Legal

Privacy Policy

Last updated: 10 June 2026

1. Controller

Leo Laut, AltarPray
Bleicherweg 10
8002 Zürich, Switzerland
Email: vow@altarpray.com

This policy is based on the Swiss Federal Act on Data Protection. The EU/EEA GDPR and other mandatory privacy laws apply where their territorial requirements are met.

2. Your written reflection

The text you enter is held in your browser and sent briefly to our checkout endpoint only to validate that it is present and no longer than 500 characters. It is not intentionally retained, logged, published, placed in a URL, stored in a database, sent to Stripe, included in Stripe metadata, or used for analytics or advertising.

3. Payments

Stripe processes payments and may receive payment details such as amount, currency, payment status, contact information entered during checkout, and fraud-prevention signals. We do not receive or store complete card details. Stripe's policy is available at stripe.com/privacy.

4. Server and security logs

Our hosting and infrastructure providers may process IP address, device/browser data, requested URL, timestamp, and technical error data to operate and secure the service. Reflection text is not intentionally written to application logs.

5. Consent, analytics, and advertising

Your consent choice is stored locally in your browser. Optional Google Analytics, Meta Pixel, or TikTok Pixel technologies load only after you accept optional tracking and only when their production identifiers are configured. We do not send reflection text, Stripe identifiers, or sensitive categories to these services.

6. Purposes and legal bases

• Contract performance: providing the digital experience and payment flow.
• Consent: optional analytics and advertising measurement.
• Legitimate interests: service security, fraud prevention, and technical reliability.
• Legal obligations: payment, accounting, and tax records where required.

7. Retention and international transfers

Reflection text is not intentionally retained. Payment and accounting records are kept for legally required periods. Security logs and analytics data are retained according to provider settings and necessity. Providers may process data outside Switzerland or the EEA using applicable safeguards.

8. Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability, or object to processing. You may withdraw optional tracking consent at any time by clearing site storage. Contact vow@altarpray.com.

9. Children

The service is not directed at children under 16, and we do not knowingly collect their personal data.

10. Changes

Material changes will be published here with an updated revision date.