Privacy Policy

Nothing that identifies you. There are no accounts, so there is no name, email address or password to collect.

What you write in the message box is sent onward to choose your passages, as described below, and is not written to any database or log we control.

Before anything is sent, your own browser checks what you wrote for signs of crisis. If it finds them you are shown help instead of passages, and the message is not sent anywhere at all — not to us, and not to Google.

Otherwise your message is sent to Google's Gemini API, which reads it and returns references — for example a book, chapter and verse. Google processes it under its own terms as a provider to us.

The sources that supply the actual text — the Free Use Bible API, SuttaCentral and Wikisource — receive only the reference. They never receive your message.

Your message is not written to a log, an error report or an analytics event. This is enforced in the code rather than left to convention.

To stop a single visitor exhausting the service, we count requests in a short window. What is stored is a SHA-256 hash of your IP address — never the address itself — together with a count and a timestamp. Nothing else: no message, no result, no locale.

Hashing is not the same as anonymity, and we would rather say so: the range of possible addresses is small enough that a determined party could work backwards from a hash. That is why these rows are deleted automatically by a scheduled job once their window has passed, rather than kept.

We set no tracking or advertising cookies, embed no trackers, and run no third-party analytics. The typeface is served from this site rather than a font network, so loading a page does not tell a third party you were here.

The rate-limit counters described above are deleted automatically once their window has passed. Nothing else is retained, because nothing else is stored — there is no message, result or account to keep, export or delete.

Passages link out to the edition they came from — Wikisource, SuttaCentral, eBible or Project Gutenberg. Those sites have their own privacy practices, and we do not control them.

This service is not directed at children under 13, and we do not knowingly collect personal information from anyone. There are no accounts, so nothing here is tied to a child's identity. If optional accounts launch, they will be restricted to adults.

Rights of access, correction, deletion and portability apply to information a company holds about you. The only thing we hold is the hashed rate-limit counter described above, which deletes itself and is not linked to a name, an email address or an account. If you believe otherwise, or want to ask how any of this works, write to us at the address below.

Several additions are planned, and this policy will be updated to describe each one before it is switched on — not after.

Planned: remembering your chosen tradition and a list of the passages you have been shown, both kept in your own browser and never sent to us; a single two-button question asking whether a reading helped, recorded as a count with no text and nothing linking it to you; optional reminders, which would need your permission and an address held by your browser's push service; and optional accounts with a saved journal, which would mean storing what you choose to save.