Privacy Policy

Last updated: [effective date] · Draft of 26 September 2026

Phantom Stream is a browser-based live studio: you host a show, invite guests with a link, and broadcast the result to platforms such as YouTube, Twitch, Kick and Facebook. This policy explains what information we handle to do that, why, who else is involved, how long we keep it, and how you can get it deleted.

1. Who we are

Phantom Stream (phantomstream.io) is operated by [legal name of the operator — person or company], [postal address] ("Phantom Stream", "we", "us"). We are the controller of the personal information described in this policy. If you have a question or complaint about privacy, email admin@thechristianking.com.

When a host invites you into their studio, the host decides who is invited, what is shown on stage and where the show is broadcast. What happens to a broadcast once it reaches YouTube, Twitch or another platform is governed by that platform's own privacy policy.

2. Information we collect

Your account

Accounts are provided by Google Firebase Authentication. You can sign up with an email address and password or with your Google account.

• Identity: your email address, a unique account ID, and — if you sign in with Google — the display name and profile photo URL that Google shares with us. Your password is held by Firebase in hashed form; we never see it.
• Profile: the name you choose, when you last signed in, and account status set by us (for example whether your account is approved to host or has been suspended).
• Plan (when paid plans launch): your plan, its status and renewal date, and the customer and subscription IDs issued by our payment processor. We never receive or store your full card number.

Your studios

• Studio (room) names and settings, stage layouts, titles, tickers and other on-screen content you create.
• The people you add to a studio: co-host email addresses, invites, and each member's role.
• Your co-host roster (the email addresses you keep on your team) and any custom layouts you save.
• Images you upload for custom layouts, stored on our server.

Live sessions

• Audio, video and screen shares are relayed in real time through our media servers so the other participants can see and hear you. We do not record or store them. A host may broadcast the show to a platform, and anyone watching may record it with their own tools — that is outside our control.
• Chat messages are delivered to the other people in the room in real time and are not saved on our servers.
• What others in the room see: your display name, title, profile photo or avatar, whether you are speaking, muted or on stage, and a short device summary (device type, operating system and browser) that helps the host with technical problems.
• Connection details: when your browser asks to join a room we see your IP address. We keep it for at most 24 hours, only so it can be attached to a ban if a moderator removes you during that session (see "Moderation and safety").

Avatars

If you upload a photo to use as your avatar, it is stored on our server. It stays private until a host or co-host of the room approves it; approved photos are served from our site so other participants can see them. You can delete an avatar at any time. Avatars that are no longer used are deleted automatically after 90 days.

Moderation and safety

• Moderation log: hosts and co-hosts leave a record of actions taken in a studio (for example mutes, removals and bans) with who did it, to whom (by display name) and when. The studio owner can read and clear it. Entries are deleted automatically after 90 days.
• Ban records: when someone is banned from a studio we keep the banned person's display name, a random device identifier stored in their browser, their device type, operating system and browser, their IP address where available, and who banned them and when. The studio owner can see and remove these records; they are also deleted if the studio is deleted.
• Abuse protection: we keep short-lived counters to limit repeated join attempts and uploads. They are stored under one-way hashes, not as readable lists of who joined what.

Broadcasting ("Go live")

When a host goes live from the studio, our server composes the program and sends it to the streaming destination the host chose. If the host pastes a destination URL and stream key for a single broadcast, that key is used for that request only and is not stored.

Multistream channels [feature rolling out — confirm before publishing]

Multistream lets you send one stream (from the studio or from software such as OBS) to several platforms at once. To do that we store, per account, on our own server:

• your personal ingest key (the key you put into OBS);
• your list of channels: platform, the channel's name and picture, whether it is switched on, the title, description and category you set, and its latest status;
• for each channel, either the stream key you pasted, or — if you connected the platform account — an OAuth refresh token and the platform account ID.

Stream keys and refresh tokens are encrypted at rest (AES-256-GCM). They are never stored in our account database, never sent back to your browser after you save them (you only see the last four characters), and never written to logs.

Waiting list

If you join the waiting list, we keep your email address, the date you joined, and your answer if you tell us what kind of show you run. We use them to email you about Phantom Stream opening, and our email provider, Resend, sends those emails. Every email has an unsubscribe link. We keep your address on an unsubscribe record so we don't email you again.

Website and server logs

Like most websites, our servers may record standard technical logs for each request — IP address, the page or endpoint requested, time, and browser user-agent — to keep the service running and secure. These are kept for no more than [30] days.

3. How we use it

• To run the service: sign you in, host your studios, connect guests, relay audio and video, broadcast to the destinations you choose, and show your name and avatar to the people you're live with.
• To keep it safe: let hosts moderate their rooms, enforce bans, and prevent abuse, fraud and attacks.
• To support you: answer your messages and fix problems you report.
• To bill you (when paid plans launch): apply your plan's limits and manage your subscription.
• To meet legal obligations and enforce our Terms of Service.

We do not use your information for advertising, we do not sell it, and we do not use it to train machine learning models. Where the law requires a legal basis (for example in the EU and UK), we rely on performing our contract with you, our legitimate interest in keeping the service secure, your consent where we ask for it (for example when you connect a platform account), and compliance with law.

4. Connected platforms

Connecting a platform account is optional. When you connect one, the platform shows you exactly what access Phantom Stream is asking for, and you can disconnect it from Phantom Stream or revoke it from the platform at any time. We request only the access needed to stream to your channel and set its title.

YouTube (Google)

Phantom Stream uses YouTube API Services. By connecting a YouTube channel you agree to the YouTube Terms of Service, and Google's handling of your information is described in the Google Privacy Policy.

• What we access: your channel's name and picture; your channel's live stream settings, including the stream URL and stream key; and your upcoming live broadcasts.
• What we do with it: send your stream to your channel, create a live broadcast when you go live if none is scheduled, and set the broadcast's title and description to what you entered in Phantom Stream.
• What we store: the OAuth refresh token and the stream key (both encrypted), your channel ID, name and picture, and the title and description you set. We do not access your videos, comments, subscribers, analytics or any other YouTube data.
• Who we share it with: no one. YouTube data is used only to provide the features above.
• Revoking access: you can remove the channel in Phantom Stream, or revoke Phantom Stream's access at any time from your Google Account's security settings at https://security.google.com/settings/security/permissions.
• Deletion: when you remove the channel in Phantom Stream we delete its stored YouTube data immediately (and always within 7 days). If you revoke access from your Google Account instead, we delete it as soon as we detect the revocation and in any case within 30 days. Channel details we keep are refreshed from YouTube, or deleted, at least every 30 days.

Phantom Stream's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Twitch

With your permission we read your channel's stream key and update your stream title and category (scopes channel:read:stream_key and channel:manage:broadcast). We store the encrypted refresh token and stream key, and your channel's name and picture. Revoke access at any time under Twitch Settings → Connections. See the Twitch Privacy Notice.

Kick

With your permission we read your account and channel details and your stream URL and key, and update your stream title and category (scopes user:read, channel:read, channel:write, streamkey:read). We store the encrypted refresh token and stream key, and your channel's name and picture. You can revoke access from your Kick account settings [confirm the exact Kick settings path]. See Kick's Privacy Policy.

Facebook (Meta)

We support streaming to Facebook Pages you manage. With your permission we list your Pages and create live videos on the Page you choose, with the title and description you set (permissions pages_show_list, pages_read_engagement and publish_video). We store the encrypted access token, the Page ID, name and picture. We do not read your personal profile, friends, posts or messages. Remove Phantom Stream at any time under Facebook Settings → Business integrations, and see Data deletion for how to have your data removed. See Meta's Privacy Policy.

Other destinations (custom RTMP)

For platforms without a connection (for example Rumble, X, LinkedIn or any custom RTMP server) you paste a server URL and stream key. We store that key encrypted, exactly like the ones above, until you remove the channel.

5. Who we share it with

We share personal information only with the service providers that run Phantom Stream for us, under contracts that limit them to that purpose, and with the destinations you choose:

Other people see what you choose to share in a room (see "Live sessions"), and a studio's owner and co-hosts see its moderation records. We may also disclose information if the law requires it, to protect the safety of any person, to investigate abuse of the service, or as part of a merger or sale of the service (in which case this policy continues to apply). We do not sell or rent personal information, and we do not share it for cross-context behavioural advertising.

6. Cookies and browser storage

We do not use advertising cookies or third-party analytics. We use your browser's storage for things the service needs:

• Sign-in: Firebase keeps you signed in using your browser's storage.
• Preferences: your last display name and room, colour and layout choices, chat and sound settings, and your audio device choices, stored in your browser only.
• Device key: a random identifier created in your browser so you keep the same seat when you reconnect. It is also what a ban is attached to.

Clearing your browser's data for phantomstream.io removes all of this; you'll simply be signed out and your preferences reset.

7. How long we keep it

8. Security

Connections to Phantom Stream are encrypted in transit (HTTPS, and encrypted media for live sessions). Stream keys and platform tokens are encrypted at rest with keys held only on our server. Uploaded avatars are not reachable by other people until approved. Access to production systems is limited to the people who operate the service. No system is perfectly secure; if we learn of a breach that affects you, we will notify you as the law requires.

9. Your choices and rights

• Delete your account from your dashboard at any time — see Data deletion.
• Disconnect a platform from Phantom Stream, or revoke access from the platform's own settings (links above).
• Correct your name and email in your account settings.
• Access or export a copy of your data, or object to or restrict how we use it, by emailing us.

Depending on where you live (for example the EU, UK, or California and other US states) you may have additional rights, including to complain to your local data-protection authority. We will not treat you differently for exercising them. We answer requests within 30 days and may need to confirm your identity first, usually by replying from the email address on your account.

10. Children

Phantom Stream is not directed at children. You must be at least [13] years old (or the minimum age of digital consent where you live, if higher) to create an account. If you believe a child has given us personal information, contact us and we will delete it.

11. Where data is processed

Our servers are hosted by OVHcloud in [the United States — confirm region], and our account database is run by Google Firebase. If you use Phantom Stream from outside that country, your information will be transferred there. Where the law requires it, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses offered by those providers.

12. Changes to this policy

We will post any change on this page and update the date at the top. If a change materially affects how we use information we already hold, we will tell you by email or in the app before it takes effect.