Privacy Policy

You can use every space as a guest without giving us your name or email. Your guest name, robe colour, preferences, counters and private prayer notes are stored only in your own browser (localStorage) and are not sent to our servers.

Private prayer notes never leave your device. Clearing your browser data, or the delete button, removes them permanently.

If you choose to create an account, we store your email address, preferred language, the time of your last sign-in and, if you link it, the random guest id of your browser. Your email is used only to send you sign-in links; we do not send newsletters or show it to anyone.

Sign-in links work once and expire after 15 minutes. When you sign in we set one strictly necessary cookie (sv_session) that keeps you signed in for up to 30 days. It is HttpOnly, is not used for tracking and is removed when you sign out. We only store a one-way hash of the link and of the session token.

Each sign-in link we send is recorded with your email address and the time it was sent, so that we can limit how many links an address receives. A daily clean-up job deletes these records once they are more than an hour old, and deletes expired sessions.

An account is linked to one guest id at a time. If you link a different device, the usage statistics recorded under the previously linked guest id are deleted.

To understand which spaces and practices are used, we may count events such as a visit, entering a space or completing a practice. Each event carries only the random guest id from your browser, a per-tab session id, the space and language. No cookies, advertising identifiers or third-party analytics are used.

Statistics are not collected when your browser sends Do Not Track or Global Privacy Control, or when you opt out on your account page. Events are deleted by a daily clean-up job once they are older than 13 months.

When you report a problem we store the topic, the space, your message, the language and, if available, your guest id or account, so that a moderator can review it. Please do not include personal information in reports.

We use these service providers to run the site: Cloudflare (hosting, content delivery and protection; processes IP addresses and request logs), our database host (stores account, report and statistics data; the provider will be named here before accounts go live) and an email delivery provider (sends sign-in links). Some providers may process data outside Japan; we only use providers with appropriate safeguards.

Payments (Premium) are processed by Stripe (Stripe, Inc., United States, and its group companies, including Stripe Japan K.K.). You enter your card or other payment details on Stripe's own pages; we never receive or store full card numbers. When you start a purchase we give Stripe your account email address and an internal account id, so that payments, invoices and receipts belong to your account. Stripe also collects what you enter on its pages (payment details, billing country or postcode and any name you give). From Stripe we receive and store, linked to your account: a Stripe customer id, the product and price, the subscription status and period, amounts, currency and payment status.

Provision to a third party in a foreign country (Article 28 of the Act on the Protection of Personal Information): Stripe may process this data in the United States and in other countries where Stripe or its service providers operate. The United States has no comprehensive federal personal-data protection law equivalent to Japan's; protection there comes from sector-specific federal laws and state laws such as the California Consumer Privacy Act. Stripe protects payment data under its privacy policy and data-processing terms and is certified to the PCI DSS Level 1 security standard. You can ask us for more information about these safeguards.

Under Japan's Act on the Protection of Personal Information you may ask us to disclose, correct, stop using or delete your personal data. From your account page you can download a copy of your data at any time: your profile, consents, reports, data requests, sessions, stored sign-in link records and the usage statistics recorded under your linked guest id. You can also delete your account there. Deletion immediately removes your email (also from sign-in link records), ends every session, deletes the usage statistics recorded under your linked guest id and removes that guest id from your account and your reports. A daily clean-up job then deletes the remaining account record together with its consents and data requests (for former staff accounts that appear in the admin audit log, only an anonymous record without email or other personal details is kept). Reports you sent are kept for moderation without any link to you. An account that holds a staff role in the admin dashboard must have that role removed before it can be deleted.

If you delete your account, Premium ends immediately and any subscription is cancelled in Stripe at once (see the Refund & Cancellation Policy). Payment records (product, amount, date, status and the Stripe ids of the payment) must be kept for the period required by Japanese tax and accounting law (generally seven years). We keep them linked only to an anonymous account record without your email, and use them for nothing else. Stripe also keeps the customer record with its invoices and payments for these legal and accounting purposes: on deletion we remove your email address, name, phone number and our account id from that customer record. Invoices and receipts already issued are not changed and may still show the email address they were sent to; Stripe keeps them under its own retention rules.

We do not use advertising or tracking cookies. The only cookie is the sign-in cookie described above, set only when you sign in.

Privacy contact: To be published after the operating company's registration is verified.