Privacy Policy

Ochlos ("we," "us," "our") is an Arizona nonprofit corporation operating the community at ochlos.org. This policy explains what we collect, why, and what you can do about it.

What we collect

• Account info. When you register, we store your handle, hashed password (we never see your plaintext password), and — if you provide one — your email address.
• Content you share. Messages, prayer requests, verse-wall reflections, posts, comments, and any images you upload. Prayer-wall submissions can be anonymous if you choose.
• Light technical data. IP address, browser type, and timestamps — used for abuse prevention and operations. We do not use third-party advertising trackers.
• Cookies. A session cookie keeps you signed in. We do not set advertising cookies.

How we use it

• To run the service: authenticate you, deliver messages, store prayer requests, render your profile.
• To keep the community safe: rate limiting, moderation, abuse investigation.
• To email you about your account: password resets, prayer-wall "manage your prayer" links, and (with consent) room broadcast notifications.

We do not sell your data. We do not share it with advertisers.

Who can see what

• Public: the prayer wall, verse wall, directory, social feed posts marked Public, and your profile page (if registered).
• Friends only: social posts you choose to scope to friends.
• Anonymous prayer requests: only your reflection text is shown; your handle is hidden.
• Hosts & admins: can see all posts/messages they moderate, plus audit logs of moderation actions.

Service providers we use

• Cloudflare — site hosting, DNS, DDoS protection.
• Fly.io — chat backend compute and storage.
• Cloudflare R2 — encrypted image storage (avatars, cover photos, post images).
• Resend — transactional email (password reset, verification, prayer-wall manage links).
• Stripe — donation processing (when you donate). Stripe handles payment data directly; we never see card numbers.

Your choices

• Edit or delete your profile, posts, prayer requests, and comments from your account.
• Submit prayer requests anonymously.
• Email hello@ochlos.org to request export or deletion of your data.
• Block users to hide their content from your view.

Children

Ochlos is not directed to children under 13. If you believe a child has registered, please contact us and we will remove the account.

Changes to this policy

We will update the "Last updated" date when we change this policy. Material changes will be announced on the site.

Contact

Questions? Email hello@ochlos.org.

---

This is a working draft and not legal advice. Final wording is subject to review.