Stored only in this browser (localStorage) — never sent anywhere but Google's API. Get a free key from the Google Cloud Console (enable "YouTube Data API v3"), and restrict it to your site's origin.
Off by default to save API quota — replies load on demand when you open a thread.