Your privacy

Anonymous means anonymous to other people

Nobody who visits this site can see who you are, and you never need to give your name or an account. We do not claim that no technical information exists anywhere: like every website, our servers briefly handle your device’s network address to deliver pages and to stop abuse. We keep that to a minimum and do not link it to what you write.

Who can read your prayer request

• Private (the default): only the site’s administrator. Each request is emailed to them, and it also sits in our database, where the same person can read it in the admin area. It never appears on the website, and a reply is only ever shown on your own private link.
• Shared with the community: only if you choose it and tick a separate box saying you agree. It then appears on the prayer wall straight away, exactly as you wrote it, without your name. If it contains something that could identify someone (such as a phone number, email or street address), it waits until a person has checked it. You can take it down at any time with your private link.

Today one person administers the site and reads requests. If volunteers are ever added, we will update this page, and say exactly what they can see, before they have any access.

Email, and what we cannot take back

When you send a request, an email containing it is sent to the site’s administrator. If you later delete your request, we remove it from our system, but we cannot erase a copy that has already reached someone’s mailbox. That person can delete it from their own mailbox, and we ask them to.

Services that handle data for us

• Vercel hosts the website and sees ordinary web traffic, such as network addresses.
• Supabase stores the database.
• Resend delivers and receives the emails described above, so it handles the text of requests and replies, and your email address if you asked to be emailed prayers.
• Cloudflare Turnstile checks you are a person, not a bot, when you send a request.

None of these is used for advertising, and we do not give them anything beyond what is needed to do their job.

What we collect

• What you choose to write, your category, and an optional nickname.
• Your email address, only if you choose to give it so prayers written for you can be emailed to you. It is encrypted before it is stored, nobody can read it (not even the administrator), it is used for nothing else, and it is deleted when your request is deleted or when you choose “Stop emailing me” on your private page. Leave it empty and we have no way to contact you.
• An optional 4-digit PIN, stored only in a scrambled form, so you can mark your shared prayer answered from the wall.
• A secret link to edit or delete your request. We store only a scrambled form of it, so we cannot recover it for you.
• Short-lived technical records (such as how many requests came from one network address in an hour) to block spam and abuse.
• A visitor count. Once a day, your device is turned into a scrambled code that changes every day and can’t be turned back into your address, so we can count visitors without knowing who anyone is. The codes are deleted after two days; only the total is kept and shown on the home page. No outside analytics service is used.

What we do not do

• We do not use advertising trackers, and we do not sell or share your information.
• We do not send what you write to any analytics service.
• We do not use AI to read, sort or reply to your request.

Keeping it and deleting it

You can delete your request at any time using your secret link. If you lose the link we cannot prove a request is yours, so we cannot delete it for you; you can use the contact page and we will do what we responsibly can. Private requests are removed automatically 180 days after their last activity (activity means you wrote it, edited it, or it received a reply; simply opening your page doesn’t count). Requests you asked to share but that were not approved are removed after 30 days, and the administrator is warned a week before. A prayer that has been approved and shown on the wall stays there until you delete it, it is taken down, or we review it, which we plan to do at least once a year. The exact date appears on your private page.

Safety exceptions

If something you write suggests that a child is being harmed, or that someone is in immediate danger, we may need to act to protect them. We are not an emergency service and cannot trace or dispatch help, so please see urgent help if you need it now.

Your rights

Depending on where you live, you may have rights to access, correct or delete your information. Because we cannot identify you, we handle these through your secret link wherever possible.

Where your information is kept

Our database is in Sydney, Australia. The companies that host the website, send and receive email, and check for bots (listed above) are based in the United States and may handle information in other countries, including the United States and Japan, to do their job.

Questions and complaints

If you have a question or a complaint about your privacy, please use the contact page. We will reply if you leave an email address, usually within 30 days. If you are not satisfied with our answer, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.