隐私政策
回向是一个在线转经筒与念珠。我们只收集让它正常运行所必需的数据，不投放广告，不做跟踪，不使用第三方统计，也不出售任何数据。
不登录时
- 留在你设备上的：转数、功德簿、每日打卡、我的功课、法器之光、自定义经文和设置，都只保存在你的浏览器或应用里，不会上传。
- 屏蔽名单：保存在你的设备上。浏览许愿墙时，它以只有服务器能解开的加密凭证随请求发送，用来滤掉你屏蔽的人，服务器不保存。屏蔽时，我们会给被屏蔽的人记一次匿名举报，供管理员审查。
- 在线人数：页面打开时，每隔几分钟发送一次一个随机生成的匿名编号和当前选择的传统，用来统计「此刻在线」。这个编号与你本人无关，不包含任何个人信息。
- 共同心愿与许愿墙计数：你为共同心愿或别人的心愿转的次数，只计入总数，不记录是谁转的。
- 防滥用：为了限制刷屏、防止重复举报，我们会用「IP 地址 + 浏览器标识 + 日期」加盐计算一个单向哈希值。我们不保存 IP 地址本身，这个哈希值无法还原，并且每天都会变化。
登录后
- 邮箱：用来发送一次性验证码、登录账号。我们不会用它发广告。
- 昵称：显示在功德榜和许愿墙上。你可以在设置里改为「匿名」显示，也可以单条心愿匿名发布。
- 功德与修行记录：累计功德、法器之光、每日打卡和我的功课会同步到账号，换设备时可以恢复。功德榜前 100 名会公开显示昵称（或「匿名」）和功德数。
- 许愿墙：你发布的心愿会公开显示。举报记录只保存举报人的匿名哈希值。
- 邀请：通过分享功德海报邀请朋友注册时，我们记录邀请关系，用来发放功德。
- 登录状态：浏览器或应用里保存一个会话 Cookie，服务器只保存它的哈希值，60 天后失效。验证码只保存哈希值，10 分钟后失效。
每晚提醒
- iOS / Android 应用：提醒是手机本地定时的通知，不会把任何信息发到服务器。
- 网站：如果你在浏览器里开启每晚提醒，我们会保存浏览器提供的推送地址、时区和当天的提醒文字，用来在当地时间晚上 10 点发送通知。关闭提醒后立即删除。
谁在处理数据
网站、数据库和验证码邮件由 Cloudflare 提供托管与发送服务，只按我们的指示处理数据。除此之外，我们不与任何第三方共享数据。所有传输都经过 HTTPS 加密。
保存多久、怎么删除
- 账号数据保存到你删除账号为止。
- 在应用或网站的「设置 → 账号 → 删除账号」里，可以立即删除账号。删除会同时清除你的邮箱、昵称、功德、法器之光、打卡与功课记录、你发布的全部心愿、邀请关系和有关你的举报记录。
- 无法登录时，请看删除账号页面，或从注册邮箱写信给我们。
- 保存在你设备上的数据，可以在功德簿里「清空」，或删除应用 / 清除浏览器数据。
儿童
回向面向 13 岁及以上的用户，不面向儿童，也不会有意收集儿童的个人信息。
变更与联系
政策有重要变更时，我们会在本页更新日期并在应用内提示。有任何问题，请写信到 [email protected]。
Privacy Policy
Orison is an online prayer wheel and prayer beads. We collect only what it needs to work. There are no ads, no tracking, no third-party analytics, and we never sell data.
Without an account
- On your device: your counts, ledger, daily check-ins, practice plan, instrument light, your own texts and settings stay in your browser or app and are not uploaded.
- Block list: kept on your device. When you browse the wish wall it is sent along as encrypted tokens only our server can read, to leave out the people you blocked; the server does not keep it. Blocking someone also records an anonymous report about them for our moderators.
- Online count: while the page is open, it sends a random anonymous ID and the tradition you chose every few minutes, to show how many people are turning right now. The ID is not linked to you.
- Shared counters: turns for shared intentions or for other people's wishes are added to totals without recording who made them.
- Abuse prevention: to limit spam and duplicate reports we compute a salted one-way hash of IP address, browser identifier and date. The IP address itself is never stored; the hash cannot be reversed and changes daily.
With an account
- Email: to send one-time sign-in codes. Never used for marketing.
- Nickname: shown on the merit board and the wish wall; you can appear as "Anonymous" instead, or post a wish anonymously.
- Practice records: total merit, instrument light, check-ins and your practice plan sync to your account so they survive a new device. The top 100 on the merit board are shown publicly with nickname (or "Anonymous") and merit.
- Wish wall: wishes you post are public. Reports store only the reporter's anonymous hash.
- Invitations: when a friend signs up through your poster, we record who invited whom to credit the merit.
- Sign-in: a session cookie is kept in your browser or app; the server stores only its hash, for 60 days. Sign-in codes are stored hashed and expire after 10 minutes.
Nightly reminder
- iOS / Android apps: the reminder is a notification scheduled on your phone; nothing is sent to our servers.
- Website: if you turn on the reminder in a browser, we store the push address your browser provides, your time zone and that day's reminder text to deliver it at 10 pm local time. Turning it off deletes them.
Processors
Hosting, the database and sign-in emails are provided by Cloudflare, acting on our instructions. We share data with no one else. All traffic is encrypted with HTTPS.
Retention and deletion
- Account data is kept until you delete your account.
- Settings → Account → Delete account (in the app or on the website) deletes it immediately, including your email, nickname, merit, instrument light, check-ins and plan, every wish you posted, invitation links and reports about you.
- If you cannot sign in, see Delete account or write to us from your account's email address.
- Data on your device can be cleared in the ledger, or by deleting the app or your browser data.
Children
Orison is meant for people aged 13 and over. It is not directed at children and we do not knowingly collect children's personal information.
Changes and contact
We will update the date on this page and tell you in the app about important changes. Questions: [email protected].