Privacy policy

The controller is ND Strupler, Cambodia. For anything in this policy, write to [email protected].

There is no analytics, no advertising, no tracking pixel and no third-party cookie anywhere on this site. Nothing about your visit is sold or shared for marketing.

Stated plainly because it is the disclosure that matters most here. To write a pack, the service sends the text you paste, together with the title and description of any video you link, to Anthropic in the United States. Your name, your email and your church's name are not sent with it.

Under Anthropic's commercial terms, material sent through their API is not used to train their models. It is retained by them for a limited period for abuse monitoring.

The practical consequence: do not paste anything into the notes box that a person told you in confidence. A pastoral conversation, a named person's illness, a marriage in trouble. Preach it if you must, but do not send it here.

The providers above are mostly in the United States, so your data goes there. Transfers rest on the European Commission's standard contractual clauses, and where the provider is certified, on the EU-US Data Privacy Framework.

This is a real consequence rather than a formality: United States authorities have powers over data held there that your own country's authorities do not. Clause 3 is the practical answer.

Creations are kept to the number your plan allows, shown on your dashboard. Making a new one deletes the oldest beyond that number, permanently and immediately.

Your account, brand kit and logo are kept until you close the account, then deleted.

Rate limiting records live in memory only and are gone within the hour, and on every restart.

Payment records are kept by the payment provider and by the operator for as long as tax law requires, which is commonly ten years.

You can ask for a copy of your data, for it to be corrected, for it to be deleted, for its use to be restricted, for it in a portable form, and you can object to processing based on legitimate interest. Write to [email protected] and you will get an answer within a month.

You can also complain to a regulator without asking the operator first. Cambodia has no data protection authority to complain to. If you are in the EU, the EEA, the United Kingdom or Switzerland, you can complain to the authority where you live, and that right is unaffected by where this service is run from.

Passwords are hashed with scrypt and a per-account salt. Sessions are a signed token in an http-only cookie, sent over TLS only. API keys live on the server and never reach the browser. Uploaded logos are checked against their declared type, and SVGs containing script, foreign objects or remote references are rejected outright.

Being straight about the weak points, because a policy that only lists strengths is not worth reading:

An address is confirmed by a link before the account can create anything, but accounts made before that was introduced were grandfathered in unconfirmed, rather than locking their owners out. There is no password reset, so recovery is manual. Data sits on a single disk as files, and while the hosting provider keeps the volume, there is no separate backup you could be restored from. Download what you cannot lose.

The service is for churches and their staff and is not directed at children. Do not create an account if you are under 18, and do not paste material that identifies a child.

This policy may change. The version and date at the top of the page say which one you are reading, and a material change will be notified before it takes effect.