Privacy policy

Operator: Liam Simon. Contact: contact@stillwavemanager.site. Effective date: 2026-10-28.

What Stillwave does

Stillwave is an invitation-only production and YouTube scheduling tool. The public website provides information and handles channel authorization. The management workspace is private.

Google and YouTube data

With your consent, we receive your Google account identifier, verified email address when available, YouTube channel identifier and profile information. We store encrypted OAuth credentials so the workspace can upload and schedule videos, manage titles, descriptions, thumbnails and playlists, verify publication, and read channel/video analytics. Administrator login is separate from Google channel authorization.

We request YouTube account management permission (youtube.force-ssl), read-only YouTube Analytics permission (yt-analytics.readonly), and basic Google identity (openid and email). Access is used only to provide the features above. We do not sell Google user data, use it for advertising, or use it to train AI models. Stillwave's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Storage and sharing

Workspace media, database records and encrypted credentials are stored on the operator's server. This deployment uses local mounted storage, not third-party object storage. Google/YouTube receives media and metadata when you authorize publishing. Optional configured AI providers receive only content submitted for generation; OAuth refresh tokens are not sent to AI providers or the renderer.

Retention and deletion

Finished MP4 retention is configurable and defaults to seven days after verified publication or manual use. Original artwork and music remain until removed by the operator. OAuth credentials remain until the operator removes connection data in response to a deletion request or its retention policy. Disconnecting stops further use; retained database/backup data is handled separately. Contact the operator to request removal of account credentials, associated channel data and retained backups under the operator's backup policy. Trash is recoverable until permanently removed.

Your choices

You can revoke access at Google account permissions. Revocation stops future API access; contact us separately to delete locally retained data. You may also view Google's privacy policy.

Cookies and security

The public authorization flow uses a short-lived, secure browser-binding cookie to protect the callback. We do not use advertising or analytics cookies on this site. The private workspace uses administrator session cookies. Credentials are encrypted at rest; access is restricted to authorized administrators and internal services.