither were full card numbers or bank details. It reset every stream key as a precaution.

Turkey's data protection authority (KVKK) later found the breach affected 35,274 people there. In November 2024 it fined Twitch 2 million lira, about $58,000: 1.75 million for inadequate security and 250,000 for failing to report the breach. That is small money for Amazon, but it is a regulator's finding that the protections were not good enough, not just a claim.

Account security today is decent. Two-factorTwo-factor authenticationSigning in with a second proof of identity on top of your password, such as a code from an app, a security key or a passkey.More in the glossary login is available, and Affiliates and Partners must use it. The setup is clumsy, though: Twitch requires SMS verification first and creates an Authy account linked to your phone number, even if you then switch to another authenticator app. Whispers, Twitch's private messages, are not described as end-to-end encryptedEnd-to-end encryptionEncryption in which only the sender and the recipient can read a message. The company running the service cannot see its content.More in the glossary anywhere in its privacy or help pages we read.

How does Twitch use your data?

Twitch says it is "not in the business of selling" personal data, but it shares data with Amazon and runs ads that follow you. The privacy notice says Twitch works with ad networks to target and measure ads "both on and off the Twitch Services", and may share your email address or a resettable device ID so an ad partner can match you to its own records. The iPhone app also includes Nielsen's audience measurement software.

Apple's label is broad. It lists device ID as used to track you, and email, user ID, purchase history, search history, gameplay and other content as linked to you, including for Twitch's own marketing. Watching is never anonymous if you are logged in.

You can close your account from the Delete Account page, and Twitch says it then deletes what it is not required to keep. Ad opt-outs are scattered between the Privacy Choices page, device settings and the ad industry's own tools.

Harassment, gambling and child safety

Live content is the hard part. A stream can turn graphic or a chat can be flooded with abuse before anyone reports it, and Twitch says so itself: its transparency report notes that ephemeral live video is a harder setting for automated detection. Its trust and safety team reviews reports around the clock, and Twitch says it tries to keep a human in the review process.

The H2 2025 report gives the scale. Twitch took 12,393 enforcement actions under its youth safety policy in the second half of 2025, down from 17,116 in the first half, and sent 1,409 reports to the US National Center for Missing and Exploited Children, up from 959. Twitch attributes both shifts to better classification of cases rather than a change in what happens on the platform. Of enforcements triggered by its own detection, 97% removed fake accounts, mostly spam bots.

Streamers carry much of the day-to-day moderation. AutoMod holds risky chat messages for review, and channels can limit chat to followers, subscribers or users with a verified phone number or email address. How well a chat is moderated still depends on the channel.

Gambling is a specific worry for teenage viewers. After streamers protested in 2022, Twitch banned streams of slots, roulette and dice sites not licensed in the US or a country with similar consumer protection, naming Stake.com, Rollbit, Duelbits and Roobet. Licensed casino streams, sports betting, fantasy sports and poker remain allowed.

How to use Twitch more safely

1. Turn on two-factorTwo-factor authenticationSigning in with a second proof of identity on top of your password, such as a code from an app, a security key or a passkey.More in the glossary login and add an authenticator app after the SMS step. Use a password you use nowhere else.
2. Restrict Whispers from people you do not know, and never follow a link in chat that asks you to log in.
3. For a teenager, set up the account together and check which channels they follow. Gambling and mature streams are a click away.
4. Limit ad tracking in your phone settings (on iPhone, refuse the tracking prompt) and use Twitch's Privacy Choices page.
5. If you stream, never show mail, windows or screens that reveal where you live, and use moderators and chat delay on larger streams.

How we scored it

The regulatory record (80) is Twitch's strongest factor: one small fine in Turkey. Privacy (42) and scams and harmful content (42) are the weakest, because of cross-site ad targeting and the limits of moderating live video and chat. Security (55) reflects the 2021 leak and an SMS-first two-factorTwo-factor authenticationSigning in with a second proof of identity on top of your password, such as a code from an app, a security key or a passkey.More in the glossary setup. For an app aimed at younger gamers, compare Roblox.