Privacy and recovery

Profiles store your first name, last initial, chosen display name and optional avatar. A secure browser cookie keeps you signed in for up to 30 days. Save your recovery key privately: anyone with it can access your profile and prayer requests. Replacing the key signs out other devices.

Prayer text and optional email are available to you and authorized ministry moderators. Cloudflare hosts the service and its storage; if email delivery is configured, the notification provider processes the destination email. Prayer text is not included in notification emails.

Requests become unavailable after 90 days and are deleted during moderator maintenance. Withdrawal deletes the request immediately from application storage. Deleting a profile deletes its linked requests, notifications and photo. The owner profile cannot be deleted through the website. Hosting backups may retain earlier copies for the provider’s backup retention period.

Avatar photos are public to anyone with their image URL. Do not upload sensitive photos. Blur is a display effect; the original photo remains unblurred; hiding a photo keeps it stored, while Remove photo deletes it.

To sign in on another device, open Profile ID on your signed-in device and enter its temporary six-character code on the new device. Codes expire in two minutes and work only once. Closing the code window cancels it when connected; if the browser closes unexpectedly or loses connectivity, expiry remains the fallback. Approve only your own devices. Optional automatic approval allows the next device with the code to sign in without a second confirmation, and resets off for each new code. Your recovery key remains the fallback if no device is signed in. The old permanent six-character profile system has been retired.

Your profile role controls access. Prayer notifications stay in your private inbox until their request is deleted. Access-change history records who changed a role and when, without prayer text or credentials. We use short-lived hashed network identifiers for abuse prevention and keep moderator action records without prayer text. The map is provided by Google and may send your IP address to Google when loaded. You can use the directions link instead. When a worship stream is displayed, the embedded player connects to YouTube using its privacy-enhanced domain. YouTube receives your network and playback information; its player controls let you pause or enable sound.

For questions or deletion assistance, email [email protected].