Privacy & Data Policy

1. Core Principles

Quillin operates on the discipline of quietness and strict data minimization. We do not operate an advertising model, we never sell personal information, and we do not utilize behavioral surveillance trackers or commercial data brokers.

2. Data Collection & Access Boundaries

• Prayer Requests: Stored securely in our encrypted database. Prayer content is never published publicly, never indexed in RSS or search engines, and is accessible solely by Kit within the private administrative console.
• Correspondence & Contact: Name, email, and inquiry messages are received directly by Kit for personal correspondence.
• Reader Reflections (Comments): Submitted names and reflection text are published publicly only after editorial approval by Kit. Private emails provided are held strictly for moderation and are never rendered in public HTML.
• Newsletter Subscriptions: Stored with explicit double opt-in consent tokens. Readers may unsubscribe at any moment with a single click.

3. Infrastructure & Technical Processing

The journal is hosted on Cloudflare Workers, Cloudflare D1, and Cloudflare R2 with encryption at rest. To prevent abuse and spam, client IP addresses are temporarily hashed using a one-way salted SHA-256 function rather than stored in raw plaintext.

4. Data Retention & Erasure

You retain the right to request the complete deletion of any submitted correspondence, prayer request, comment, or newsletter subscription at any time via our Contact page.