Privacy Policy

This policy explains what personal data we collect through jagjourney.com, why we collect it, who receives it and what choices you have. The rules for using this website are in our Terms of Use.

1. Who we are

Jag Journey, LLC ("we", "us") runs jagjourney.com and is the controller of the personal data described in this policy. Our home jurisdiction is Texas, USA, and we handle personal data in the United States.

The site runs on VoVo, our own website platform, so we host it ourselves rather than through an outside host.

This policy covers jagjourney.com only. Our products and faith experiences have their own websites. When you follow a link to one of them, that website's own policies apply.

2. What we collect

Contact messages and forms

When you use our contact form, we collect your name, email address, your organization if you give one, the topic you choose and your message. If a page offers another form, such as an event sign-up, we collect what that form asks for.

Please share only what you are comfortable sharing. A message about faith or a hard season can say a lot about you. We use what you tell us only to reply to you and to keep a record of the conversation.

Accounts and comments

If you create an account, we collect your name, your email address and your password, which we store in a protected form. If you comment on a blog post, we keep your comment and show it with your name.

Site visits

We collect your network (IP) address, browser and device details, pages viewed, the referring page and the results of security checks. A site firewall checks visitors to block attacks and automated abuse.

Payments

Nothing is sold on jagjourney.com today, so we do not collect payment details here.

3. Cookies and browser storage

The site uses these cookies and browser storage items:

• _ra_vid (our own analytics): a random visitor ID that lasts across visits.
• _ra_sid (our own analytics): a random session ID that ends with the session.
• _ra_la (our own analytics): the time of your last activity, which ends with the session.
• XSRF-TOKEN (essential): keeps forms and sign-in secure.
• Session cookie (essential): keeps forms and sign-in secure.
• theme and theme-preference (browser storage): remember light or dark mode.

Cloudflare Web Analytics runs on the site and gives us privacy-focused page statistics. It does not use cookies.

Cloudflare Turnstile checks our forms for automated abuse. It sees your network address and browser details when a form is on the page.

The site loads some code from the jsDelivr public CDN, which sees your network address as any web server would.

We use no advertising cookies. You can clear or block cookies in your browser settings, but forms and sign-in may stop working without the essential ones.

4. Why we use your data

We use personal data to:

• answer your messages and keep a record of them
• run accounts and blog comments
• protect the site against attacks, spam and abuse
• understand how the site is used
• meet our legal duties

Legal bases for visitors in the EEA and UK

• Contract: to provide your account and the features you ask for.
• Legitimate interests: answering messages, security, stopping spam and understanding site use.
• Legal obligation: to keep the records the law requires and to answer lawful requests.
• Consent: where the law requires it, including for anything sensitive you choose to tell us. You can withdraw consent at any time.

5. Who we share data with

We do not sell personal data, and we do not share it for targeted advertising. We share it only with:

• Cloudflare: network, security, form checks and analytics.
• jsDelivr: code delivery.
• The mail delivery service that sends our emails.
• Authorities or others: where the law requires it or to protect rights.
• A buyer or successor: in a merger or sale of the business.

6. Emails

We use your email address to answer you and to send account messages, such as a password reset. We do not send marketing email without your permission.

7. How long we keep data

• Contact messages and form entries: as long as needed to deal with them and keep a history of the conversation. You can ask us to remove them.
• Accounts: until you delete your account or ask us to.
• Comments: for as long as they stay on the site. You can ask us to remove yours.
• Analytics and logs: only as long as they are useful for security and statistics.

8. Security

We use encrypted connections and limit who can access personal data. No system is perfectly secure, so we cannot promise that data will never be exposed.

9. Your rights

EEA and UK

You have the right to:

• access your personal data
• correct it
• delete it
• receive a portable copy of it
• object to how we use it
• restrict how we use it
• withdraw consent
• complain to a data protection regulator

You can also bring a complaint to us first through our contact form.

California and other US states

Depending on where you live, you have the right to:

• know what personal information we collect and how we use it
• delete it
• correct it
• use these rights without discrimination

We do not sell or share personal information, as those words are used in these laws.

How to make a request

Send your request through our contact form. We verify who is asking before we act, and if someone else asks for you, we also verify that you authorized them. We answer within the time the law that applies to you allows.

We may have to keep some data after a request to delete, where the law requires it.

If we turn down a request and your state gives you a right to appeal, you can appeal through the same form. If we turn down the appeal, we will tell you how to complain to the state authority that handles privacy complaints.

10. International transfers

We handle data in the United States, and our visitors can be anywhere. If you use the site from another country, your data goes to the United States, where privacy laws may differ from those in your country.

11. Children

This site is not directed to children under 13 (under 16 in the EEA and UK), and we do not knowingly collect their data. If you believe a child has given us personal data, tell us through our contact form.

12. Changes to this policy

When we change this policy, we post the new version here with a new date.

13. Contact

For any privacy question or request, use our contact form.