AnonymouslyUrs.net Privacy Policy

Last updated: May 19, 2026

AnonymouslyUrs.net ("AnonymouslyUrs," "we," "us," or "our") provides a faith-based encouragement and prayer platform that allows users to create, receive, and share anonymous encouragement messages. This Privacy Policy explains how we collect, use, disclose, and protect information in connection with our website, web application, email messaging program, and related services (collectively, the "Services"). By using the Services, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Services.

1. Scope and Who This Policy Covers

This Privacy Policy applies to:

1. Visitors to anonymouslyurs.net.
2. Users who create an account on AnonymouslyUrs.net.
3. Individuals who receive emails from AnonymouslyUrs.net.

This Policy does not cover how third parties (such as Stripe, Postmark, or your email provider) handle your information; their privacy practices are governed by their own privacy policies. We are based in the United States and primarily serve users located in the United States.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you provide when you use our Services, such as:

1. Account information:
   • Email address.
   • Display name or nickname.
   • Password (stored in hashed form, not in plain text).
2. Recipient details for email:
   • Recipient email address (for email notifications).
3. Payment and subscription information via Stripe:
   • Nickname & email associated with your billing profile.
4. Subscription plan details.
5. Limited billing metadata we receive from Stripe such as the last four digits of your card, card type, customer ID, and transaction history.
6. We do not collect or store full card numbers, CVV codes, or sensitive payment authentication data; Stripe processes these directly.
7. Support and communication:
8. Messages you send to our support email or through contact forms.
9. Feedback, survey responses, and other communications.

2.2 Information We Collect Automatically

When you use the Services, we may automatically collect:

1. Device and browser information (e.g., browser type, operating system, device type).
2. IP address and approximate location (city/region level, not precise GPS).
3. Log data (pages viewed, referring/exit pages, timestamps, and other usage information).
4. Basic cookie or similar identifier data, used for session management, authentication, and basic analytics.

If we implement analytics tools (e.g., a privacy-focused analytics service or standard web analytics), we will use them only to understand usage patterns and improve the Services, not to build advertising profiles.

2.3 Information Related to Email Messaging

For our email notifications, we collect:

1. Delivery and error status as provided by our email provider.
2. Email address and email subscription preferences (for any email notifications you choose to receive).

We use Postmark to send messages on our behalf.

3. How We Use Your Information

We use the information we collect for the following purposes:

1. To provide and maintain the Services
   • Enable you to create and manage an account.
   • Create, store, and deliver encouragement messages and reflections through secure web links.
2. To process payments and manage subscriptions
   • Work with Stripe to process one-time and recurring subscription payments.
   • Manage billing, invoicing, and subscription lifecycle (including cancellations).
3. To communicate with you
   • Send service-related emails (e.g., account changes, security alerts, subscription updates).
   • Respond to your support requests and questions.
   • Send optional encouragement-related email notifications, if you choose to receive them.
4. To improve and secure the Services
   • Monitor performance, usage, and trends to improve design and functionality.
   • Detect, investigate, and prevent fraud, abuse, or security incidents.
   • Enforce our terms, policies, and acceptable use standards.
5. To comply with legal obligations
   • Maintain records required for tax, accounting, and regulatory compliance.
   • Respond to lawful requests from public authorities, where required.

We do not build marketing profiles or sell your information to advertisers.

4. Legal Basis for Processing (U.S.-Focused Explanation)

Although we are not presenting ourselves as a GDPR controller, it can be helpful to explain our legal reasoning in plain language. We generally process your information because:

1. It is necessary to provide the Services you request, such as operating your account, sending email notifications, and processing payments.
2. We have a legitimate interest in operating, improving, and securing the Services in a way that does not override your privacy rights, such as preventing abuse, measuring performance, or retaining limited logs for security and compliance.

5. How We Share Your Information

We do not sell your personal information, email addresses, or user content. We share information only in the following limited ways:

5.1 Service Providers

We share information with trusted third-party service providers who help us operate the Services, including:

1. Stripe for payment processing.
2. Postmark for email delivery.
3. Cloud hosting, logging, monitoring, and error tracking providers.
4. Analytics providers (if implemented) to understand usage and improve the Service.

These providers are authorized to use your information only as necessary to provide services to us, and they are bound by appropriate contractual and security obligations.

5.2 Legal and Safety Requirements

We may disclose information if we believe in good faith that it is reasonably necessary to:

1. Comply with any applicable law, regulation, legal process, or governmental request.
2. Enforce our terms and policies and protect the integrity of the Services.
3. Protect the rights, property, or safety of AnonymouslyUrs, our users, or others.

5.3 Business Transfers

If we are involved in a merger, acquisition, or sale of all or part of our assets, your information may be transferred as part of that transaction, subject to continued protections consistent with this Policy.

6. Email Communications

6.1 Email Communications

1. We may send you service emails (for example, account notices, security alerts, or payment confirmations); you cannot opt out of critical service emails while still using the Services.
2. We may also send optional encouragement-related or informational emails; you can opt out of those at any time by using unsubscribe links or contacting us.

7. Data Retention

We retain information only as long as necessary for the purposes described in this Policy, unless a longer retention period is required or permitted by law.

7.1 Message Content and Message Bodies

1. Message content and associated reflections are retained for 30 days from creation, for user access, reliability, and support.
2. After this period, we delete or irreversibly anonymize prayer and message content, except where we are required to retain limited data for legal or security reasons.

7.2 Account and Subscription Data

1. We retain account information for as long as your account is active and for a reasonable period afterward (for example, up to 2 years) in case you choose to reactivate or we need to resolve disputes or enforce our agreements.
2. You may request deletion of your account as described in Section 8. Some information may be retained as required by law.

7.3 Payment and Billing Records

1. We retain payment-related records (e.g., transaction history, invoices, customer IDs) for approximately 7 years, consistent with common tax and accounting requirements.

When information is no longer needed, we will delete it or anonymize it so that it can no longer be linked to an identifiable user.

8. Your Rights and Choices

We aim to provide meaningful choices and control over your information.

8.1 Access, Update, and Deletion

Depending on how you use the Services, you may be able to:

1. Access and update your account information directly within your account settings.
2. Delete specific prayers or messages you have created, where this feature is available in the product.
3. Delete your account via in-app controls (once available) or by contacting us.

You can also contact us at our support email (listed in Section 15) to:

1. Request access to the personal information we hold about you.
2. Request correction or deletion of your personal information.
3. Request a copy/export of certain personal information, where technically feasible.

We may need to verify your identity before fulfilling certain requests. We may retain limited information where necessary for security, fraud prevention, legal obligations, or dispute resolution.

8.2 Email Preferences

1. Email recipients must opt in to receive future messages after initial contact.

9. Cookies and Similar Technologies

We may use cookies and similar technologies to:

1. Keep you signed in to your account.
2. Remember your preferences.
3. Perform basic analytics to understand how the Services are used.

You can control cookies through your browser settings. If you disable some or all cookies, parts of the Services may not function properly. If we add additional cookie-based tools (such as analytics or error tracking), we will update this Policy or our cookie disclosures to describe them.

10. Security

We take the protection of your information seriously and use a combination of technical and organizational measures designed to safeguard it. These measures include:

1. Encryption in transit (HTTPS) for web traffic.
2. Limited access controls so that only authorized personnel and systems can access production data.
3. Audit logging of critical operations (such as email consent changes and administrative actions).
4. Regular monitoring and review of system logs for suspicious activity.

However, no system can be guaranteed 100% secure. You are responsible for maintaining the confidentiality of your account credentials and for promptly notifying us if you believe your account has been compromised.

11. Children's Privacy

Our Services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take reasonable steps to delete it as soon as possible. If you believe a child has provided us with personal information, please contact us using the details in Section 15.

12. State-Specific Notices (U.S.)

Residents of certain U.S. states may have additional rights regarding their personal information under applicable privacy laws (for example, the California Consumer Privacy Act (CCPA) and similar state laws). Depending on your state of residence, these rights may include the ability to:

1. Request access to, or deletion of, certain personal information we hold about you.
2. Request information about how we collect, use, and disclose personal information.
3. Opt out of certain types of data "sales" or "sharing" as defined by state law.

We do not sell personal information as "sell" is typically defined under these laws. To exercise applicable rights, please contact us using the information in Section 15 and indicate that your request relates to state privacy rights; we will verify and respond in accordance with applicable law.

13. International Users

Our Services are operated from the United States, and your information may be processed and stored in the United States or other countries where our service providers operate. If you access the Services from outside the United States, you understand that your information may be transferred to and processed in the United States, where data protection laws may differ from those in your country.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. If we make material changes, we may also provide additional notice (such as by sending an email or displaying a banner on the site) as required by law. Your continued use of the Services after any changes become effective means that you accept the updated Privacy Policy.

15. Contact Us

If you have any questions or concerns about this Privacy Policy or our privacy practices, or if you wish to exercise your rights, you can contact us at:

1. Email: info@anonymouslyurs.net

We will do our best to respond promptly and in accordance with applicable laws.