Privacy Policy
Last updated: 15 September 2026
Carry This Verse is a place to read Bible verses and turn one into a wallpaper. Most of that happens without us knowing anything about you. This page says exactly what we do collect, when, and who else sees it.
The short version
- Reading the verses needs no account, and we set no cookie for it. Nothing you read is tied to you.
- Wallpaper previews are drawn in your browser. Downloads are rendered on our server and stored in our file storage.
- An account is required for wallpaper downloads. Waffo collects your email and billing details when you buy a memorial or wedding product.
- We do not sell personal data, and we do not run advertising.
- Fonts are served from our own domain, not a font CDN — so no third party is told which pages you open.
1. Who is responsible
Carry This Verse (carrythisverse.com) decides how and why the data described here is handled — in EU and UK law, that makes us the data controller. You can reach us about anything on this page at support@carrythisverse.com, or through the contact form.
2. What we collect, and when
Nothing in this section happens in the background. Each row is triggered by something you chose to do.
| When | What | Why | Where it lives |
|---|---|---|---|
| Reading verse pages | Nothing that identifies you. No account, no cookie, no profile. | — | — |
| Ticking “Add to wallpaper” | The list of verse IDs you ticked. | So the generator opens with the verses you picked. | Your browser only (localStorage), until you clear it. |
| Downloading a free wallpaper | Your account ID, verse and render settings, and download time. | To deliver the requested file and record downloads. | Our database (download_event) and file storage. |
| Creating a memorial or wedding page | The names, dates, photographs, stories, chosen verse and guest messages you provide. | To create your page, printable cards and QR code. Published pages and guest messages can be viewed by anyone with the link. | Our database and file storage. |
| Buying a memorial or wedding product | An order reference, the associated draft and its payment status. Waffo collects checkout and payment details; we do not store full card numbers. | To confirm payment and unlock your digital files. | Waffo and our database. |
| Creating an account | Name, email, a hashed password (or your Google account ID if you sign in with Google), and whether the email is verified. | To sign you in and keep your saved verses across devices. | Our database (user, account). |
| Being signed in | A session record with your IP address and browser user-agent string. | To keep you signed in and to spot stolen sessions. | Our database (session), until the session expires. |
| Saving a verse to your account | The verse ID and the topic page it came from. | To show your saved verses when you come back. | Our database (saved_verse). |
| Using the contact form | Your name, email, optional organisation, and your message. | To answer you. | Sent to us by email through Resend. Not stored in our database. |
We never store the text of a verse against your name. Verse text lives in the codebase, and your rows only reference it by ID.
3. Analytics
Analytics is currently switched off on this site. The code for Google Analytics 4 and Microsoft Clarity ships with the project, but both only load when their keys are configured, and today neither is. While that is the case, no analytics script runs and no analytics cookie is set.
If we turn either on, this page and the cookie policy will be updated on the same day, and we will ask for your consent before loading them. What they would collect:
- Google Analytics 4 — pages visited, approximate location from a truncated IP (we run it with
anonymize_ip), device and browser. Aggregate counts, not a name. - Microsoft Clarity — this one records a replay of how a page was used: scrolling, clicks, mouse movement. It is more intrusive than page counts, which is why it is named here rather than folded into the word “analytics”.
4. What we keep in your browser
These are local storage entries, not cookies. They stay on your device, are never sent to us, and clearing your browser data removes them.
vk:queue— the verses you ticked for a wallpaper.theme— whether you chose light or dark.
Cookies proper are covered in the cookie policy.
5. Who else handles your data
We use a small number of processors. Each one only gets what it needs for its job, and none of them may use it for their own purposes.
| Processor | What they handle | Where |
|---|---|---|
| Vercel | Hosting and request logs (IP address, timestamps). | EU / US |
| Our database host | The account, session, saved-verse and unlock records described above. | EU / US |
| Resend | Sends account emails and delivers contact-form messages to us. | US |
| Cloudflare R2 | Stores uploaded photographs and generated files. | Cloud storage |
| Waffo | Processes checkout, payments and order-related inquiries as Merchant of Record. | See Waffo’s privacy policy |
| Sign in with Google, if you use it. Google Analytics, if we enable it. | US | |
| Microsoft | Clarity, if we enable it. | US |
Where data reaches the United States, it is covered by the EU/UK Standard Contractual Clauses or the equivalent framework each provider operates under.
6. How long we keep it
- Account data — until you delete the account. Deleting it removes your saved verses with it.
- Sessions — until the session expires or you sign out.
- Unlock records — up to 24 months, then deleted. They exist to tell us which sizes people actually want.
- Contact messages — kept in our mailbox for as long as the conversation is useful, then deleted.
7. Your rights
If you are in the EU, the UK, or a US state with a privacy law such as California, you can ask us to show you what we hold, correct it, delete it, hand it over in a portable form, or stop a particular use. You can also withdraw consent at any time without it affecting what happened before.
Write to support@carrythisverse.com. We answer within 30 days, and we do not charge for it. We do not sell or share personal information as those terms are defined under the CCPA/CPRA, so there is nothing to opt out of on that front. If you think we have handled something badly, you may complain to your national data protection authority.
8. Children
This site is not directed at children under 13, and accounts are not intended for them. If you believe a child has given us personal data, email us and we will delete it.
9. Security
Traffic is served over HTTPS. Passwords are stored hashed, never in readable form. Access to the database is limited to the people running the site. No system is perfect, and we will not pretend otherwise — if a breach affects you, we will tell you and the relevant authority within the time the law requires.
10. Changes to this page
When the site starts or stops collecting something, this page changes with it and the date at the top moves. We will not quietly widen what we collect and leave the old text standing.