Privacy

Who operates the service and how to contact them

Scripture Deck is operated personally by Paul Bryan Reyes, based in the Philippines. For questions about personal information, access, correction, or account deletion, contact [email protected].

Information supplied and collected

Registration asks for an email address and password, with an optional name. Account settings also hold timezone, an optional private photo, preferences, creation time, and last sign-in. The service stores your study content and activity, account sessions, security attempt counters, friend requests and shares, connected-app permissions, and administrative audit events. Study notes can contain religious beliefs or other sensitive personal details even though registration does not ask for a denomination.

Profile photos are resized and re-encoded with source metadata removed. They are private account images, not public profile pictures. Requests to the hosting and domain services can also produce provider logs; a full provider-side inventory has not yet been established.

Accounts and personal study

Your account can hold notes, tags and Scripture links; mind maps and connections; memory decks, cards, schedules and review history; collections and attached notes; reading plans, progress and logs; and personal cross references. Other accounts cannot browse this material through ordinary account access. Hiding a tool preserves its content.

If you share a collection with a friend, that person can read its title, description, passages, and the full text of connected notes. Friends see each other’s name and email, not private photos. Friend requests store a recipient email even before that person registers. Email addresses are not verified, so a friend request alone is not proof of identity. Removing a share or friendship ends future app access but cannot recall copies already made.

Administrator access

The sole administrator can view account details and study counts, suspend or restore an account, end sessions, set a temporary password, remove an authenticator, and delete an account. The administrator can also open an account and read or change its personal study after administrator authentication; the action is recorded. Administrator access is not restricted to support requests. The member is not separately notified and cannot see or end that administrative access in their own session list. Do not treat the service as end-to-end encrypted or inaccessible to its operator.

Sessions and account security

Passwords are stored as Argon2id hashes. Optional authenticator secrets are encrypted and recovery codes are hashed. These protections do not encrypt your study material end to end. Functional cookies maintain sign-in, a short authenticator challenge, and administrator access context. Signed-in settings let you change credentials and end ordinary sessions. Your email address is not verified by the current registration process.

Notes stored on your device

The note you are editing has an unencrypted working copy in your browser’s IndexedDB, even when the all-notes option is off. Turning on Keep my notes on this device retains every note for offline reading and editing; queued changes upload after reconnection.

The offline copy remains readable for at most 30 days after the device last reaches the server, or until sign-out. This is an access-age rule, not a promise that every local byte is destroyed exactly on day 30. Signing out or removing device notes attempts a wipe and reports failure. A disconnected lost device cannot receive a session revocation until it reconnects. Protect shared devices and review the device-note setting. Browser storage also keeps preferences and offline information screens and static assets; the service worker does not cache signed-in HTML or API replies.

Connected apps

You choose whether to connect an external app. study:read permits supported personal-study reads and shared Scripture lookup; study:write also permits supported creations, changes, deletions, and reading activity. These scopes do not permit changing sign-in details or sharing your content with another person. Grants record the client, scope, creation time, and last use; tokens are stored as hashes.

Disconnecting removes the grant and ends future access. It does not delete information the external app already received. Review that provider’s own practices before granting access.

Analytics and cookies

The public website at scripturedeck.com loads Google Tag Manager, a Google service that runs measurement tags such as Google Analytics. Those tags can set cookies and send Google the pages you view, your browser and device type, and information derived from your IP address. The study app at app.scripturedeck.com, where your account and personal study live, loads no Google Tag Manager, visitor analytics, advertising pixels, or marketing tracking. Necessary sign-in, security, preferences, and device features remain within scope; hosting and domain services can still process request information.

The application uses functional cookies: bible_session for sessions of up to 30 days, bible_challenge for the five-minute authenticator step, bible_impersonation for an administrator’s one-hour context, and prayer-language for the device’s selected prayer language. Authentication cookies use HttpOnly, SameSite Lax, and production Secure settings. Browser storage also holds theme/preferences and the device notes described above.

The actual public tracking configuration and provider-side logs, metrics, and cookies have not yet been verified. The information provided here does not establish that these services collect no analytics or request information.

Retention, deletion, and export

Settings provides an unencrypted JSON study export. It includes account profile fields and supported study content, excludes passwords and sign-in/authenticator secrets, and does not include the shared Bible library. The export does not include separate reading logs, friendship and sharing records, connected-app permissions, or administrator audit records. There is no import-back function. Keep downloaded exports secure.

Contact the operator to request account deletion; there is no self-service deletion interface. Administrator deletion removes active account-owned study data, sessions, friendships/shares, reading logs, and grants through cascading deletion. Audit events intentionally survive and retain target account ID, email, action, and time. Recipient-address friend requests and separate manual backups can also remain. Deleting an account does not mean all copies disappear immediately everywhere.

Retention periods for inactive accounts, audit records, attempt counters, recipient emails, support correspondence, provider logs, and backups have not yet been established. The 15-minute security attempt window is not a deletion period.

Sources and third parties

The current app and database use Railway, and Cloudflare serves the custom domain. Hosting region, provider logs, contracts, transfer details, and backup locations and rotation require confirmation. Third-party source links take you to those providers’ sites. Connected apps and people receiving shared collections can retain their own copies. The shared Bible and language library is distinct from personal study data. Terms describes service responsibilities.

Policy updates

Contact the operator if you have a question about this notice or need to correct information. About Scripture Deck. Manage account settings requires sign-in.