Policies
Privacy Policy
Summary: This website sets no cookies, runs no analytics, and collects nothing about you. Our publishing software touches only our own social accounts. We hold no data about viewers, fans, or other platform users.
1. This website
These pages are static files. There are no cookies, no tracking pixels, no analytics, no advertising networks, no embedded third-party scripts, and no forms. Our web server keeps standard request logs (IP address, timestamp, requested path, user agent) for security and abuse diagnosis. Logs rotate automatically and are not used to build profiles or shared with anyone.
One page is an exception to "static files only": the Daily Hukamnama page runs a small script, served from this site, that fetches the day's Gurbani text from the open BaniDB API. That request goes from your browser to BaniDB and is subject to their practices; we send them nothing about you and receive nothing about you.
2. Our publishing software
We operate internal software that publishes our own content to social platforms. To do that it stores, for accounts we ourselves own:
- OAuth access and refresh tokens issued to us by the platform
- The account identifier and display name the platform returns, used only to send each upload to the right account
- Metadata for the content we upload — captions, titles, scheduling times
These credentials are held encrypted on a private server that we control, are never transmitted to anyone other than the issuing platform's own API, and are deleted when an authorization is revoked or an account is retired.
3. What we do not collect
We do not collect, request, receive, store, buy, or process personal data about any person other than ourselves. Specifically we hold no viewer data: no follower lists, no comment authors, no direct messages, no profile data of other users, no watch history, and no advertising identifiers. We do not use any platform API to gather information about third parties.
4. TikTok integration
Our TikTok integration uses the Content Posting API with the video.publish scope to
post content to TikTok accounts we own. Authorization is granted by us, through TikTok's own OAuth
consent screen, for our own accounts only. We request no scope that would read other users' data.
Authorization can be withdrawn at any time from TikTok's Settings → Security and permissions →
Manage app permissions, which immediately and permanently ends our access.
5. Sharing and sale of data
We do not sell, rent, trade, or share data with third parties. We do not use data for advertising or profiling. No data is transferred to data brokers. The only outbound transmissions are our own content and credentials to the platform APIs we publish through.
6. Retention
Credentials are kept only while an account is active, and deleted on revocation or retirement. Server request logs rotate on a short cycle. Published content remains on the platform it was posted to until we remove it there.
7. Security
Credentials are encrypted at rest. The servers that hold them accept administrative access only by SSH public key — password authentication is disabled — and sit behind a default-deny firewall. Access is limited to the studio operator.
8. Children
This site and our publishing software are not directed to children, and we knowingly collect no information from anyone. Some of our published content is family-friendly and is labeled as such on the platform where it appears.
9. Your rights
Because we hold no personal data about visitors, there is normally nothing to access, correct, or delete. If you believe we hold information about you, write to us and we will investigate and respond.
10. Changes
Material changes will be posted here with a new effective date.