Privacy Policy

SentOne is a link-in-bio platform built for missionaries. Many of the people who use SentOne serve in places where privacy is not just a preference — it is a safety concern. We designed every part of this platform with that reality in mind.

This policy explains, in plain English, what data we collect, what we do not collect, and how we handle everything in between.

What we collect

When you create an account, we store the information you provide: your name, email address, and the content you add to your profile (mission statement, prayer requests, field updates, and photos). If you choose a custom slug (like sentone.to/your-name), we store that too.

When someone visits your public profile, we record basic click counts so you can see how many people viewed your page or tapped your giving link. These counts are simple totals — we do not attach them to any individual visitor.

When a supporter submits a prayer through your Prayer Wall, we store the text of that prayer and the name they choose to share (if any). That information is visible only to you in your dashboard.

What we do not collect

• —No IP addresses are stored when someone clicks a link or submits a prayer. We intentionally strip this information before anything is saved.
• —No visitor fingerprinting. We do not use browser fingerprinting, tracking pixels, or any technique to identify individual visitors.
• —No ad targeting. We do not run ads, build advertising profiles, or share data with ad networks.
• —No data sold to third parties. Your data and your supporters' data are never sold, rented, or traded.

How we store your data

Your password is hashed using bcrypt before it is stored. We never have access to your plain-text password, and neither does anyone else.

Photos you upload (profile pictures, field update images) are stored securely on Cloudflare R2, a cloud storage service with strong encryption at rest.

Cookies

When you log in, we set a single authentication cookie to keep you signed in. This cookie is an httpOnly cookie, which means it cannot be read by JavaScript running in your browser — only our server can access it. We use JSON Web Tokens (JWT) for authentication.

We do not use cookies for analytics, advertising, or cross-site tracking. Visitors to your public profile page do not receive any cookies from us.

Third-party services

We use a small number of trusted services to run SentOne. Here is exactly what they do and why:

• Stripe — processes payments when you purchase a plan. Stripe handles all payment card information directly; we never see or store your card number. Stripe's privacy policy applies to payment data they process.
• Resend — sends transactional emails on our behalf (account verification, password resets). We share only the email address needed to deliver those messages.
• Cloudflare R2 — stores uploaded photos (profile images, field update photos). Files are stored with encryption at rest and are served only through our application.

We do not use Google Analytics, Facebook Pixel, or any other third-party tracking tool.

Deleting your data

If you want to delete your account and all associated data, email us at hello@sentone.to. We will remove your profile, prayer submissions, field updates, uploaded photos, and account information. Once deleted, this data cannot be recovered.

Changes to this policy

If we make meaningful changes to this policy, we will update the date at the top of this page and, where possible, notify you by email. We will never quietly weaken your privacy protections.

Questions?

If you have any questions about this policy or how we handle your data, reach out to us at hello@sentone.to. We are happy to answer anything.