Legal
Privacy
What this website collects, why it is used, which providers are involved, how choices work, and which services are not currently open.
Last updated September 3, 2026
Privacy policy
This website and its project services are operated by The Maidens. This policy covers the public website. The restricted internal Social Director tool has a separate Social Director Privacy Notice.
Ordinary visits and local preferences
Reading the site, asking the Four privately, and using the Apply the Four worksheet do not require an account. Worksheet notes remain only in the current page until you reload or leave, unless you independently copy or print them; the worksheet does not send those notes to this service.
Theme and certain accessibility or interface preferences may be stored in your browser so the site can remember them on that device. If you previously acknowledged a Once-A-Day disclosure during testing or an earlier availability period, that version marker may also remain in local storage or a first-party cookie. These local markers do not contain a worksheet, message, email address, payment details, or Maiden response.
Contact and wishlist submissions
The contact form collects the name, email address, category, subject, and message you choose to submit. It is used to route and answer project, press, support, privacy, rights, conduct, and technical correspondence.
The future-merchandise wishlist collects selected item categories, a preferred Maiden, interest level, possible quantity, optional notes, and an optional email address. It measures demand; it does not create an order, reservation, account, supporter path, or Church membership. If you provide an email and consent, it may be used to contact you about the requested item.
Both forms use a hidden anti-spam field, server-side validation, and rate limiting. Submission records include a generated reference and the time needed to operate, secure, and support the request. Do not put passwords, payment-card details, health records, government identifiers, or other sensitive information in either form.
Providers, media, and analytics
Cloudflare provides website hosting, security, server execution, database infrastructure, and Web Analytics. Cloudflare may process request, network, device, security, and page-load beacon data under its own terms. The project uses aggregate Web Analytics page-view reporting; it does not add advertising pixels or build advertising audiences through this website.
Official videos use a poster façade. YouTube or Google is contacted only after you activate a video or follow an external YouTube link, at which point that provider’s terms and privacy practices apply. Other external music and social links likewise take you to the named provider.
Human correspondence may be processed by the project’s email provider when a message is routed or answered. Access is limited to people and service providers who need it for the stated purpose, security, or applicable obligations. The project does not sell website submission data.
Accounts, payments, and sealed services
Chapel accounts, Once-A-Day submissions, the Candle Chapel, supporter paths, direct offerings, and newsletter signup are not currently open. Their public status pages do not accept payment, create accounts, publish intentions, enroll supporter paths, subscribe visitors, or send prompts to an AI model.
If Once-A-Day is opened after its age, privacy, safety, payment, and moderation requirements are complete, its contextual disclosure and service terms will explain the exact message, selected voice, acknowledgement, safety, retention, optional-memory, and AI processing in effect before submission. A response would be an automated artistic experience, not divine communication, clergy care, therapy, professional advice, or an emergency service.
No public payment flow is enabled. If a paid service opens later, an official hosted payment provider such as Stripe will collect card and checkout information under its own policy. This website will not collect or store payment-card numbers.
Private account and service implementations are retained behind server-side gates. Private responses use authorization checks and private, no-store caching. The existence of backend code does not mean a public feature is available.
Retention, access, correction, and deletion
Contact and wishlist records are retained for project operations, consent evidence, security, support, and applicable obligations. No shorter fixed public period is promised for those records. Data held by an external platform is also subject to that provider’s retention and account controls.
You may ask for access, correction, or deletion review of information you submitted. Include the generated form reference, relevant email address, and enough context to locate the record; do not send identity documents unless the project specifically explains why they are necessary. A request may be limited where records must be kept for security, fraud prevention, disputes, or applicable obligations.
Use the contact form or email legal@themaidensofficial.com for a privacy question or request. Social Director or Meta-related requests use the separate data deletion instructions.