Privacy and data
Updated 7 November 2026
Sanctuary Live provides church production studios and public service viewing pages. This notice explains how the current application handles information.
Watching a service
No Sanctuary Live account is required to watch. The hosting service processes network and technical information to deliver and protect the website. Direct camera viewing uses peer connections that can reveal network IP addresses to the church computer. Viewers are not asked to share their camera or microphone.
Church accounts
Church registration collects the owner's name and email, church name and password. Passwords are stored as protected hashes. Verification uses an external email delivery service when configured. Login sessions use secure cookies, and the owner can sign out on all devices. The platform owner can view church account details and administrative activity, and can suspend accounts. The private master dashboard does not display prayer message bodies.
Prayer requests and community messages
A private prayer request is stored for the church whose page you used, together with any optional name or reply email you provide. The form asks for your consent. Requests are readable through that church's authorised owner inbox and are not displayed in public community messages. Platform operations may also require access to stored information for maintenance or support. Avoid entering unnecessary sensitive details.
Resolving a prayer request does not delete it. Church owners can review new and resolved requests and permanently delete a request and its contact details when no longer needed. There is currently no automatic expiry schedule for retained requests. Deletion from the application does not promise immediate removal from any hosting backups. Ask your church about its retention practices or to remove a request. Prayer requests do not automatically generate an email notification.
Community messages are held for church approval before appearing publicly. Their names and message text are visible after approval. Contact your church through the contact details it publishes if you need a message reviewed or removed.
Invited remote guests
Remote preachers use a private invitation, without a church account. Joining records their chosen name and temporary connection details. Invitation credentials are stored as hashes on the server, and the guest browser keeps its session credential in local browser storage. A private link has no expiry and works for one guest at a time until the church revokes it. The church must admit a guest before their devices are sent to the studio, and the operator decides when to include them in the service or recording. Direct peer connections can reveal network IP addresses. Leaving or being disconnected clears the connection and allows the link to be reused. Only church revocation permanently disables the invitation.
Information saved on your device
Personal service notes and playback preferences stay in your browser. Church screen designs, uploaded graphics, saved text cues and the rundown also stay in that browser. They are not automatically synchronized to other computers. Download important notes and recordings before clearing browser storage or closing the studio.
Recording and network relay
Service recordings stay on the studio computer. When supported, the operator chooses a file and the browser writes video progressively. Stop recording before closing the studio to finalise that file. A configured relay service can carry encrypted media when a direct connection fails. The relay provider receives network information needed to route the connection. Temporary connection credentials are issued only through the relevant studio, admitted guest or live viewer workflow.
External services
Embedded YouTube, Cloudflare Stream or VDO.Ninja players connect to their providers and are subject to those providers' privacy practices. Sharing and calendar options prepare information for an external app that you select. You choose the recipients and confirm sending or saving. Church giving and replay links may open other services.
Google privacy information ยท VDO.Ninja privacy information
Questions and requests
Contact your church for questions about its service, prayer requests and community messages. Church account owners should contact the platform owner for account or platform data requests. This application currently has no advertising or advertising tracking integration.