Embedding on a private website

Not directly, in passes when discussing support for localhost.

But the CSP error in the console does list the domains it expects on the domains you provide

With a domain of https://pi:1880 the domain you added in parents is pi Twitch interprets that and adds it to the CSP rule as https://pi/