You can ask the user for whatever information you want.
GDPR/other regional privacy laws/guidelines apply
So Twitch doesn’t have a specific TOS on not doing it.
An extension is also an App, it provides the same ClientID/secret that you would need to talk to the API
(Under Extension Settings top right)
So you don’t need an Extension and an App as an Extension is also an App