Privacy policy

1. Scope

This policy applies to all of phatgiaovns.com: scripture texts and the PDF library, audio, practice tools, prayer rooms for well-being and for the departed, community, temple search, Buddhist reference, calendar and personal accounts. Much public content can be read without signing in.

Book and in-app content searches run on your device using the downloaded catalogue. Requests for pages, images, audio and documents still pass through the infrastructure serving the website.

2. Information processed

When you visit, the infrastructure may process your IP address, browser information, request time and requested resource address to deliver content, protect the service and measure visits.

When you open the app online and allow website storage, an automatic profile is created with the default display name Phật tử and a unique identifier. Community features do not require a username, password or email. A username and password are optional. Private profile details, favorites, journals, calendars and practice history are stored under the profile identifier and synced to the server when connected. Renaming a profile does not change data ownership. Passwords, session tokens and recovery codes are hashed on the server.

Notes, private calendars, anniversaries, practice history and practice profiles are managed by account; they are not public community content. If you contact us by email, we receive the email address, message and attachments you choose to send so that we can handle your request.

3. Public content and your controls

Other people can read the display name, comments, prayers and replies you post in the community. Please consider carefully before including health information, addresses, phone numbers or someone else's private information in public content.

You can edit or delete your posts, report content and block accounts using the available features. Administrators may handle reports, hide content and manage accounts to maintain the community.

4. Device and offline storage

Session cookies keep you signed in; passwords and recovery codes are not stored in localStorage. Local data for interface preferences, reading positions, guest use, synchronization and offline downloads is stored through browser mechanisms such as localStorage, IndexedDB and caches.

Automatic profiles use an essential session cookie protected by Secure, HttpOnly and SameSite. A session lasts up to one year unless revoked. Basic identity details and practice data are stored separately for each profile on the device. Passwords, session tokens and recovery codes are not stored in localStorage. Local practice data from previous versions is imported once into the first automatic profile; original local copies are retained for comparison. Downloaded practice content and local changes remain available offline; public comments, prayers and PDF favorites require a connection. Keep your recovery code private to reopen your profile after changing devices or clearing browser data. Anyone with the code can access your profile. If both the session and the code are lost, the system cannot identify you from the name Phật tử alone.

The library stores book-opening counts and PDF-link check results for each session. Successful checks are reused for 5 minutes. The list of books that encountered errors remains on your device until you clear website data; the library code does not automatically send this list to an error-reporting server.

Downloaded audio, PDFs and offline content are for reading and listening without internet access. Deleting offline downloads does not delete your account or synchronised data. When you choose Copy, content is written to the clipboard in response to that action.

5. Private calendar and notifications

When you choose to connect your private calendar to Google Calendar or Apple Calendar, you receive a secret link allowing the calendar application to read your events. Notes are included only if you allow them. Anyone with the link can also read the calendar data; keep it private and revoke it when no longer needed.

Revoking the link stops future updates. Copies already imported into a calendar app or downloaded as files must be managed or deleted where they are stored. Notifications depend on the permissions and settings of the device or calendar app.

6. Infrastructure and third-party services

Cloudflare

The website, database and content storage use Cloudflare infrastructure. Depending on the active configuration, Cloudflare processes connection data, protects the website and may provide visit statistics through Cloudflare Web Analytics. See Cloudflare’s privacy policy and Cloudflare cookie information.

Google AdSense and advertising

The website is preparing to connect to AdSense; this version does not load Google ad-serving code. When advertising is introduced, the policy and related choices will be updated to reflect how the service actually operates.

When advertising code is active, Google and its partners may use cookies or process visit information to deliver and measure ads and prevent fraud. See how Google uses information from partner websites and Google My Ad Center. Necessary consent choices will be provided when services are introduced, according to the applicable region.

The app does not place journals, private calendars, notes, passwords or secret calendar links in advertising parameters, and does not use personal religious profiles to create advertising audiences.

PDFs, maps and linked content

The PDF reader and interface fonts are served by this website. Some documents may require character-decoding data from cdnjs. Directions links open an external map service; the website does not automatically obtain your location. Embedded content, if you open it, and linked websites have their own policies. Providers may process data outside Vietnam.

7. Data retention, export and deletion

Account data is retained to provide the features you use; service-protection records help limit failed sign-ins and spam and resolve problems. Support correspondence is kept as needed to handle and review requests. The website does not sell content you send by email.

In Profile → Settings, you can export your data or delete your profile. Automatic profiles require a valid session and explicit deletion confirmation; registered accounts also require the password. Linking to an existing account requires authentication for that account. Matching items with different content are kept as separate copies in the destination account for review and download; active versions are not automatically overwritten. After linking or creating an account, the old automatic profile recovery code stops working. Administrator accounts have additional deletion protection. Clearing browser data does not delete data already synced to the server. On shared devices, keep your recovery code private and manage website data after use.

Clearing browser data does not automatically delete account data on the server; deleting an account does not automatically retrieve copies already downloaded, sent or stored elsewhere. If you need help with your information, use the contact details below.

HTTPS, access controls and protective measures help reduce risk. No system can promise absolute security; please do not email passwords, recovery codes or unnecessary sensitive information.

8. Contact and updates

To request a review, correction or deletion of information you have provided, email nguyenminhtri201700@gmail.com. We may need appropriate information to verify requests concerning your own data.

This policy will be updated when the website’s data practices change; the revision date appears at the top of the page. See also Contact page to send feedback, report errors or discuss the sources and usage rights of materials.