Privacy Policy

Last updated: August 25, 2026

Divining ("we", "us") operates divining.app, a search and discovery tool for publicly published sermons. This policy explains what we collect when you create an account and how we use it. You can browse, search, and listen without an account; accounts only add optional features like saving favorites.

Information we collect

Account details. Your email address, and — for password accounts — a securely hashed version of your password (PBKDF2; we never store your password in plain text).
Google sign-in (optional). If you choose "Continue with Google", Google shares your verified email address with us to create or match your account. We do not receive your Google password.
Your saved content. The sermons, topics, and clipcasts you mark as favorites.
Session data. A secure, http-only cookie that keeps you signed in, plus records of your active sessions so you can log out of other devices.
Security logs. Limited sign-in records (email, timestamp, and IP address) used to rate-limit failed logins and protect accounts.

How we use it

To create and operate your account and keep you signed in.
To store and show the favorites you choose to save.
To send account emails — address verification and password resets — through our email provider.
To protect the service against abuse (for example, limiting repeated failed logins).

How your information is shared

We do not sell your personal information, and we do not use it for advertising. We share it only with service providers that help us run Divining:

Email delivery — account emails are sent through Brevo (Sendinblue).
Google — only if you use Google sign-in, and only to verify your identity.

We may also disclose information if required by law.

Cookies

We use a single essential cookie (div_session) to keep you logged in across the site. It is http-only and not used for advertising or cross-site tracking. Clearing it or signing out ends the session.

Retention & your choices

You can change your email or password, and view or sign out other sessions, from your account menu.
You can delete your account at any time; this removes your favorites and sessions. Deletion is permanent.
Security logs are kept only briefly for abuse protection.

Children

Divining is not directed to children under 13, and we do not knowingly collect their information.

Changes

We may update this policy; material changes will be reflected by the "last updated" date above.

Contact

Questions about privacy: privacy@divining.app.

This is a plain-language starting policy that reflects how Divining currently handles data. Review it against your actual practices and local requirements before publishing; it isn't legal advice.