Mysteries & Mercy Co.

Privacy Policy

Last updated: October 25, 2026

This policy covers the Rosary Cards app (the web app at app.mysteriesandmercy.com and the Android app com.mysteriesandmercy.rosary, which opens that same web app) and the website mysteriesandmercy.com. Both are run by Mysteries & Mercy Co. In short: there are no accounts, no ads, and we do not sell or share your data.

What stays on your device

Your prayer log and progress, where you left off in a Rosary, your voice and audio settings, your reminder settings, and whether you have dismissed a banner are saved only in your browser's or the app's local storage on your device. Prayers, cards and audio are cached on your device so the app works offline. We never receive this information. You can erase it at any time by clearing the app's data, clearing site data in your browser, or uninstalling the app.

Prayer reminders (push notifications)

Reminders are optional and off until you turn them on. If you turn them on, your device gives us a push subscription (an anonymous address your browser or phone uses to receive notifications). We store that subscription with the reminder times you chose and your time zone, so we can send the reminder at the right time. It is not linked to your name, email or any account. Turning reminders off deletes it from our server. If you use "Add to calendar" instead, nothing is sent to us.

Cards waitlist (website)

If you join the waitlist on mysteriesandmercy.com, we store the email address you enter, an optional name, the date you signed up, and your consent. We use it only to email you about the card deck, and you can unsubscribe or ask us to delete it at any time. The app itself does not collect email addresses; its "cards coming soon" banner links to the website.

Analytics

We use Cloudflare Web Analytics to see anonymous, aggregate counts such as page views, pages visited, referring sites, country, and device or browser type. It does not use cookies, does not track you across sites, and does not identify individual visitors.

Security and abuse protection

Both sites are hosted on Cloudflare. Like any web host, Cloudflare processes your IP address to deliver pages and protect against abuse, and may keep short-lived technical logs. To limit spam sign-ups, we keep a one-way hashed (not readable) form of your network address for a short time (one hour to about one day), then it is deleted automatically. We do not store raw IP addresses.

What we don't do

Our service providers (Cloudflare for hosting, storage and analytics; Google for the Android app download and, if you enable reminders on Android or in Chrome, for delivering the notification) process data only to provide those services. Data is sent over encrypted connections (HTTPS).

Children

The app is suitable for all ages and is not designed to collect personal information from children. The waitlist is intended for adults. If you believe a child has given us an email address, contact us and we will delete it.

Your choices

You can turn reminders off at any time in the app, clear the app's local data, unsubscribe from waitlist emails, or ask us to delete any information we hold about you by emailing us. We will respond within 30 days.

Changes

If we change this policy, we will update this page and the date above.

Contact

Mysteries & Mercy Co. · mysteriesandmercy@gmail.com