The web version stores channel authorizations, sign-in records, sessions, ChatGPT grants, artwork, prepared changes, audit records and playlist snapshots in an AES-256-GCM encrypted database outside the public website directory on Hostinger. The encryption key and Google app credentials are kept in private server configuration. A hosting administrator with access to both configuration and database can access the data. The existing Windows integration stores its credentials locally using Windows DPAPI; an encrypted local recovery copy of server setup keys is also retained.
Expired approval requests and access grants cannot be used after expiry, although their stored records may remain until administrative cleanup. Connection records, artwork, operation history and snapshots remain until removed by the owner or at the owner’s request. Hostinger backups may retain earlier copies according to the hosting account’s backup settings; deleting a live record does not immediately erase backup copies.