Your data, plainly.

What we collect

• Email — when you sign up for the free Transmission signal.
• Account — if you create one: your email and, for email/password accounts, a password we store only as a salted one‑way hash (never in plain text). Optional profile details you choose to add — first name, birthday, a chosen color and glyph.
• Google sign‑in — if you sign in with Google, we receive your email address and basic profile (name) from Google to create and identify your account. Nothing is posted to your Google account.
• Desires & posts — the text you post to the Congregation, plus an optional name (or anonymous).
• Order information — name, shipping address, contact, collected at checkout to fulfill your order.

Where it is stored

• Cloudflare — emails, accounts, posted desires, and the signal feed live in a Cloudflare D1 database; images on Cloudflare R2; hosting on Cloudflare's network.
• Square & Printful — checkout and payment run through Square; printing and fulfillment run through Printful. We never see or store your card details.
• Resend — sends our transactional and signal emails (verification, password reset, the Transmission).
• Google — for sign‑in, if you choose it, and for Google Analytics, which runs on every visit (see Cookies & tracking below).
• Buffer / Instagram — used only to publish our own posts.
• Cloudflare Turnstile — verifies you are not a bot on signup, checkout, and the Congregation's forms, without a puzzle or a tracking cookie. See the Cloudflare Turnstile Privacy Policy.

How we use it

To send the free Transmission signal, to create and secure your account, to display approved desires on the Congregation wall, and to fulfill and support your orders. Nothing else.

Cookies & tracking

We set the cookies the site needs to work — a session cookie when you sign in, a short‑lived security cookie during Google sign‑in, and a preference cookie that remembers your light/dark theme — none of which require a consent wall.

Google Analytics. We also run Google Analytics (GA4) on every visit to understand traffic and how the site is used — pages viewed, approximate location, device type. Google Analytics sets its own cookies and may process your IP address as part of that. We run no advertising pixels and no cross‑site retargeting trackers. Read Google’s policy on data from partner sites, or opt out site‑wide with the Google Analytics Opt‑out Browser Add‑on.

We do not sell your data

We never sell or share your personal information for advertising. Unsubscribe from the signal anytime; ask us to delete anything we hold.

How long we keep it

Signal emails: until you unsubscribe. Accounts and posts: until you ask us to delete them. Order records: as long as tax and consumer law require. When you ask us to delete your data, we remove what we are not legally required to keep.

International visitors (GDPR / UK GDPR)

If you are in the EU or UK: our lawful bases are your consent (the signal and optional profile details), contract (fulfilling your orders), and legitimate interests (securing the site, operating the Congregation, and basic traffic analytics). You have the right to access, correct, delete, export, restrict, or object to our use of your data, and to withdraw consent at any time. Our processors are listed above; some are based in the United States, and data may be transferred and stored there. Email us to exercise any right.

Your California rights (CCPA / CPRA)

California residents have the right to know what personal information we hold, to delete it, to correct it, and to opt out of any "sale" or "sharing" (we do neither). Exercising these rights never changes how we treat you. Email us to make a request; we verify and respond within the timelines the law requires.

Children

This site is not directed to children under 13, and we do not knowingly collect their information.

Contact

Requests or questions: psychedleo@gmail.com · contact page.