Legal · Privacy

Privacy Policy

[LEGAL REVIEW REQUIRED — pending lawyer review before launch.]

What we collect

Only what you give us:

• Choose-You submissions: name + email + which Holy Hero you chose.
• Prayer requests: name + email + the text of your request + optional Hero choice.
• Newsletter signups: email only.
• AI Match input: we hash the text immediately (SHA-256, daily-rotating salt). We never store the raw text. Only the hash, length, and which Hero was suggested are recorded.
• Aggregate visitor counts: pages viewed, events triggered. IPs are hashed daily; we cannot trace a visit back to an individual.

Who we share with

Third parties that process data on our behalf:

• Supabase — our database.
• Resend — transactional email.
• MailerLite — newsletter email (only if you opt in).
• Stripe — donation processing (we never see payment details).
• Groq — only the AI Match text is sent (never stored on their side per Groq's policy).

The prayer intentions gathered so far — each name and the text of the intention — were sent once to a Catholic sanctuary outside the UK and the EU, so that a thousand Holy Masses could be offered for them across the year. It was a one-time sending; no intention has been sent since. Marking a request private keeps it off this website's public wall; it did not exclude it from that offering.

We do not use any third-party analytics service. Our visitor counts live in our own database.

Your rights (GDPR)

You can request deletion of all your data at any time. Email [email protected] with the address you used, and within 7 days we will:

• Delete your Choose-You records.
• Delete your prayer requests.
• Remove you from the newsletter (and from MailerLite).
• Send written confirmation.

Cookies

See our Cookies Policy.

Last updated: pending legal review.