You can make an Extension or a Website with Twitch Login, so you can verify it’s them and pull the info from your backend.
It’s tedious to set up, but is certainly more reliable than whispers.
Can also recommend trying the Web Notifications API(s) - they’ve gotten a lot easier to use over the past few years.