Privacy Policy
Review how Word Covenant Ministry handles account data, session information, password reset flows, and private verse notes.
This Privacy Policy describes how Word Covenant Ministry processes information when you use the site, account-based features, password reset tools, and private verse notes.
The public production site address documented in this repository is https://wordcovenantministry.org.
1. Scope
This policy applies to Word Covenant Ministry site features, including account access, password reset workflows, and private verse notes.
2. Information the service processes
If you use account-based features, the service may process your account identifier, display name, email address, authentication session state, REST nonce session state, password reset workflow data, and your private verse notes.
WordPress manages password hashing and core account authentication. The service does not store your plain-text password as an application-owned field.
3. Authentication and session data
The service uses WordPress session and authentication cookies together with REST nonce protection for authenticated note requests.
Password reset links are generated through the WordPress password reset workflow and are intended to expire under the underlying WordPress reset mechanism.
4. Private verse notes
If you use private verse notes, the service stores the note text you write together with the associated translation, book, chapter, verse, and created/updated timestamps.
Private verse notes are designed to be visible only to the authenticated account owner through the private notes API surface.
5. Technical and operational data
The service and its underlying web infrastructure may process technical request information such as IP address, user agent, request time, request route, and security or error log data as part of normal site operation and protection.
The exact production log retention period is not identified in the current repository-backed draft.
6. Why the service processes information
Information is processed to provide account access, maintain authenticated sessions, issue password reset messages, store private verse notes, protect the service, investigate errors, and improve site operation.
7. Cookies
The service uses essential authentication and session cookies through WordPress account handling.
If you block essential cookies, authenticated features such as login state and private verse notes may not function correctly.
A separate cookie-consent banner is not part of the current implementation covered by this draft.
8. Sharing and service providers
Word Covenant Ministry may rely on hosting, infrastructure, security, and email-delivery providers that process information on behalf of the service as needed to operate the platform.
The current repository-backed draft does not confirm the exact production provider names for hosting, email delivery, or operational logging.
The service does not present itself as selling personal information or using private verse notes for behavioral advertising.
9. Retention
Account-related information may be retained while the account remains active and for a reasonable period afterward when necessary for security, dispute handling, or legal obligations.
Private verse notes remain available until they are deleted by the user or otherwise removed under account-related handling.
Password reset material is intended to expire through the underlying WordPress reset flow rather than remain permanently valid.
10. Access, correction, and deletion
Users can create, edit, and delete their own private verse notes through the existing authenticated note workflow.
This repository-backed draft does not confirm a self-service account deletion feature. Requests about personal information handling should be directed through the public contact method published on the site.
11. Security
The current implementation uses account authentication, REST nonce checks for authenticated note actions, ownership checks for private note access, and ordinary access-control boundaries.
No online service can promise perfect security, and this policy does not guarantee that every incident can be prevented.
12. Children's privacy
The service is not designed as an account platform specifically for children under 13, and it does not aim to knowingly collect personal information from children without appropriate permission.
13. Changes to this policy
If this policy changes materially, the service may update the page, document version, last-updated date, or other site notices.
14. Questions
Questions about these documents, account privacy, or personal information handling should be directed through the public contact information that Word Covenant Ministry publishes on this site. A dedicated public privacy email address or postal address is not separately identified in the current repository-backed draft.