Wordlight

Privacy notice

This notice applies to the wordlight.hu website. Data processing in the Wordlight app (Android, iPhone, and the browser version once you sign in) is described in a separate notice: https://prepperpapa.hu/en/app-adatvedelem/

Effective: [date of publication].

1. In brief

  • You do not need to register to read the site, and by default we place no cookies on your device.
  • We ask for your consent for two purposes, separately: the affiliate programme and anonymous visitor statistics. If you decline, everything works the same.
  • If you submit a prayer request, it becomes public: other visitors and users of the app can read it, and they also see your nickname and the approximate place (country and county, region or province). We never store or show an exact location.
  • We do not sell data and do not profile you.

2. Who handles your data

Controller: János László Nagy, sole proprietor (seat: 3128 Vizslás, József Attila út 15., Hungary; registration number: 63017434; tax number: 92514027-1-32). Contact for privacy matters: prepperpapa@gmail.com.

3. Server log

The site runs on a server of Hetzner Online GmbH (Nuremberg, Germany). The site keeps no access log, that is, we do not log which page you open. In case of an error or an attack attempt (for example a failed encrypted connection), the server's system log may record the IP address of the connecting device. We do not link this log to anything.

The home page loads the daily reading and prayer summary from your browser directly from app.prepperpapa.hu. This is the same server and the same controller, and the above applies to this request too: we keep no access log, and your browser sends no cookie. The summary is anonymous: it shows how many people read and prayed in the apps on a given day, and for how long on average, using only the data of those who switched on the anonymous statistics in the app; groups of fewer than ten are never shown. It contains no data about you as a visitor.

4. Cookies and the browser's local storage

What we store without consent, because the site needs it to work:

  • the language you chose (pp-nyelv, in your browser's local storage, only on this site);
  • your cookie decision (in your browser's local storage, for 365 days; if the scope of cookies changes, we ask you again).

What we ask your consent for. On your first visit a window offers two categories, each with equally weighted "Accept" and "Decline" buttons. Until you decide, no cookie is placed on your device. You can change your decision at any time under "Cookie settings" in the footer. The legal basis for both categories is your consent (section 155(4) of the Hungarian Act C of 2003 on Electronic Communications; where the data qualifies as personal data, GDPR Art. 6(1)(a)).

4.1. Affiliate programme. If you arrive through a partner's link (?ref=...) and consent, we remember the partner's code and the time of the click in a cookie (pp_ref, for 90 days). If you go on from here to the prepperpapa.hu checkout, the page passes the partner's code on in the link, so that the commission due to the partner can be determined after the purchase. With your consent the loader of the GoAffPro affiliate service also starts and places its own cookies (ref, cookies starting with gfp_, source, in some cases dcode, sitestripe). GoAffPro is provided by ARV Tech (1st Floor, New Mandi Area, Sirsa, Haryana, India), which is our processor (GDPR Art. 28); the data and your IP address may therefore reach India, for which the European Commission has not adopted an adequacy decision. Purpose: solely to determine which partner is due a commission if you buy within 90 days. The cookies contain nothing that refers to your name, e-mail address or payment.

4.2. Anonymous visitor statistics. With your consent we use Google Analytics 4 (provider: Google Ireland Limited) to see how many visitors come, which pages they view and where they arrive from. We use the same measurement as on prepperpapa.hu. Cookies: _ga and _ga_K4K2L8JMN5, for at most 14 months (browsers allow at most 400 days, so that is the actual duration); the data is also kept for 14 months. According to Google, GA4 does not log your IP address; we state this on the basis of Google's description. The data may also reach the United States; the transfer is based on the EU-US Data Privacy Framework, under which Google LLC is certified. We do not use it for advertising or profiling. If you do not consent, GA4 does not load at all.

5. Submitting a prayer request

What happens to your request. A prayer request you submit is public: it appears in the list and on the map of the website, and users of the Wordlight and PrepperPapa Bible apps can read it too. In the apps the reader's phone may machine-translate the request into the reader's language; the translation is made on the phone, and the text does not go to any third party for it. Machine translation may be inaccurate; the original text is always available. On the website, requests appear in their original language. People praying may also see the request in the guided prayer.

What you give and what we store:

  • the text of the request, its language and the category you chose;
  • the nickname the request appears under (you do not need your real name; if you leave it empty, "Anonymous");
  • the approximate place: country and county, region or province, never an exact address. If you allow location, your browser rounds your location, still on your own device, to the centre of an area of about 50 kilometres and sends only this rounded point; from it we determine the country and the region, and with the request we store and show only these. Your exact location does not reach us. If you do not allow it, you choose the country and the region from the list yourself. We use the rounded point only to determine the country and the region, and do not store it afterwards;
  • your e-mail address: we send the confirmation e-mail to it, and your request appears only after you open the link in the e-mail. With the other link in the e-mail you can delete your request later. We do not store your e-mail address: we pass it once to the e-mail sending service to send the message (section 7), and with your request we keep only a code derived from it with a secret key, from which the address cannot be read. The e-mail contains only the links, not the text of your request;
  • the time of submission, the state of the request (active, answered, closed, deleted, held for moderation), the thank-you text if you write one later, and the reports received about the request.

We use your IP address only in the server's memory, to limit the number of submissions; we do not store it. If you report a request, we derive from your IP address, with a secret key, a code that changes daily, and store it with the report, so that you can report the same request once a day; even then we do not store the IP address itself. To filter out robots, your browser solves a short computing task before submitting, which our own server checks; the task's program is also part of the website, we use no external service, and it places no cookie.

Sensitive data. A prayer request may reveal your religious beliefs and is often about health. So before you submit, we ask for your explicit consent to publication with a separate checkbox (GDPR Art. 9(2)(a)). Do not write identifiable data about others: do not put a full name, address, phone number, e-mail address or bank account number in the request. You can write "I ask for prayer for my mother", but not who she is and where she lives. Our filter holds back such data.

Moderation. The request appears immediately after it is submitted. An automatic, rule-based filter holds back, until a person reviews it, a request containing offensive text, a phone number, an e-mail address, a messenger handle, a web address, a full name, a bank account number, a request for money or donations, text that looks like program code, or text suggesting a risk of self-harm, also when written in a disguised way; a request that almost word for word repeats one submitted in the last 7 days; every new request while an unusually large number arrive within an hour; and a request reported by at least three people. The final decision (shown or not) is made by a person. After confirmation the page shows whether your request has been published or is waiting for review. Because we do not store your e-mail address, we cannot send you an e-mail about the moderation decision: if your request does not appear in the list, we did not allow it to be published, and you can ask for the reason at prepperpapa@gmail.com. Anyone can report a request they consider against the rules. The detailed rules are in the Terms of Use: https://forum.prepperpapa.hu/t/felhasznalasi-feltetelek-terms-of-use/46

Who sees what about praying. If someone prayed for your request, you see how many prayed, and on the map where from: the centre of an area of about 50 kilometres, never an exact place. Nobody sees the names (nicknames, profile names) of those who prayed. If only one person prayed from an area, someone who knows them may infer who it could have been.

How we record praying. When someone prays for a request (or for a topic of the guided prayer), the server stores only this: for which topic, on which day, from which area of about 50 kilometres, and how many. We do not store who prayed: no name, no account, no e-mail address, no device ID. What you prayed for is known only to your own phone; your phone also shows you the thank-you reply, from the state of the request. From these numbers we cannot identify anyone, so deleting an account does not affect them either; this does not rule out the inference described above.

Purpose: publishing the prayer request and praying together. Legal basis: your explicit consent (GDPR Art. 6(1)(a) and Art. 9(2)(a)); filtering and handling reports are a legitimate interest (Art. 6(1)(f)); acting against illegal content is a legal obligation (Art. 16 of Regulation (EU) 2022/2065, the DSA).

Retention: an unconfirmed request is deleted after 24 hours. An active request stays up for 30 days. A closed, expired or deleted request, together with the code derived from it, is deleted after 30 days; the number of prayers remains in the statistics without name or text. Reports are kept for 12 months from the moderation decision. Deleted data may still appear in backups for at most about 12 weeks.

Withdrawal and deletion: you can withdraw your consent at any time by deleting your request with the link in the confirmation e-mail, or at prepperpapa@gmail.com. Publication before the withdrawal remains lawful. What others have read or saved by then, we cannot take back.

Age: you can submit a prayer request from the age of 16; if you are younger, with the consent of your parent or guardian. You declare this when submitting.

6. Signing in to the app

From the site's menu you can sign in to the browser version of Wordlight. There the app's notice applies: https://prepperpapa.hu/en/app-adatvedelem/

7. Who we pass data to

  • Hosting: Hetzner Online GmbH (Germany), processor.
  • Affiliate programme: ARV Tech, provider of GoAffPro (section 4.1), only with consent.
  • Statistics: Google Ireland Limited (section 4.2), only with consent.
  • The confirmation e-mail: it is sent from info@wordlight.hu by Brevo as our processor (Brevo, société par actions simplifiée, Paris trade register number: 498 019 298, seat: 9-17, rue Salneuve, 75017 Paris, France). The e-mail is plain text and contains no tracking image. Brevo may transfer data outside the EEA; the safeguards (standard contractual clauses, EU-US Data Privacy Framework) are set out in Brevo's data processing agreement.
  • Authorities, where the law requires it.

We do not sell data and do not pass it on for advertising.

8. Your rights

Access, rectification, erasure, restriction, portability, objection to processing based on legitimate interest, and withdrawal of consent at any time (GDPR Arts 15-21). We answer your request within one month. Because the website has no accounts, you need to give us the details needed to find your data (for example the text and time of your request, or your e-mail address).

Complaint: National Authority for Data Protection and Freedom of Information (NAIH), 1055 Budapest, Falk Miksa utca 9-11., Hungary; postal address: 1363 Budapest, Pf.: 9.; +36 (1) 391 1400; ugyfelszolgalat@naih.hu; naih.hu. You may also turn to a court.

9. Automated decisions, profiling

There is no profiling. The prayer-request filter is automatic, but it only holds requests back; the final decision is made by a person (section 5).

10. Changes

If this notice changes materially, the date above shows it, and if the scope of cookies changes, we ask for your consent again.