Privacy

What we collect directly

Nothing. There is no sign-in, no newsletter, no comment form, and no database. Which promise you draw is decided in your browser and is never transmitted.

Cookies

The site sets no cookies of its own. Google Analytics sets a small number of first-party cookies, with names beginning “_ga”, so that a returning visit can be told apart from a new one. No advertising cookie is set, because there is no advertising on the site yet.

Third-party scripts

Two kinds of request leave your browser: the site’s own files — every page, font, icon and image, all served from this domain — and the Google Analytics tag, loaded from Google. Nothing else on the page calls out to another company.

Server logs

The site is static and hosted on Google Firebase Hosting, which keeps ordinary web-server logs of requests: the IP address, the page asked for, the time, and the browser’s user-agent string. Those logs belong to the hosting provider and exist to serve and secure the site. We do not use them to build any picture of an individual visitor.

Analytics

This site uses Google Analytics 4 to see aggregate traffic: which pages get read, roughly which country a reader is in, and whether they arrived from a search engine or a link. It is not used to identify anyone, and the data is neither sold nor combined with anything else.

What it does not see is which promise you draw. That is still decided in your browser and is not reported as an event — the analytics here counts pages, not what Scripture you were given.

Google receives your IP address in order to work out an approximate location and does not store it. Google acts as the processor for this data and holds the aggregate reports for a limited retention period. If you would rather not be counted, blocking cookies for this site works, as does Google’s official opt-out browser add-on at https://tools.google.com/dlpage/gaoptout.

Advertising

There is none yet. The intention is that the site will eventually carry advertising, since it costs money to run and readers are asked for nothing. Nothing is in place, and until it is, no advertising cookie is set and no ad network learns of your visit. When that starts, this page will be updated the same day; these are the terms that will apply:

• Google’s use of advertising cookies would enable it and its partners to serve ads to you based on your visit to this site and/or other sites on the internet.
• You could opt out of personalised advertising by visiting Google Ads Settings at https://adssettings.google.com.
• You could opt out of third-party vendors’ use of cookies for personalised advertising at https://optout.aboutads.info and https://www.youronlinechoices.com.
• Third-party vendors and ad networks other than Google might also serve ads on this site; their own privacy policies would govern that use.

The daily reminder

The reminder is off unless you switch it on, and switching it on is the only thing on this site that sends anything to a server. If you never turn it on, nothing in this section happens.

When you do, your browser asks Google’s Firebase Cloud Messaging for a delivery token — an identifier for this browser on this device, which says nothing about who you are — and the site passes that token to Google along with your time zone’s offset from UTC, so the reminder can arrive at six in the morning where you are rather than where the server is. Google holds that pairing. We do not: there is no database here, no list of subscribers, and no record that any particular person turned it on.

The notification itself is the same text for everybody, every day. It does not name a verse, because the site does not know which one you will draw — that is still decided in your browser when you open it.

Turning the reminder off, in the footer, unsubscribes the token and deletes it. Revoking notification permission in your browser settings, or uninstalling the app, also ends it.

Data stored on your device

If you install the site or visit it more than once, a service worker stores a copy of the pages and fonts on your device so it works offline. That cache lives only in your browser and holds nothing but the site’s own files. The one other thing kept on your device is written only if you switch the daily reminder on: the delivery token described above and your UTC offset, so the site can tell on your next visit that the reminder is already running and move it if your time zone has changed. Clearing your browser data or uninstalling the app removes both.

Analytics and advertising requests are deliberately excluded from that cache and always go to the network, so nothing of that kind is stored on your device.

Children

This site is not directed at children under 13 and does not knowingly collect information from them.

Your choices

You can block cookies and scripts for this site in your browser settings and it will behave exactly as it does now. To be left out specifically, use the analytics opt-out add-on linked above.

Changes

If this policy changes materially, the revised version will be published on this page.

Contact

Questions about this policy can go to biblepromisebox@gmail.com.