Privacy at Stilllight
Updated October 23, 2026
Stilllight is an interfaith candle sanctuary at stilllight.org. Stilllight YouTube Bridge connects candle commands from our YouTube live chat to the sanctuary. This page explains the data these features use.
Prayers and candles
When you submit a candle, we store your chosen candle style, intention category, optional display name and prayer, submission identifier, timestamps and moderation status. Public names and prayers can appear on this website and in the YouTube broadcast. Please do not include private information about yourself or other people.
If you select “Keep my intention private” on the website, the server discards the name and prayer text before storing the candle. The candle style, category and operational identifiers are still stored. The private option does not make YouTube chat private.
YouTube chat and Google authorization
The bridge uses YouTube API Services. The channel operator authorizes read-only YouTube account access through Google OAuth. Visitors do not need to authorize their Google accounts to light a candle on this website.
When enabled, the bridge reads live-chat messages, message identifiers, timestamps, display names and channel identifiers to recognize !candle and !float commands. A recognized command sends the prayer, display name, candle choice, YouTube message identifier and channel identifier to the sanctuary. The server hashes the channel identifier for submission control. Other chat messages are processed in memory and are not saved as prayers by the bridge.
Using a candle command asks us to display that prayer and your display name publicly. The bridge does not use its read-only permission to upload videos, post chat replies or change your channel. OAuth credentials and refresh tokens are held on the operator’s host for authentication and are not displayed to visitors. We do not request your Google password.
Technical information and storage
We use a first-party session cookie, lasting up to one day, to support submissions. To limit abuse and duplicate candles, the service hashes a technical identifier, which may derive from your IP address, signed-in account or session cookie. Temporary rate-limit records expire and are cleaned up as requests are processed. Hosting providers may process IP addresses and request logs to deliver and secure the service.
Candle records currently have no automatic expiration and remain stored until removed. The visible candle capacity is a display limit, not a deletion schedule. The bridge keeps a chat cursor, stream identifier and request counters so it can resume without intentionally importing old messages.
Who receives information
Public candle content is available to website visitors and broadcast viewers. OpenAI Sites and Cloudflare provide website hosting and storage; CloudLiveOn hosts OBS and the chat bridge. The operator and authorized hosting support may access service data needed to run or troubleshoot it. Google and YouTube process information under the Google Privacy Policy. Optional support links open Ko-fi and its payment providers, which handle payments under their own policies; our candle form does not collect payment-card details.
We do not sell prayer or Google user data, use it for targeted advertising, or use it to train AI models. Google user data is used to operate and maintain the candle bridge.
Removal and control
To request removal of a website candle or data held by the bridge, email kkfarrell00@gmail.com with the display name, approximate submission time and enough information to identify the entry. Do not send passwords or tokens. We may ask for information to confirm the request. Removing a candle from Stilllight does not remove the original YouTube message or copies already captured in a broadcast, recording or screenshot.
The channel operator can revoke Google access through Google Account permissions. Revocation stops the bridge’s authorized access; contact us separately to request deletion of stored data.
Contact and updates
Stilllight is operated by Krista Farrell. Privacy questions and deletion requests: kkfarrell00@gmail.com. We will update this page when our practices change.