Privacy Policy

Last updated: July 25, 2026

This is a template, not legal advice — have a lawyer review before launch. Depending on where you operate and who visits, laws such as GDPR, UK GDPR, or CCPA may require additional disclosures that this template does not include.

TCG Prayer (tcgprayer.com) collects as little as possible. This page explains, in plain words, what we collect, why, and what control you have over it.

What we collect

We collect three kinds of information, and only three:

• An anonymous session cookie. When you first use an interactive feature, we set a random identifier in a cookie (tcgp_session). It contains no name, no email, and nothing about you — it simply lets the site remember that content you created belongs to your browser, so you can amen a blessing once, see your own candles, and delete your own confessions. Details are in the cookie policy.
• Content you choose to submit. Blessings, candle messages, confessions, and curses you write are stored so they can be displayed according to your visibility settings. What you write is up to you — we ask you not to include personal information in these.
• Optional names and emails in forms. If you use the contact or corrections form, we receive the name and email you type so we can reply. We use them only for that conversation.

Payments

All payments are handled entirely by Stripe, our payment processor. We never see, receive, or store your card number or other full payment details. Stripe sends us only what we need to deliver what you bought: confirmation that a payment succeeded and which item it was for. Stripe’s handling of your payment data is governed by Stripe’s own privacy policy.

Public and private content

Some content has visibility settings. If you mark a blessing or other content as public, it can appear on public walls and leaderboards, visible to anyone, along with the display name you attached to it. If you keep content private, it is not shown on public pages. Confession walls display confessions without linking them to any identity beyond what you wrote in the text itself — another reason not to put personal details in a confession. Assume anything you set to public is, in fact, public.

Affiliate click counting

When you click an affiliate link (always labeled “Affiliate link”), we count the click on our own server before sending you onward. This counting is first-party and aggregate: we record that a link was clicked, not a profile of you. We do not do cross-site tracking, we do not share browsing data with advertisers, and we do not build advertising profiles. What the destination site (for example, TCGplayer) does once you arrive is governed by its own privacy policy.

No ads or analytics by default

This site ships with no advertising networks and no third-party analytics. Placeholder: if we ever add a privacy-respecting analytics tool or any other third-party service that processes visitor data, we will name it here, explain what it collects, and update the cookie policy accordingly before it goes live.

The Sunday Sermon newsletter

If you opt in to the Sunday Sermon on the sermon page, we store your email address and nothing else about you. It is used solely to send the weekly newsletter — never sold, shared, or used for any other purpose. Every email contains a one-click unsubscribe link that works without logging in; unsubscribing stops all sending immediately. You can also request full deletion of your address via the contact page. We never add anyone to the list who did not sign up themselves.

How long we keep data

Content you submit is kept until you delete it or we remove it under our moderation rules. The session cookie lasts one year. Contact form messages are kept as long as needed to handle the conversation. Payment records are retained as required for accounting and tax purposes.

Deleting your data

• Confessions: you can delete your own confessions yourself, free of charge, at any time. No paid product is ever required to remove your own content.
• Everything else: to have all content associated with your session removed, contact us via the contact page and we will delete it.
• Export placeholder: a self-service export of your content is planned; until it exists, contact us and we will provide a copy of your data manually.

Children

This site is intended for adult collectors. We do not knowingly collect personal information from children, and we do not knowingly accept payments from children. If you believe a child has submitted information or made a payment here, contact us and we will delete the information and refund the payment.

Changes to this policy

If our data practices change, we will update this page and the “last updated” date before the change takes effect.

Contact

Privacy questions and deletion requests: use the contact page. We read everything, usually by candlelight.