Your data, plainly.

What we collect

• Email — when you sign up for the free Transmission signal.
• Account — if you create one: your email and, for email/password accounts, a password we store only as a salted one‑way hash (never in plain text). Optional profile details you choose to add — first name, birthday, a chosen color and glyph.
• Google sign‑in — if you sign in with Google, we receive your email address and basic profile (name) from Google to create and identify your account. Nothing is posted to your Google account.
• Desires & posts — the text you post to the Congregation, plus an optional name (or anonymous).
• Order information — name, shipping address, contact, collected at checkout to fulfill your order.

Where it is stored

• Cloudflare — emails, accounts, posted desires, and the signal feed live in a Cloudflare D1 database; images on Cloudflare R2; hosting on Cloudflare's network.
• Fourthwall & its payment processor — checkout, payment, and fulfillment run through Fourthwall and its processor. We never see or store your card details.
• Resend — sends our transactional and signal emails (verification, password reset, the Transmission).
• Google — only if you choose Google sign‑in, to authenticate you.
• Buffer / Instagram — used only to publish our own posts.

How we use it

To send the free Transmission signal, to create and secure your account, to display approved desires on the Congregation wall, and to fulfill and support your orders. Nothing else.

Cookies & tracking

We set only the cookies the site needs to work: a session cookie when you sign in, a short‑lived security cookie during Google sign‑in, and a preference cookie that remembers your light/dark theme. We run no third‑party analytics, no advertising pixels, and no cross‑site trackers. Because these cookies are strictly necessary, there is no consent wall to click through.

We do not sell your data

We never sell or share your personal information for advertising. Unsubscribe from the signal anytime; ask us to delete anything we hold.

How long we keep it

Signal emails: until you unsubscribe. Accounts and posts: until you ask us to delete them. Order records: as long as tax and consumer law require. When you ask us to delete your data, we remove what we are not legally required to keep.

International visitors (GDPR / UK GDPR)

If you are in the EU or UK: our lawful bases are your consent (the signal and optional profile details), contract (fulfilling your orders), and legitimate interests (securing the site and operating the Congregation). You have the right to access, correct, delete, export, restrict, or object to our use of your data, and to withdraw consent at any time. Our processors are listed above; some are based in the United States, and data may be transferred and stored there. Email us to exercise any right.

Your California rights (CCPA / CPRA)

California residents have the right to know what personal information we hold, to delete it, to correct it, and to opt out of any "sale" or "sharing" (we do neither). Exercising these rights never changes how we treat you. Email us to make a request; we verify and respond within the timelines the law requires.

Children

This site is not directed to children under 13, and we do not knowingly collect their information.

Contact

Requests or questions: psychedleo@gmail.com · contact page.