Privacy
We care, be aware
Last updated October 7, 2026. This describes how the site works today.
What is stored
- Your account: your email address, the name you choose, when you agreed to the Sacred Aspirations, Foundational Understanding, and Tenets, and whether you gave permission for change notices. Your password is kept only as a one-way hash; no one can read it, including those who run the site.
- Considerations you submit: the text, the book it belongs in, and a link to your account. Once published, it shows the name you chose.
- Reactions: the reactions attached to Considerations.
- Stories in Hear My Voice: the text, what it speaks to, and a link to your account so you can see its status and withdraw it.
- Glossary suggestions and issue reports: the text and a link to your account.
- Sign-in records: our database provider keeps a log of sign-ins and account changes, including IP address and browser type.
- Hosting logs: our hosting provider records requests to the site, including IP address, the page, and the time.
What is not done
- No advertising, analytics, or tracking scripts. No outside fonts or scripts load.
- Nothing is sold or shared for marketing.
- The only cookie is the sign-in cookie, set when you sign in so you stay signed in.
Who can see what
- Anyone: published Considerations with the name you chose; published stories, with no name; totals for hearts, mending hearts, gold stars, and thumbs up.
- Admins, through the site: Considerations and stories waiting for review; totals for thumbs down and the trigger flag; who sent each glossary suggestion and issue report. The site never shows admins who wrote a story, and no one can see who gave a particular reaction.
- Whoever manages the database and hosting accounts: everything stored, including email addresses and which account wrote each story. They can read it directly in the database. It is not hidden or encrypted from them.
- Service providers: Supabase (database and sign-in), Vercel (hosting), and Resend (sending email, which means it handles your email address and the content of each email). They run these services under their own policies and may store data outside your country.
- Legal demands: anything stored here, or by these providers, could be disclosed if the law requires it. Nothing here is end-to-end encrypted. Your records here help show your religious dedication to the Sisters of Sonder, and we are happy to provide them on your behalf if requested by a lawyer.
How it is protected
The site is only reached over an encrypted connection (HTTPS). The database provider encrypts stored data. Access rules in the database decide what each person can see or change through the site, so a member cannot read another member鈥檚 unpublished work or another member鈥檚 email address.
You are emailed to confirm your account and to reset your password. If you gave permission, you may also get a notice when the wording of the canon changes significantly or a new item is added. These notices are written by an admin, go out no more than once every 30 days, and can be turned off on your account page.
How long it is kept
Until you delete it, or an admin removes it. There is no automatic deletion schedule. Our providers keep their own logs for as long as their policies say.
Your choices
- Withdraw a story at any time from your account page. It is deleted completely.
- Delete your account from your account page. This deletes your email address, profile, Considerations, and reactions. Stories you have not withdrawn stay published, with no link to you; withdraw them first if you want them gone. Accounts that hold or have held authority are removed by the Council instead; ask through Report an Issue.
- Change notices can be turned on or off on your account page.
Questions
Members can ask through Report an Issue. There is not yet a public contact address for people without an account.