Privacy policy

There is no advertising and no analytics or tracking on this site.

Like every website, our server receives your IP address and browser type with each request so it can send you the page. Our hosting provider handles this to run the site; we do not use it to build a profile of you.

Some parts of a page load from other websites: map tiles come from OpenFreeMap, and people group photos come from the sites credited on each photo, such as Wikimedia Commons, Joshua Project and peoplegroups.org. When your browser loads them, those sites receive your IP address and browser type under their own privacy policies.

Your browser keeps your pray-through progress and a random anonymous ID. That ID is not linked to your name, email or device.

Each time you click “I prayed”, we record the people group, the country, the time and that anonymous ID, and your account if you are signed in. We use these records to count prayers and to show the people groups that have had the fewest prayers first.

To stop abuse, the server briefly holds your IP address in memory to limit how many prayers can be recorded in a short time. It is not saved.

An account is optional. It lets your progress follow you between devices. With an account we keep:

• Your email address and the name you give us.
• Your password, stored only as a one-way hash that cannot be turned back into the password.
• If you sign in with Google: your Google account ID, name, email address and profile photo.
• If you sign in with Apple: your Apple account ID, your email address (which may be an Apple private relay address) and your name if you share it. We also keep a token from Apple, encrypted, so we can withdraw the site’s access to your Apple account when you delete your account.
• Your pray-through progress for each country and the prayers you have recorded.
• For each device you are signed in on: the browser type, IP address and time of sign-in, so you can see your devices and sign them out from your account page.
• A security log of sign-ins, sign-up attempts and password resets, with IP address and browser type, used to protect accounts and stop abuse.

We only email you about your account: to confirm your address, to reset your password or when you ask for something on your account page. There is no newsletter or marketing email.

The site uses no advertising or tracking cookies. It uses:

• Sign-in cookies, only while you are signed in.
• A cookie that lasts 10 minutes while you sign in with Google or Apple, to complete the sign-in safely.
• Browser storage for your pray-through progress and your light or dark theme, and a cookie for your language.

If you send feedback with the feedback button, what you write and the page you were on go to Gospel Ambition’s feedback board at apps.gospelambition.org, which also provides the button itself.

We do not sell or rent your information. We share it only with the services that run the site for us, and only as far as they need it:

• Our hosting, database and file storage providers.
• Mailgun, which sends account emails.
• Google or Apple, if you choose to sign in with them.

We may also share information when the law requires it.

• Your account and its information: until you delete your account.
• Signed-in devices: until you sign out, or 120 days after the device last used the site.
• Prayer records: kept so the prayer counts stay right. When you delete your account, your progress is deleted and your prayer records are no longer linked to you; only the anonymous ID remains with them.

• Use the site without an account.
• Clear your browser’s storage for this site to remove your progress and anonymous ID from that browser.
• On your account page, change your name, email or password, remove Google or Apple sign-in, sign out other devices or delete your account. Deleting your account removes your account information right away.
• Email us to ask for a copy of your information, to correct it or to have it deleted.

The site is not meant for children under 13, and we do not knowingly collect information from them. If you believe a child has created an account, email us and we will delete it.

When we change this policy, we update this page and the date at the top.