Privacy
This page says what V2 App, LLC ("we") collects when you use Restless at restlesscatholic.com, what we do not collect, how long we keep it, and how to have it deleted. We collect little on purpose: enough to run your account and your subscription, send the emails your account needs and the letters you choose to receive, and know which pages are used.
Your notes are not collected
Notes you write are stored only in your own browser, on your own device (in its built-in database, IndexedDB). They are never sent to us, and we have no copy and no way to read them. A backup file you save goes to your own disk, not to us. No usage record is made while you are in Your notes, and our server drops any that names a notes page. There are no advertising tags, tracking pixels or third-party analytics anywhere on the site.
Your account
A free account needs an email address. Accounts are run by Amazon Cognito, Amazon Web Services' sign-in service.
- Your email address, which is how you sign in and where we write to you, and whether it has been confirmed.
- Your first name, only if you choose to give it.
- Your password is held by Amazon Cognito and checked there. We never see it.
- Your account's standing: its level (free or subscriber), whether it is on hold or closed, when it was made and confirmed, when you last signed in and how many times, whether you have turned off our letters, and whether email to you has bounced or been reported as spam.
- A history of changes to your account: when it was confirmed, when its level changed and why, and when you unsubscribed.
Your subscription
Subscriptions and gifts are paid through Stripe. Your card details go to Stripe only; we never see or keep them. From Stripe we keep your Stripe customer and subscription numbers, the plan (yearly or monthly), the subscription's status, when the current period ends, and whether it is set to cancel at the end of the period. Stripe keeps its own records of your payments under its own privacy policy. A gift made without an account stays with Stripe; nothing about it reaches our system.
What we record when you use the site
Our pages send a short message to our own server (a "beacon") when a page is opened. It names the page, never anything you typed. Each record below is a row in our usage database, with the time it was written.
- Signing in: a short code made from your network (an IPv4 /24 or IPv6 /48, hashed with a secret key: not your IP address and not reversible to it), the country it is in (from Amazon CloudFront, not a third-party lookup), your browser's identifier (its user agent), your account's level, and your visitor number (below).
- Opening a page while signed in: the page, your browser's identifier and your visitor number.
- Opening a public page without an account (the front page and today's preview; these legal pages run no script and send none): the page; the name of the site that sent you, such as google.com, never the page or the search; any campaign fields in the address you arrived at (
utm_source,utm_medium,utm_campaign,utm_content); the country; the hour; a short code made from your network (an IPv4 /24 or IPv6 /48, hashed with a secret key: not your IP address and not reversible to it); and your visitor number. - Creating an account: the campaign fields you arrived with, if any, and your visitor number, so that we can count accounts by campaign.
- Each letter we send you: which letter, and when it was queued and sent, or skipped, and whether it bounced or was reported as spam. We do not track whether you open our emails.
To slow down automated sign-ups, our server holds the IP address of each attempt to register, sign in or reset a password for ten minutes, then deletes it.
Global Privacy Control
If your browser sends Global Privacy Control (Brave and DuckDuckGo do by default; Firefox can be set to), we treat it as a request not to follow you from one visit to the next. We set no visitor number and no campaign cookie, and clear either if your browser already holds one. Pages you open are still counted, by their name alone (not the site that sent you or any campaign fields), with nothing that links one page or visit to another, or to a later account. Once you sign in, your account's records are kept as described above, because they are how we provide the service; they carry no visitor number.
Our server logs
Amazon CloudFront, which delivers the site, writes a standard log line for each request: the address requested, the time, your IP address, your browser's identifier and the referring page. The logs do not include cookies. They are kept for 90 days and then deleted. Our servers' own operating logs are kept for 30 days (90 days for the administrator's page).
Emails
Email is sent by Amazon Simple Email Service (SES). We send the emails your account needs (the code to confirm your address or reset your password, a welcome, and word when a subscription starts or ends) and, unless you turn them off, our letters. Every letter carries an unsubscribe link that works in one click, and a page where you can turn letters on or off. Unsubscribing stops letters and changes nothing else; the emails your account needs are still sent. An address that bounces or reports a letter as spam is no longer written to. Mail you send to support@restlesscatholic.com is kept for 90 days and forwarded to the person who answers it.
Cookies and your browser's storage
Every cookie below is set by our own site, is sent only over an encrypted connection, and cannot be read by the page's scripts. None is used for advertising.
| Name | What it does | How long |
|---|---|---|
__Host-sid | Keeps you signed in. It holds your sign-in session, encrypted. | Up to 30 days, or until you sign out |
CloudFront-Policy, CloudFront-Signature, CloudFront-Key-Pair-Id | Let Amazon CloudFront open the pages your account's level includes. One set for the free pages; a second set for subscribers. | Up to 12 hours at a time, renewed while you are signed in |
vid | Your visitor number: a random number our server gives your browser so that a second visit counts as a return, not a new person. It says nothing about you or your device. If you later create an account, it links your earlier visits on this browser to it. Not set under Global Privacy Control. | Up to 400 days from your last visit |
src | The campaign fields of the address you arrived at, if it had any, so that a sign-up can be counted by campaign. Cleared when you confirm an account. Not set under Global Privacy Control. | Up to 90 days |
In your browser's own storage, on your device only: your notes (the database daily-readings-notes), your choice of light or dark theme (theme), and whether you closed the map's side panel (mnPanelClosed). None of these is sent to us.
Who handles it for us
Amazon Web Services hosts the site and our databases, runs the sign-in service and sends our email, in the United States. Stripe takes payments and gifts. The reading pages load the map library Leaflet from cdnjs, a public library host run by Cloudflare, and the library that draws the modern map (protomaps-leaflet) from unpkg, another public library host; each receives your IP address and browser identifier as any web server does, and we receive nothing from either. The modern map itself comes from this site. We do not sell or rent what we collect, and we do not share it for advertising.
How long we keep it
- Your account, its standing, its history and its email record: while the account is open.
- Usage records: 20 days in our working database, then in our archive, where it is deleted after 400 days (and any replaced copy 30 days after that).
- Sign-up records with their campaign fields: about 13 months (400 days) in our working database, then in our archive, where it is deleted after 400 days (and any replaced copy 30 days after that).
- CloudFront logs and support mail: 90 days. Operating logs: 30 days.
- Our databases keep restore points for up to 35 days, so a deleted record can remain in a restore point for that long.
Your choices and rights
Write to support@restlesscatholic.com from the address on your account to ask for a copy of what we hold about you, to correct it, or to have your account deleted. We will close the account and delete its profile, its usage records and its email records, in our working database and in our archive, and tell you when it is done, within [response period]. A subscription should be cancelled first, in the customer portal from your account page; Stripe keeps its payment records as the law requires. Visits made on a browser that never signed in to the account, or under Global Privacy Control, cannot be tied to you and so cannot be found to delete. Your notes are in your browser: remove them there, or clear the site's data.
[State privacy law statements, if counsel finds the service in scope: for example a California notice at collection and "do not sell or share" statement.]
Children
Restless is not directed to children under 13, and we do not knowingly collect information from them. If you believe a child under 13 has created an account, write to us and we will delete it.
Where the service is offered
The service is made for readers in the United States, follows the liturgical calendar of the United States, and stores its data in the United States.
Changes
If we change what we collect, we will update this page and its date first, and tell account holders by email when the change matters.
Contact
V2 App, LLC, [postal address]. support@restlesscatholic.com.
For counsel (to be removed before publication)
- The archive (the data lake) has no expiry today; a period must be chosen, and deletion on request must reach it.
- State privacy laws (California's CCPA and CPRA and the others): whether our size puts us in scope, and whether a notice at collection or a "do not sell or share" statement is needed.
- Whether the keyed hash of the network, the visitor number
vid(linked to an account at sign-up) and the campaign cookiesrcneed notice or consent beyond this page; Global Privacy Control is honoured for both cookies. - Children: the service is not directed to under-13s; whether a higher age (Investment Research's draft uses 18) or a COPPA statement is wanted.
- Readers outside the United States are not blocked.
- Today the two ancient maps fetch their tiles from the University of Gothenburg and the University of Iowa, each of which sees the reader's IP address (the modern map is served from this site). The rights review (items 12 and 13) self-hosts the tiles before launch; if either stays third-party, it must be named under "Who handles it for us".