DRAFT TEMPLATE. Fill in the [brackets] and have a lawyer review this before launch. It is a starting point, not legal advice.
Privacy Policy
Last updated: [date]. Prayer Pool is run by [Your name or company], [address/country]. Contact: [email].
The short version
You don't need an account. Prayers are anonymous and public. We collect only what we need to run the site and keep it safe.
What we collect
- Your prayer (text and category). It is shown publicly in the pool, without your name. Please don't include names, addresses, health details about identifiable people, or other personal information.
- A device cookie (random ID) so we can enforce one free prayer per person and stop repeat abuse. It does not identify you personally.
- A one-way hash of your IP address (combined with a secret salt) used for anti-spam limits. We do not store your raw IP address in our database. Our hosting and network providers may process IP addresses in their logs.
- Which prayers you prayed with or reported, tied to your device cookie, to prevent duplicates.
- Payment information: if you pay, Stripe collects your card details. We never see or store your card number. We receive confirmation that a payment succeeded.
Service providers who process data for us
- Hosting: [Render / your host].
- Cloudflare Turnstile: a bot check that may process device and browser signals.
- Content moderation: the text of your prayer is sent to [OpenAI's moderation service / your provider] to check for harmful content.
- Stripe: payment processing.
How we use it
To display prayers, prevent spam and abuse, enforce the free-prayer limit, moderate content, process payments, and keep the service secure. We do not sell your data and we do not show ads.
How long we keep it
Prayers are automatically deleted after [90] days. Abandoned, unpaid prayers are deleted within 24 hours. Anti-abuse data is removed along with the related prayer.
Your choices and rights
Because prayers are anonymous, we can't look up "your" prayers by name. If you want a prayer removed, email [email] with the exact text and approximate date and we will remove it. Depending on where you live (for example the EU/UK or California), you may have rights to access, delete, or object to processing of your personal data. Contact us and we will respond within [30] days.
You can clear the device cookie in your browser at any time (this may let you submit another free prayer, which is allowed only once per person under our Terms).
Sensitive content
Prayers may touch on health, religion, or personal struggles. Please share only what you are comfortable making public. If a message suggests someone may harm themselves, we don't publish it and we show information about crisis support. We are not a crisis service. In the US call or text 988; elsewhere see findahelpline.com.
Children
Prayer Pool is not intended for children under [13] (or [16] where required by local law). Please don't use it if you are under that age.
Security
We use HTTPS, restrict access to administrative tools, and store the minimum data needed. No system is perfectly secure.
Changes
If we change this policy we will update the date above and, for significant changes, post a notice on the site.