Privacy Policy
Last updated 4 September 2026
Selah is run by Shoshin Systems, based in the Philippines. This policy explains what personal information Selah collects when you use selah.shoshinsystems.net, why it is collected, and the choices you have. It is written to be read, not to cover the writer — if anything here is unclear, ask.
What Selah collects, and why
Selah asks for as little as it can. Reading today’s prayer and verse needs no account and stores nothing about you. Everything below is collected only once you create an account.
- Your name and email address
- So you can sign in, so Selah can address you, and so it can send you the account emails below. Your email is never shown to anyone else.
- Your password
- Stored only as a one-way hash (bcrypt). Selah cannot read your password and neither can anyone with access to the database.
- Your prayer journal
- The entries you write are stored so you can return to them. They are visible only to you, are never used for any other purpose, and are never sold or shared.
- The days you marked as prayed
- A date and a timestamp for each day you tap “I prayed today”, so Selah can show you the days you have kept.
- Your settings
- Your chosen theme and reminder time. The reminder time is stored for a future reminder feature; Selah does not send notifications yet.
- Basic technical logs
- The hosting server keeps short-lived access logs (IP address, browser, the page requested) to keep the site running and secure. These are not linked to your account and are not used to profile you.
- Anonymous usage analytics
- Cloudflare Web Analytics counts visits without cookies or personal data, always on. Google Analytics 4 counts visits with a cookie, and only runs if you accept it — see Cookies below.
Selah has no advertising, no social-media pixels, and no AI features — so there is no data collection beyond the list above.
Who else is involved
Shoshin Systems does not sell or rent your information to anyone. Two service providers process data on Selah’s behalf, strictly to run the service:
- Hostinger hosts the application and its database. Your account and journal are stored on Hostinger’s servers.
- The email provider (Brevo or Hostinger mail) delivers the account emails: address verification and password resets. It receives your email address and the message, nothing more.
- Cloudflare provides the cookieless visit-counting described above. It does not receive your name, email, or anything you write.
- Google (Google Analytics 4) provides the cookie-based visit-counting described above, only if you accept it. It does not receive your name, email, or anything you write.
Both providers may process data on servers outside the Philippines, including in the European Union and the United States, under their own data-protection terms.
How long it is kept
Your account and everything in it is kept until you delete your account. When you do, Selah permanently removes your name, email, password hash, journal entries, prayer-day records, and settings from the database immediately — there is no soft-delete and no archived copy. Server logs age out on the host’s own short schedule.
Your choices
- See and correct your details from the Account screen at any time.
- Edit or delete any journal entry yourself, whenever you like.
- Delete your whole account from the Account screen; this erases everything described above.
- Ask for a copy of your data by writing to the address below, and it will be sent to you.
Depending on where you live, you may also have the right to object to or restrict certain processing, or to complain to your local data-protection authority.
Security
Selah is served only over HTTPS, stores passwords as bcrypt hashes, keeps each person’s journal isolated from every other account, and rate-limits sign-in and password-reset attempts. No system is perfectly secure, but Selah holds little and asks for little by design. To report a vulnerability, see /.well-known/security.txt.
Children
Selah is not directed at children under 13, and Shoshin Systems does not knowingly collect information from them. If you believe a child has created an account, write to the address below and it will be removed.
Changes
If this policy changes, the “last updated” date above changes with it, and a material change will be noted on this page. Continuing to use Selah after a change means you accept the updated policy.
Contact
For anything about your data or this policy, write to replayhubunlimited@gmail.com.
See also the Terms of Use and the Accessibility statement.