Privacy and your device

This page describes the current website behaviour. Public teachings and articles can be read without a visitor account. CMS accounts are for authorised editors, and account information and unpublished drafts are not part of the public content API.

Hosting and operational logs

Cloudflare hosts the website, database and uploaded media. Operational logs and traces help the team investigate failures and slow requests. Worker observability is configured to redact query strings; hosting and security systems may still process request and network information. This page does not promise a specific log-retention period.

The browser can send a technical error report to Sentry from public, preview or CMS pages when a deployed build fails. The report payload omits visitor identifiers, cookies, request fields, breadcrumbs, page addresses, error messages, form or CMS content, replay, performance traces, logs and session data. Reports keep only a fixed error category, safe application bundle locations, the deployment environment and release so the team can diagnose broken code. Sentry may still process ordinary HTTPS connection information, including an IP address, needed to receive the report.

Offline reading

If your browser supports service workers, the site saves copies of public pages you open on that device. Up to 20 pages are retained for seven days. Saved copies can be out of date, including after a page is withdrawn online. Open Saved pages to clear the saved reading. Clearing the site's browser data also removes its local storage. The home page remembers the last teaching you opened so it can offer to resume it; that note stays in your browser, is never sent to the site, and disappears when you choose Hide or clear the site's data. Installing the app is optional. The offline reader does not save CMS pages, draft previews, API responses, or recordings.

Optional site analytics

When optional analytics is enabled on the production public website, you can choose whether to allow it. The site sends nothing to PostHog before you choose Allow analytics. If you allow it, the site stores a random visitor identifier and your choice on this device. Explicit events describe the public page type and actions such as opening a recording, transcript, community link, or sending a reflection. The site does not automatically record clicks or replay sessions. Events do not include page titles, search text, reflection text, names, full URLs, referrers, or unpublished content.

Your first visit asks once, at the bottom of the screen; Allow analytics and No thanks are equal choices, and the site works the same either way. To change your choice later, open Analytics choice in the site footer, which brings you to the controls on this page. Choosing No thanks or Withdraw analytics consent replaces the stored consent record and removes the visitor identifier. A browser Global Privacy Control or Do Not Track signal also keeps analytics off and removes an existing analytics identifier. Clearing this site's browser data removes the choice and identifier.

External services

YouTube thumbnails can load while a page is displayed. Choosing to play a recording loads a YouTube or Spotify player. Instagram and Telegram links open those services. These providers handle requests under their own policies; the website cannot control their storage or tracking. Uploaded public covers and published material are accessible to visitors and automated readers.

Questions

Published resources with a reviewed transcript may offer a questions and reflections form. It stores the submitted name or pseudonym, text and publication consent until the team deletes it. A submission stays private unless the team approves it; approved names, text and any team reply are public on that resource. The form collects no email address, and it does not store an IP address with the submission. Hosting logs and short request-rate checks process network information separately. Use the Contact page to ask for removal of an approved contribution. Avoid putting urgent, sensitive personal details, passwords or account information in a submission or public Telegram message. Password-recovery email is not currently enabled.