Privacy
Privacy notice
Last updated 15 September 2026. Applies to the website ebenezer-altar.com and to the web app at your.ebenezer-altar.com.
This is a convenience translation. German law governs, and the German version is the legally binding one.
The short version
Ebenezer is built to know as little about you as it technically can. What you record in the app stays on your device by default. There is no account until you make one, no advertising, no sale of data, and no tracking across websites.
- This website sets no cookies and embeds no third-party services. Even the typefaces are served from this server rather than loaded from Google.
- Your stones, your prayers and your recordings live in your browser, not on a server, unless you turn sync on yourself.
- Speech recognition runs entirely on your device. A recording is never uploaded to be read by anything.
Controller
The controller within the meaning of Art. 4(7) GDPR is:
Shaiel SchmöheMarienstraße 54
45307 Essen
Germany
support@ebenezer-altar.com
No data protection officer has been appointed, and none is required: there are not twenty people here regularly engaged in automated processing of personal data (Art. 37 GDPR, section 38 BDSG). The address above answers everything.
Visiting this website
Server logs
This website is hosted by Vercel Inc. Loading a page means the server processes the technical request data every browser sends of its own accord: your IP address, the date and time, the address requested and the amount of data transferred, your browser and operating system, and where applicable the page you came from.
This is technically necessary to deliver the page at all and to protect the service against attack and malfunction. The legal basis is the legitimate interest in a secure and functioning service under Art. 6(1)(f) GDPR. These records are not combined with other sources and no profile is built from them.
Typefaces
All four typefaces are served from the same server as the page itself. No connection to Google Fonts is opened and no IP address is transmitted to Google. That is a deliberate decision rather than only a technical one.
No cookies, no measurement
This website sets no cookies and neither stores nor reads information on your device. No consent under section 25 TDDDG is required, and a cookie banner here would have nothing to ask about.
The stone maker on the front page
The part of the page where you can shape a stone runs entirely in your browser. What you type there never leaves your device, is stored nowhere, and is gone once you close the page.
Contacting by email
If you write to support@ebenezer-altar.com, your message, your sender address and whatever it contains are processed in order to answer you. The legal basis is Art. 6(1)(b) GDPR where it concerns your use of Ebenezer, and otherwise the legitimate interest in answering enquiries under Art. 6(1)(f) GDPR. Correspondence is deleted once it is settled and no statutory retention period stands in the way.
Links to other services
The support button leads to Buy Me a Coffee, operated by Buy Me a Coffee Inc. You leave this website only when you click it, and from there their privacy notice applies, over which there is no influence here. Whether or what you give there is never reported back to Ebenezer and never tied to a visit to this site.
The web app at your.ebenezer-altar.com
Storage on your device
The app stores your stones, settings, prayers and recordings in your own browser's database, technically IndexedDB. That data sits on your device, not on a server, and nobody but you can reach it.
This storage needs no consent under section 25(2)(2) TDDDG, because it is strictly necessary to provide the very service you expressly asked for. An app that may not store your stones would not be an app for keeping stones. For the same reason there is no consent banner. You can delete it all yourself at any time by clearing this site's data in your browser.
Audience measurement, only if you say so
The app can count anonymous page views, through Vercel Web Analytics. That happens only if you switch it on. The switch is called "Share anonymous usage data", it lives in Profile, and it is off when the app is installed. While it is off the measurement is never even loaded, so there is no unattributed counting going on in the background.
Switch it on and anonymous page views are counted. No cookies are set, no identifier is stored on your device, no cross-device profile is built, and the contents of your stones are never transmitted. The legal basis is your consent under Art. 6(1)(a) GDPR, which you can withdraw at any time with effect for the future by turning the same switch back off.
Withdrawal takes effect at once. From the moment you flip the switch nothing further is sent, not even by the measurement already loaded, and on the next start it is not loaded at all.
Bible text
The complete World English Bible is built into the app and is read with no network connection at all. If you additionally choose another translation, its text is fetched from API.Bible through this project's own server. Your browser only ever talks to this project, never directly to API.Bible, so your IP address is not passed on to them. Only which book and chapter was requested is transmitted, never who requested it. The legal basis is Art. 6(1)(b) GDPR.
Speech recognition
Writing out a spoken recording happens entirely on your device. A speech model is downloaded once from this server, and after that the feature works with no connection. The recording itself is never sent to any server to be read, neither this one nor anyone else's. The feature is off when the app is installed.
Sync between devices (optional)
You can turn sync on to use the same collection on more than one device. Only then does anything leave your device. What is then processed:
- Your email address, to recognise you and deliver the sign-in code
- Sign-in codes and session identifiers, to sign the device in
- Your stones and settings, so they appear on the other device
- Your voice recordings and pictures, where present, in a separate file store
The legal basis is performance of the service you asked for, Art. 6(1)(b) GDPR. Without sync none of this happens, and the app is fully usable without it.
You can turn sync back off on a device at any time. Separately, Profile carries an explicit Delete my synced data command that actually removes the server-side copy. Your own device's copy is untouched either way.
Recipients and processors
Ebenezer gets by on very few providers, and every one of them is named here. Vercel, Neon and Resend process data solely on instructions, as processors under Art. 28 GDPR. There are no ad networks, no trackers, and nothing is passed on for advertising. Data is not sold.
Vercel
Vercel Inc., United States. Hosts this website and the web app, which covers the server logs, the file store for voice recordings and pictures when sync is on, and the audience measurement if you have switched it on.
- Data processed: IP address, timestamp, address requested, browser and operating system; with sync, also the recordings and pictures you upload.
- When: on every visit to the site or the app.
- Privacy policy: vercel.com/legal/privacy-policy
Neon
Neon Inc., United States. Runs the Postgres database behind sync.
- Data processed: your email address, sign-in codes, session identifiers, and the contents of your stones and settings.
- When: only with sync turned on. Without it this database is never touched on your behalf.
- Privacy policy: neon.com/privacy-policy
Resend
Resend, Inc., United States. Sends the one email this app ever sends: the one carrying your sign-in code.
- Data processed: your email address and the contents of that one message.
- When: only when you sign in to sync.
- Privacy policy: resend.com/legal/privacy-policy
API.Bible (American Bible Society)
American Bible Society, 101 North Independence Mall East FL8, Philadelphia, PA 19106-2155, United States. Supplies the text of additional Bible translations.
- Data processed: which book and chapter was requested. Not your IP address and no identifier of yours. The request is made by this project's server rather than by your browser, so all that appears at their end is this project's server.
- When: only if you choose a Bible other than the one built in.
Because nothing identifying you arrives there, that call is in the ordinary case not a transfer of personal data at all. It is named anyway, so that where a Bible text comes from stays traceable when the app does not carry it itself.
Buy Me a Coffee
Buy Me a Coffee. Not a processor but a controller in its own right. You leave this website only when you click the support button, and from there their privacy policy alone applies. Whether or what you give is never reported back to Ebenezer and never tied to a visit here.
- Privacy policy: buymeacoffee.com/privacy-policy
Transfers to the United States
The providers named above are based in the United States, so processing may take place in a third country. Transfers rest on the European Commission's adequacy decision of 10 July 2023 for the EU-US Data Privacy Framework, where the provider is certified under it, and otherwise on standard contractual clauses under Art. 46(2)(c) GDPR. Despite those safeguards it cannot be ruled out that US authorities may demand access under their own law, and that your rights are harder to enforce in the United States than in the European Union.
Retention
- Server logs are kept only briefly to keep the service running, then deleted automatically.
- Sign-in codes expire within minutes and work once.
- Synced stones and settings remain until you delete them or ask for your synced data to be deleted.
- Data on your device remains until you remove it in the app or clear your browser's site data.
- Email correspondence is deleted once the matter is closed.
Your rights
You have the following rights regarding your personal data at any time:
- Access to whether and what is processed (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability in a common, machine-readable format (Art. 20 GDPR)
- Objection to processing based on a legitimate interest (Art. 21 GDPR)
- Withdrawal of consent with effect for the future (Art. 7(3) GDPR)
An informal message to support@ebenezer-altar.com is enough. Two of these are built into the app itself: backing your collection up to a file is data portability, and Delete my synced data is erasure, without having to ask anyone for either.
Complaining to a supervisory authority
Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority if you believe the processing of your data infringes the GDPR (Art. 77 GDPR). The competent authority here is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-WestfalenKavalleriestraße 2–4
40213 Düsseldorf, Germany
poststelle@ldi.nrw.de
No automated decision-making
There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR. Ebenezer also has no feature that generates, suggests or paraphrases spiritual content. The app only holds back up what you put into it.
Whether you have to provide anything
You are under no statutory or contractual obligation to provide personal data. Without an email address, only sync between devices is unavailable. Everything else in Ebenezer works without saying anything about who you are.
Changes to this notice
This notice is updated whenever something described here changes in the app or in the services it uses. The version on this page, carrying the date above, is the one that applies.
← Back to the site