Privacy Policy

1. Optional email reminders — updated 26 September 2026

If you explicitly request reminders for a promise, we store your email address, selected language, consent time, verification status and delivery status in Cloudflare. Google Apps Script and Google mail delivery process the recipient address and message. Verification emails contain only a confirmation link. Deadline reminders contain the promise number and deadline, never the authored promise text or private management credentials. Confirming email does not restore ownership or reveal a private promise. We do not use these addresses for marketing. You can withdraw consent in My promises → Email reminders; queued messages are cancelled, though an already-submitted message cannot be recalled. Contact support for deletion or if you cannot access your promise. Contact and delivery records currently remain until a deletion request is processed; disabling reminders does not itself erase all records. Confirmation tokens expire after 30 minutes and are encrypted while queued. Aggregate anti-abuse records limit repeated requests. Delivery depends on provider quotas and availability and is not guaranteed at an exact time.

2. Who We Are

THE OATH WALL provides digital promise publishing with public, anonymous and private visibility. This policy describes the current application, not hypothetical future accounts or analytics.

Service operator: Jason Jesus.

Support, privacy and refund requests: jason.jesus.shanghai@gmail.com.

For an existing Paddle payment, you can also use Paddle’s buyer support. Never send a full card number or password.

3. Information We Collect

We store the oath text, chosen display name or Anonymous label, interface language, wall number, position, product tier, order reference, price, currency, reservation and publication times, order status, test-payment indicator, moderation actions, and the version and time of purchase consent. For Paddle checkouts we store order associations, transaction/event identifiers and payment verification status. A random browser session identifier is stored in an essential cookie; the database stores its hash to associate your orders with that browser. We also store the selected visibility, deadline date and time zone, global promise number, result and attempt history, and hashes of recovery keys and authorized sessions. The purchase form does not collect a country or account password; optional reminders separately collect email with consent. Paddle may separately collect an email and billing details during checkout.

4. Information Users Publish Publicly

For public promises, the text, chosen name, number, position, tier, Founder number where applicable, deadline, result history and publication date are public. Anonymous promises omit the chosen name. Private promises do not expose their text or name through public pages, wall content, search or sharing images without explicit export confirmation. Authorized operators may review private content; this is not end-to-end encrypted storage. A public URL may be copied or indexed by search engines, and others may save the text or sharing artwork. Do not include private, confidential, financial, medical, identification, contact or other sensitive personal information in your public oath. The current form has no country selection; we do not infer and publish your country from payment details. Hidden oaths do not expose their text or name through our public pages or API, but copies made elsewhere may remain.

5. How We Use Information

We use this information to reserve positions, provide the purchased publication and artwork, verify payments, prevent duplicate fulfillment and fraud, moderate content, maintain security, handle disputes, and respond to support or rights requests. Where a legal basis is required, these purposes rely on performing the service agreement, legal obligations, and legitimate interests in secure, reliable operation balanced against your rights. We request consent when applicable law requires it.

6. Payment Processing

Paddle processes payment details under its Privacy Policy. It may collect billing name, email, address, country, card details and security information. We do not store full payment card numbers or card security codes. Our server receives payment notifications and retains only the identifiers and verification state needed for order handling; payment checkout may set its own necessary cookies.

7. Cookies and Analytics

The essential oath_session cookie links orders to your browser for up to one year. Deleting it can remove your access to “My promises”; save the separate recovery key securely. Possession of that key permits management access; email confirmation does not. The oath-wall-language browser storage entry remembers the language you choose manually. The essential oath_locale cookie mirrors this preference to server-rendered pages for up to one year. Without a saved choice, the supported language is selected from browser preferences, falling back to English. We count a limited set of sharing actions in aggregate, without promise text, names, email addresses or management keys. These counts do not prove that a Story was posted to Instagram. We do not use advertising trackers. Hosting and payment providers may process ordinary request metadata, such as IP address and browser information, for delivery, security and abuse prevention. Draft text is held in the page while it is open; it is sent to our server when you reserve an order.

8. Sharing of Information

We publish the content and metadata described above by your request. We share information with infrastructure and payment providers as needed to deliver the service, and with authorities or professional advisers when legally required or reasonably necessary to protect rights and security. We do not sell personal information or use public oaths for unrelated advertising profiles.

9. Service Providers

The current service uses Cloudflare infrastructure for website delivery and the application database, and Paddle for checkout and payment confirmation. When automated moderation is enabled, Cloudflare Workers AI processes the promise text and chosen display name, including private promises, to assess content safety. We do not send payment details, email addresses, access keys or browser identifiers to the classifiers. Audit records contain decision categories rather than additional copies of promise text. People authorized to moderate or support the service may access relevant order information. If you contact support, the communications you send are processed to answer that request.

10. International Processing

The website is accessible internationally, and hosting or payment providers may process information outside your country. Where data-protection law requires transfer safeguards, appropriate safeguards must apply. You may contact us about the processing and safeguards relevant to your information.

11. Data Retention

Published oaths are intended to remain for the service’s operating lifetime, subject to moderation and applicable privacy rights. We retain orders, consent and payment references as necessary to provide the service, investigate failures, resolve disputes and meet legal obligations. Reservation expiry releases the position; it does not automatically erase the stored order. The current application has no automatic deletion schedule for order or audit records. Retention and deletion requests are assessed individually; we do not promise that third-party public copies can be deleted.

12. Security

We use HTTPS on the public site, server-side payment signature verification, restricted order access, and controls against duplicate publication. No system is entirely secure. Do not share browser session credentials; never include sensitive information in an oath. We do not ask you to send card security codes or passwords to support.

13. User Rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability or object to certain processing, and may complain to your local data-protection authority. We may need proportionate information to verify a request. The public, normally immutable nature of an oath does not override mandatory rights. Requests involving public text may require hiding a record; lawful transaction retention and copies held by others may remain.

14. Children’s Privacy

The service is intended for adults aged 18 or older. Do not submit a child’s personal information. Contact us if you believe such information was submitted so it can be investigated and addressed.

15. Changes

We will update this policy when relevant processing changes and show the new effective date. Material changes will be explained on the website; any legally required consent will be requested.

16. Contact

Service operator: Jason Jesus.

Support, privacy and refund requests: jason.jesus.shanghai@gmail.com.

For an existing Paddle payment, you can also use Paddle’s buyer support. Never send a full card number or password.