Sign in Subscribe

Privacy Policy

Effective date: 2025-10-27
Controller: tegami.jp.net ("we", "us", "our")
Contact (privacy requests): privacy@tegami.jp.net

This notice applies to visitors, free members, and paid members of tegami.jp.net (the "Services"). It describes the personal information we collect, how we use it, the legal bases for processing, disclosures to service providers, retention, your rights, regional notices, security, and changes to this policy.

Personal Information We Collect

Information you provide

  • Account and membership: email address, display name, hashed password, plan status, subscription preferences.
  • Billing: subscription status, invoice, receipt and tax metadata, payment confirmations, refunds and chargebacks. We do not store full payment card numbers or CVV.
  • Communications: messages you send through support or contact forms.
  • Community inputs: comments or reactions if enabled.

Information collected automatically

  • Technical and usage: IP address, user agent, device or browser type, language, referrer, timestamps, page views, error and performance logs.
  • Cookies and similar technologies: identifiers used for authentication, access control, preferences, and analytics or measurement.

Information from service providers

  • Payments – Stripe: transaction confirmations, limited card metadata (brand and last four digits), invoices and tax data.
  • Email delivery – Mailgun: recipient addresses, message headers and message content as necessary to deliver emails, and deliverability events such as bounces, complaints and blocks.
  • Infrastructure and security – Cloudflare, including Workers: request telemetry such as IP address, user agent and headers for security and performance.
  • Domain and DNS – Porkbun: domain name services and DNS hosting metadata.
  • Scripture application programming interfaces: request data necessary to return Scripture passages, such as verse references and technical data.
  • Analytics – Google Analytics 4: aggregated engagement measurements.
  • Hosting – for example PikaPods: infrastructure and storage metadata.

Purposes of Processing

  • Operate the Services, authenticate users, manage memberships and paywalled access, and provide support.
  • Process payments, subscriptions, invoices, refunds and taxes.
  • Send newsletters and account emails, and maintain suppression lists for unsubscribes, bounces and complaints.
  • Protect security, prevent fraud and abuse, and ensure availability and performance.
  • Conduct aggregate analytics and service improvement.
  • Comply with legal obligations and enforce terms.
  • Contract – to provide your account, paid access and necessary service communications.
  • Consent – for marketing emails and for non‑essential cookies or analytics where required. You may withdraw consent at any time.
  • Legitimate interests – site security, prevention of abuse, service improvement and basic analytics, balanced against your rights and freedoms.
  • Legal obligation – tax and accounting retention and responding to lawful requests.

Payments

Payments are processed by Stripe. We receive billing confirmations and limited payment metadata to administer accounts. We do not store full card numbers or CVV.

Email Delivery and List Practices

Marketing emails are sent only to recipients who have provided explicit, provable consent. We do not use purchased, rented, scraped or third‑party lists. We retain consent records and honor opt‑outs without undue delay. Unsubscribe links are present in each marketing email. Transactional or account messages may omit an unsubscribe link where not appropriate. Suppression lists prevent further messaging to unsubscribed, bounced or complained addresses.

Membership and Access Control

The Services run on Ghost for content management, member sign‑ups, authentication and paywalled access. Essential cookies or local storage may be set for session continuity and access control.

Cookies and Similar Technologies

Cookies and similar technologies are used for essential functions such as authentication and access control, for preferences, and for analytics and measurement. Regional controls are provided where required. You may also manage cookies in your browser settings.

Analytics

Google Analytics 4 provides aggregate engagement reporting using cookies or similar identifiers. We do not use Google Analytics 4 to identify you personally.

Email measurement. Marketing emails may include a small open‑tracking image and click‑through measurement via a tracking domain. You can limit open tracking by disabling remote images or viewing emails in plain text.

Use of Third‑Party Artificial Intelligence Services

We may use third‑party artificial intelligence services to assist with drafting, editing, categorizing or generating site content and operational communications. If you include personal information in content or messages you submit, that information may be processed by such providers acting as our processors subject to their terms. We do not require you to include personal information in prompts.

Artificial intelligence service providers used in content operations

Disclosures to Service Providers and Key Vendors

Processors act on our instructions and are subject to contractual or published policy obligations to protect personal information. Our processors may engage sub‑processors such as infrastructure or content delivery networks. Those sub‑processors are bound by equivalent data protection obligations and are used only for the purposes described in this policy.

Scripture Application Programming Interfaces Privacy Notes

Where a Scripture application programming interface provider requires a fair‑use script or telemetry to enforce display limits, anonymized usage data may be collected by that provider. We do not combine Scripture application programming interface telemetry with billing information.

International Transfers

Where personal information is transferred outside your region, appropriate safeguards for international transfers are used, including Standard Contractual Clauses and provider measures.

Retention

  • Account data: retained for the life of the account and as required to operate the Services, with deletion or anonymization on verified request subject to legal retention.
  • Billing and tax records: retained for statutory periods, typically seven to ten years depending on jurisdiction.
  • Security and deliverability logs: retained for limited operational periods and then minimized or anonymized.

Your Rights

Depending on jurisdiction, you may have rights to access, rectification, erasure, portability, restriction, objection and withdrawal of consent. Requests may require verification. Contact privacy@tegami.jp.net.

Regional Notices

European Union and United Kingdom
You have the rights listed above and the right to lodge a complaint with your supervisory authority. Where we transfer personal information outside the EU or UK, we use lawful safeguards. Legal bases are set out in the section titled “Legal Bases for Processing in the European Union and the United Kingdom.”

Canada
We follow the Personal Information Protection and Electronic Documents Act. You may request access to and correction of personal information and may challenge our compliance by contacting us at privacy@tegami.jp.net. Safeguards are applied appropriate to the sensitivity of the information.

United States
Residents of certain states may have rights to know or access, delete, correct and port personal information, and to opt out of sale or sharing of personal information as defined by law. We do not sell personal information and we do not share personal information for cross‑context behavioral advertising. We do not use or disclose sensitive personal information in ways that require a right to limit. Appeals processes are supported where required by law.

Security

Administrative, technical and physical safeguards are applied appropriate to the information processed.

Changes to This Policy

This policy may be updated. Material changes will be indicated by an updated effective date and, where required, additional notice.