Little Light
Privacy Notice for the Little Light web app
The short version: you can read, watch and listen without an account. The web app sets no cookies and uses no ads, ad pixels or analytics. Your preferences are saved only in your own browser. Like every website, our hosting providers see technical details such as your IP address in order to deliver pages. If you join our newsletter (adults only), we keep your email address until you unsubscribe.
1. Who we are
The Little Light web app is run by [Developer legal name], an independent developer based in Indonesia ("we", "us"), who is responsible for the personal information described here. Contact: customers-support@littlesaltandlight.com, or by post at [Postal address]. The Little Light game has its own privacy policy.
2. When you visit
You don't need an account to use the web app, and we don't ask visitors for their name or email address. To show you the app:
- Hosting and security (Cloudflare). The site is served by Cloudflare. Like any web host, Cloudflare processes your IP address, browser type, the page requested and the time, in order to deliver pages and protect the site from attacks. We don't use this to identify you.
- Posts and media (Supabase). Devotions, verses, videos and audio are loaded from our database and file storage at Supabase ([Supabase project region, to confirm]). Supabase receives your IP address and standard request details to deliver that content. Visitors don't sign in, and nothing about what you read is linked to you.
- YouTube links. Some videos have a "Watch on YouTube" link. We don't embed YouTube players. If you follow a link, you leave our site and Google's privacy policy applies.
- No cookies, ads, pixels or analytics. We don't use advertising, social media pixels (such as Meta, TikTok or Google tags), fingerprinting or analytics tools. That is why there is no cookie banner.
Our legal reason (where the GDPR applies) is our legitimate interest in running a secure website that you asked to use. Under Indonesian law, this processing is needed to provide the service you requested.
3. What's saved in your browser
The web app saves a few small items in your browser's local storage and offline cache so it remembers your choices and works offline. These stay on your device and are not sent to us.
| Item | What it's for |
|---|---|
Theme (ll.theme) | Remembers day or night colours. |
Calm mode (ll.calm) | Remembers if you turned on calm mode (less motion). |
Saved videos (ll.savedReels) | The videos you saved for later. |
Seen cards (ll.swiped) | Remembers cards you've already swiped past. |
Offline posts (ll.studioPosts) | A copy of the public posts so the app works offline. |
| Offline cache (service worker) | Copies of the app's pages, styles, fonts and images so it opens quickly and works without a connection. |
To remove them, clear this site's data in your browser settings, or uninstall the app from your home screen.
4. Our newsletter (adults only)
Our email newsletter is for parents, guardians, teachers and other adults (18 or older). It is never offered to children.
- What we collect: your email address, your first name if you give it, and a record of when and how you signed up and confirmed (date, time and IP address), so we can show you agreed.
- Double opt-in: after you sign up, we send a confirmation email. You only receive the newsletter after you click to confirm.
- Email activity: our email service can record whether an email was delivered, opened or a link clicked. [To confirm: turn MailerLite open and click tracking off, or keep this sentence]
- Why: to send the updates you asked for (new devotions, game news and, occasionally, offers for our own products). We don't sell or share your email address, and we never use it for advertising audiences.
- Legal reason: your consent. You can withdraw it at any time with the unsubscribe link in every email, or by writing to us.
- Provider: the newsletter is sent with MailerLite (UAB "MailerLite", Lithuania, EU), which stores the list on our behalf.
5. Little Light Studio (our team only)
The Studio is the private area our small content team uses to write and publish posts. It is for invited adults only. If you are on the team:
- you sign in with a one-time email link or, if you choose, with Google, through Supabase Auth. We store your email address, your team role and the time you were invited;
- the posts you write, the files you upload, and a change history (who changed which post and when, by email address) are stored in Supabase. Published posts and media are public;
- your sign-in session is saved in your browser's local storage until you sign out.
Legal reason: our legitimate interest in running the content team securely and keeping an accurate record of changes. Team members can ask us to remove their account at any time. The change history for published posts may be kept while the post exists, so we can show who approved what.
6. Children
The web app shares Bible-based content for families, and children may enjoy it with a grown-up. It doesn't ask children for personal information, it has no chat or comments, and the newsletter and Studio are for adults only. If we learn that a child has given us personal information (for example, by joining the newsletter), we will delete it. Parents and guardians can contact us at any time to review or delete information about their child.
7. Service providers
We share personal information only with the providers below, who process it for us under their own security and data-protection terms, and only as needed to run the service. We never sell personal information.
| Provider | What they do for us | Data involved |
|---|---|---|
| Cloudflare, Inc. (USA, global network) | Website hosting, domain, security and email forwarding | IP address, request details, emails sent to our address |
| Supabase, Inc. (USA; data in [Supabase project region, to confirm]) | Database, file storage and Studio sign-in | Visitors' IP addresses and request details; team members' email addresses and activity |
| MailerLite (UAB "MailerLite", Lithuania) | Newsletter | Subscribers' email address, name if given, consent record, email activity |
| Google (only for team members who choose Google sign-in) | Studio sign-in | Team member's Google account email |
| Our email inbox provider ([Inbox provider, e.g. Gmail, to confirm]) | Storing support emails | Your email address and message |
Some of these providers process data outside your country, including in the United States and the European Union. Where the law requires it, they use recognised safeguards for international transfers, such as standard contractual clauses. We may also disclose information if the law requires it.
8. How long we keep data
- Browser storage: until you clear it. We never receive it.
- Hosting logs: kept by Cloudflare and Supabase for short periods under their own policies.
- Newsletter: until you unsubscribe. After that, we keep only your email address on a "do not email" list, so we don't email you again by mistake. Ask us if you want it fully deleted.
- Support emails: up to 2 years after the conversation ends.
- Studio accounts: while you are on the team. Change history is kept while the related post exists.
9. Your rights
Depending on where you live (including under Indonesia's Personal Data Protection Law No. 27 of 2022, the EU GDPR and the UK GDPR), you can ask us to: tell you what we hold and give you a copy; correct it; delete it; limit or stop how we use it; object to it; receive it in a portable format; and withdraw consent at any time. We don't make automated decisions about you or build profiles.
Write to customers-support@littlesaltandlight.com. We aim to reply within 3 working days and to complete requests within the time limits set by applicable law. If you are unhappy with our answer, you can complain to your data protection authority (for example, the authority responsible for personal data protection in Indonesia, your EU supervisory authority or the UK ICO).
10. Changes and contact
If we change this notice, we will update the effective date above, and tell newsletter subscribers about important changes. We don't use analytics today. If we ever add a privacy-friendly, cookie-free tool such as Cloudflare Web Analytics, we will update this notice first.
[Developer legal name]
[Postal address]
customers-support@littlesaltandlight.com