Privacy Policy Overview

AnonymouslyUrs.net (“AnonymouslyUrs,” “we,” “us,” or “our”) provides a faith-based encouragement and prayer platform that allows users to create, receive, and share anonymous encouragement messages.

This Privacy Policy explains how we collect, use, disclose, and protect information in connection with our website, web application, email messaging program, and related services (collectively, the “Services”).

By using the Services, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Services.

1. Scope and Who This Policy Covers

This Privacy Policy applies to:

1. Visitors to anonymouslyurs.net.

2. Users who create an account on AnonymouslyUrs.net.

3. Individuals who receive emails from AnonymouslyUrs.net.

This Policy does not cover how third parties (such as Stripe, or your email provider) handle your information; their privacy practices are governed by their own privacy policies.

We are based in the United States and primarily serve users located in the United States.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you provide when you use our Services, such as:

Account information:

• Email address.

• Display name or nickname.

• Password (stored in hashed form, not in plain text).

Recipient details for email:

• Recipient email address (for email notifications).

Payment and subscription information via Stripe:

• Nickname and email associated with your billing profile.

• Subscription plan details.

• Limited billing metadata we receive from Stripe, such as the last four digits of your card, card type, customer ID, and transaction history.

• We do not collect or store full card numbers, CVV codes, or sensitive payment authentication data; Stripe processes these directly.

Support and communication:

• Messages you send to our support email or through contact forms.

• Feedback, survey responses, and other communications.

2.2 Information Collected Automatically

When you use the Services, our hosting, security, authentication, fraud-prevention, and operational systems may process information such as:

1. Internet Protocol address.

2. Browser, operating-system, and device information.

3. Request timestamps, pages or endpoints requested, response status, and technical error information.

4. Session, authentication, security, and fraud-prevention identifiers.

5. Approximate location derived from an Internet Protocol address.

These operational records are used to operate, secure, troubleshoot, and protect the Services. They are separate from the limited public-site analytics described below.

2.3 Limited Public-Site Analytics

We use Plausible Analytics to understand aggregate use of a limited set of approved public pages. Automatic pageview collection is disabled. The application submits a pageview only after confirming that the page belongs to an approved public-route allowlist.

For approved public pages, Plausible may process or report:

1. A sanitized hostname and general public-page category.

2. Pageviews, visits, entry pages, and exit pages.

3. External referral source.

4. Browser, operating-system, and device category.

5. Country, region, and city derived from the network address.

6. Visit duration and scroll-depth engagement.

7. A short-lived daily identifier used to estimate aggregate visitors.

Plausible processes the Internet Protocol address and User-Agent to produce aggregate statistics, but does not store the raw Internet Protocol address or full User-Agent as part of the analytics record. Plausible does not use analytics cookies, browser cache, or persistent localStorage identifiers to recognize visitors across different days, websites, or devices.

Blog and Bible page addresses may be converted to general categories before being sent. Query strings, URL fragments, account identifiers, names, email addresses, prayer content, coaching content, Bible Study conversations, private messages, comments, and other user-generated content are not sent to Plausible.

Plausible analytics are not enabled for account, authentication, administrator, authenticated dashboard, Life Coach, interactive Bible Study, messaging, private Blog Studio, generated-prayer, saved-prayer, tokenized, development, diagnostic, or API routes.

Visits to public faith-related pages may reveal or suggest religious or spiritual interests. We therefore limit analytics to approved public-route categories, exclude private and interactive routes, and do not use public-page analytics for advertising or individual profiling.

2.4 Media Library Activity

We record limited activity associated with public Media Library resources.

A preview is recorded only when a visitor intentionally opens a resource preview. Automatic thumbnail or media loading is not counted.

A download event is recorded after a resource has been authorized and the server begins returning the download response. This indicates that a download response began; it does not prove that the complete file reached the visitor.

A Media Library activity record may contain:

1. Timestamp.

2. Approved action type.

3. Public resource identifier.

4. Resource category.

5. Action outcome.

6. A short-lived event identifier used to prevent duplicate recording.

These records do not contain a visitor or session identifier, account identifier, Internet Protocol address, User-Agent, referrer, query string, or free-form content.

2.5 Information Related to Email Messaging

For our email notifications, we collect:

1. Delivery and error status as provided by our email provider.

2. Email address and email subscription preferences (for any email notifications you choose to receive).

We use Postmark to send messages on our behalf.

3. How We Use Your Information

We use the information we collect for the following purposes:

To provide and maintain the Services

• Enable you to create and manage an account.

• Create, store, and deliver encouragement messages and reflections through secure web links.

To process payments and manage subscriptions

• Work with Stripe to process one-time and recurring subscription payments.

• Manage billing, invoicing, and subscription lifecycle (including cancellations).

To communicate with you

• Send service-related emails (e.g., account changes, security alerts, subscription updates).

• Respond to your support requests and questions.

• Send optional encouragement-related email notifications, if you choose to receive them.

To improve and secure the Services

• Monitor performance, usage, and trends to improve design and functionality.

• Understand aggregate interest in approved public pages and major site features.

• Measure public Media Library previews and initiated downloads.

• Evaluate which public features, content areas, and site improvements should receive priority.

• Monitor general device, referral, and engagement trends.

• Detect, investigate, and prevent fraud, abuse, or security incidents.

• Enforce our terms, policies, and acceptable use standards.

To comply with legal obligations

• Maintain records required for tax, accounting, and regulatory compliance.

• Respond to lawful requests from public authorities, where required.

We do not build marketing profiles or sell your information to advertisers. We do not use analytics information for advertising, cross-site tracking, selling visitor information, or individual behavioral profiling.

4. Legal Basis for Processing (U.S.-Focused Explanation)

Although we are not presenting ourselves as a GDPR controller, it can be helpful to explain our legal reasoning in plain language.

We generally process your information because:

1. It is necessary to provide the Services you request, such as operating your account, sending email notifications, and processing payments.

2. We have a legitimate interest in operating, improving, and securing the Services in a way that does not override your privacy rights, such as preventing abuse, measuring performance, or retaining limited logs for security and compliance.

5. How We Share Your Information

We do not sell your personal information, email addresses, or user content. We share information only in the following limited ways:

5.1 Service Providers

We share information with trusted third-party service providers who help us operate the Services, including:

1. Stripe for payment processing.

2. Postmark for email delivery.

3. Cloud hosting, logging, monitoring, and error tracking providers.

4. Plausible Analytics for aggregate measurement of approved public-site traffic and engagement.

Plausible may process public-site analytics information on our behalf in accordance with its service terms and data-processing practices.

These providers are authorized to use your information only as necessary to provide services to us, and they are bound by appropriate contractual and security obligations.

5.2 Legal and Safety Requirements

We may disclose information if we believe in good faith that it is reasonably necessary to:

1. Comply with any applicable law, regulation, legal process, or governmental request.

2. Enforce our terms and policies and protect the integrity of the Services.

3. Protect the rights, property, or safety of AnonymouslyUrs, our users, or others.

5.3 Business Transfers

If we are involved in a merger, acquisition, or sale of all or part of our assets, your information may be transferred as part of that transaction, subject to continued protections consistent with this Policy.

6. Email Communications

6.1 Email Communications

1. We may send you service emails (for example, account notices, security alerts, or payment confirmations); you cannot opt out of critical service emails while still using the Services.

2. We may also send optional encouragement-related or informational emails; you can opt out of those at any time by using unsubscribe links or contacting us.

7. Data Retention

We retain information only as long as necessary for the purposes described in this Policy, unless a longer retention period is required or permitted by law.

7.1 Message Content and Message Bodies

1. Message content and associated reflections are retained for 30 days from creation, for user access, reliability, and support.

2. After this period, we delete or irreversibly anonymize prayer and message content, except where we are required to retain limited data for legal or security reasons.

7.2 Account and Subscription Data

1. We retain account information for as long as your account is active and for a reasonable period afterward (for example, up to 2 years) in case you choose to reactivate or we need to resolve disputes or enforce our agreements.

2. You may request deletion of your account as described in Section 8. Some information may be retained as required by law.

7.3 Payment and Billing Records

1. We retain payment-related records (e.g., transaction history, invoices, customer IDs) for approximately 7 years, consistent with common tax and accounting requirements.

7.4 Analytics and Media Library Activity

1. Plausible currently retains aggregate analytics associated with our subscription for up to three years.

2. Plausible’s privacy-preserving visitor identifier is short-lived and is not used to recognize visitors across different days.

3. First-party Media Library activity records expire after 90 days.

4. Existing operational, security, registration, Prayer Messenger, billing, and subscription records continue to follow their existing retention rules.

5. Plausible analytics and first-party Media Library activity do not extend the retention period of prayer content, coaching content, private messages, or other user-generated content.

When information is no longer needed, we will delete it or anonymize it so that it can no longer be linked to an identifiable user.

8. Your Rights and Choices

We aim to provide meaningful choices and control over your information.

8.1 Access, Update, and Deletion

Depending on how you use the Services, you may be able to:

1. Access and update your account information directly within your account settings.

2. Delete specific prayer messages you have created, where this feature is available in the product.

3. Delete your account via in-app controls (once available) or by contacting us.

You can also contact us at our support email (listed in Section 15) to:

1. Request access to the personal information we hold about you.

2. Request correction or deletion of your personal information.

3. Request a copy/export of certain personal information, where technically feasible.

We may need to verify your identity before fulfilling certain requests. We may retain limited information where necessary for security, fraud prevention, legal obligations, or dispute resolution.

8.2 Email Preferences

1. Email recipients must opt in to receive future messages after the initial contact in the Prayer Messenger.

8.3 Analytics Choices

Browser privacy tools, script-blocking extensions, and network controls may prevent Plausible analytics from operating. Requests concerning our privacy practices may also be submitted using the contact information in Section 15.

9. Cookies and Similar Technologies

We use cookies or similar technologies where needed to:

1. Keep users signed in.

2. Maintain secure sessions.

3. Remember selected preferences.

4. Support fraud prevention, abuse prevention, and service security.

Plausible Analytics does not set analytics cookies and does not store a persistent analytics visitor identifier in browser localStorage.

The absence of an analytics cookie does not mean that no technical information is processed. Plausible may process the network address and User-Agent to generate aggregate device, location, and visitor statistics as described in Section 2.

You may control authentication and preference cookies through your browser settings. Disabling necessary cookies may prevent account or authenticated features from functioning correctly.

If we later add advertising technology, cookie-based analytics, session replay, or another materially different tracking tool, we will update this Policy and provide any notice or consent mechanism required before enabling it.

10. Security

We take the protection of your information seriously and use a combination of technical and organizational measures designed to safeguard it.

These measures include:

1. Encryption in transit (HTTPS) for web traffic.

2. Limited access controls so that only authorized personnel and systems can access production data.

3. Audit logging of critical operations (such as email consent changes and administrative actions).

4. Regular monitoring and review of system logs for suspicious activity.

However, no system can be guaranteed 100% secure. You are responsible for maintaining the confidentiality of your account credentials and for promptly notifying us if you believe your account has been compromised.

11. Children’s Privacy

Our Services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13.

If we learn that we have collected personal information from a child under 13, we will take reasonable steps to delete it as soon as possible. If you believe a child has provided us with personal information, please contact us using the details in Section 15.

12. State-Specific Notices (U.S.)

Residents of certain U.S. states may have additional rights regarding their personal information under applicable privacy laws (for example, the California Consumer Privacy Act (CCPA) and similar state laws).

Depending on your state of residence, these rights may include the ability to:

1. Request access to, or deletion of, certain personal information we hold about you.

2. Request information about how we collect, use, and disclose personal information.

3. Opt out of certain types of data “sales” or “sharing” as defined by state law.

We do not sell personal information as “sell” is typically defined under these laws.

To exercise applicable rights, please contact us using the information in Section 15 and indicate that your request relates to state privacy rights; we will verify and respond in accordance with applicable law.

13. International Users

Our Services are operated from the United States, and your information may be processed and stored in the United States or other countries where our service providers operate.

If you access the Services from outside the United States, you understand that your information may be transferred to and processed in the United States, where data protection laws may differ from those in your country.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page.

If we make material changes, we may also provide additional notice (such as by sending an email or displaying a banner on the site) as required by law.

Your continued use of the Services after any changes become effective means that you accept the updated Privacy Policy.

15. Contact Us

If you have any questions or concerns about this Privacy Policy or our privacy practices, or if you wish to exercise your rights, you can contact us at:

1. Email: info@anonymouslyurs.net

We will do our best to respond promptly and in accordance with applicable laws.