Privacy Policy

Last updated November 3, 2026

You can use Orahly's Scripture tools without an account. Email registration and email delivery are currently paused. SMS pre-order availability is shown on the plans page. No advertising or analytics script is active in this version. If checkout is closed, no new phone numbers are collected.

Saved verses and browser preferences

Saved verses stay in this site's local browser storage. Export creates a reference-only JSON file on your device. Import sends each reference to Orahly to retrieve its authentic text; your complete collection is not uploaded or synchronized. Clearing this site's storage removes the collection. The free extension stores theme and translation preferences locally and includes its readings in the downloaded package.

Clipboard and share images

Copying a verse uses your browser's clipboard permission. Share images are created in your browser; no uploaded photo or external image service is involved.

AI questions, when enabled

Bible Chat sends your submitted question and selected Scripture to the configured provider, DeepSeek or Google Gemini. The availability line names the active model. Avoid sharing sensitive personal details. The provider processes those requests under its own terms and privacy practices. Orahly does not store question or answer text on its server. Responses stay on the current page until you leave or reload.

On your first enabled chat request, an essential cookie identifies this browser for its weekly allowance. It lasts up to one year. The server stores only a hash of that random identifier, request times, and completion status. Records older than 14 days are removed when the next chat reservation is made. Clearing the cookie resets the browser identifier; it is not an account. Site-wide capacity limits also apply.

When AI is enabled, a separate daily network limit groups an IPv4 address or an IPv6 /64 network. A process-specific salted hash is kept in memory until the next UTC day or a server restart. Raw IP addresses are not stored by this guard, and no browser fingerprint is created. People on the same shared network can reach this limit together. Retry after 00:00 UTC; the free Scripture tools remain available.

Server requests

Your browser sends ordinary website requests, including any book, topic, translation, or reference in the address. Application logs record request identifiers, methods, and timing, without logging your search queries, question bodies, or IP addresses. Hosting infrastructure and AI providers may process network information needed to deliver their services.

SMS pre-orders and payments

When checkout is enabled, we store your encrypted phone number, its last four digits, translation, timezone, preferred hour, consent and accepted-terms version, and payment/order metadata. The phone encryption key stays outside the database. A private essential cookie identifies the browser used to manage your order; clearing it removes that browser access. Waffo collects billing details, payment information and a receipt email under its own privacy policy. Receipt emails are separate from the paused daily email service. We do not store card numbers or full payment notification bodies.

We keep order and consent records for support, refunds and applicable recordkeeping obligations. The operator will publish jurisdiction-specific retention terms before Live checkout opens. For access or deletion requests, contact support; some transaction records may need to be retained.

Previously registered email data

We are not accepting new email registrations or sending email. If you previously registered, the stored record includes your email address, edition, timezone, preferred hour, consent version and date, confirmation state, and delivery metadata. Existing records have not been converted into SMS subscriptions. If email delivery is offered again, its status and provider processing will be disclosed before activation. No advertising or tracking pixels are included.

Each email includes links to change preferences, unsubscribe, and delete your active subscription data. Keep these personal links private. Unsubscribing stops queued messages; a message already being sent may still arrive. Delivery jobs record status and attempt times, without storing the message body. Permanent bounces and complaints suppress further sending.

Unconfirmed registrations expire after 90 days, and unsubscribed records after 30 days, through the background cleanup process. Delivery and feedback metadata are retained for up to 90 days. Active subscriptions remain until removed; suppressed addresses remain to prevent repeated sending unless you request deletion. Deletion removes the active records; operator-managed backup copies may remain under their separate retention. Changes to this policy do not enroll you in a paid service.

External links and later services

Crisis support links lead to independent services with their own privacy practices. Choose whether to contact those services. Accounts and automatic SMS sending are not active. Payment availability is disclosed before checkout. Email registration, confirmation and sending are paused. This policy will be reviewed before further services are introduced.