Privacy

The short version

• You can read every day of the journey without an account, an email address, or cookies.
• As a guest, your progress, reading settings, and any private notes are stored only in your own browser, on your own device. We never receive them.
• Accounts are optional. If you create one, we store your email address and journey progress so you can use them on any device. Private notes sync only if you turn that on, and they are encrypted.
• We use no advertising trackers, no social-media pixels, and no third-party analytics.
• Fonts and all page assets are served from our own domain. Your visit is not shared with font or script providers.

What is stored on your device

When you mark a day complete, change a reading setting, or write a private note, the site saves it in your browser’s localStorage under the key 21effects.journey.v1. That record contains:

• the journey identifier and which days you marked complete;
• the day you most recently opened, so we can offer “Continue”;
• your text size, contrast, and animation preferences;
• any reflection or evening-gratitude notes you chose to write;
• the time the record was last updated.

For guests, this information never leaves your device unless you export it yourself. It is not a cookie and is not sent with requests to our server. It stays in this browser only, so it won’t follow you to another device or browser, and it is removed if you clear your browser’s site data.

The legacy flipbook separately remembers the last page you viewed (key spiritualPrayerPage), also only on your device. If you choose an ambient sound, your choice and volume are remembered on this device (key 21effects.sound.v1). Sound never plays until you press Play.

Your controls

On My Journey you can:

• Export your progress and notes as a JSON file;
• Import a file you exported earlier, for example on another device;
• Clear all progress, settings, and notes from this device.

If your browser blocks storage, the journey still works, but nothing is kept after you leave the page. We tell you when this happens.

Server and hosting logs

The site is hosted on Cloudflare. Like any web host, Cloudflare processes basic technical request data, such as IP address, browser type, and the page requested, to deliver pages and protect against abuse. We don’t combine this with other data or use it to profile visitors. Prayers and notes are never part of these requests.

Analytics

We do not currently run analytics. If we add privacy-respecting, aggregate analytics in the future, we will update this notice first and never use advertising trackers.

Optional accounts

You can create a free account to keep your journey in step across devices. You sign in with a one-time link sent to your email, so there is no password. If you choose to, we store:

• Your email address, used only to send sign-in links. No marketing unless you separately ask for it.
• Your journey progress: completed days, the day you are on, reading settings, and when each changed.
• Private notes, only if you turn on note sync in Account settings. You see exactly which notes will be uploaded first. They are encrypted (AES-256-GCM) before they are stored. Turning note sync off deletes them from our servers.
• Records of your consent (what you agreed to, and when) and a sign-in session.
• Security data: a one-way hash of your network address when you request a sign-in link, used to prevent abuse. Sign-in links expire after 15 minutes and are deleted within a day.

Signing in uses one strictly necessary cookie (__Host-21e_sid), which keeps you signed in for up to 90 days. It is not used for tracking. Your account data is stored with Cloudflare (Workers and D1). We don’t sell or share it, and we never use it for advertising.

From Account settings you can download everything we hold about you as JSON, stop syncing notes, sign out, or permanently delete your account. Deletion removes your email, progress, notes, and consent records immediately.

Children

21 EFFECTS is intended for adults and for young people reading with a parent or guardian. Accounts are for people aged 16 and over. We don’t knowingly collect personal information from children.

Contact

A contact address for privacy questions will be published here before public launch.