Privacy Policy
Effective date: 3 October 2026
1. Who we are
This policy covers the website at random-bible.com, the Random Bible web app at random-bible.com/app/, the embeddable verse widget, and the Random Bible extension for Google Chrome (together, the "Services").
The Services are operated by an individual based in the Republic of Cyprus ("we", "us", "our"). For the purposes of the EU General Data Protection Regulation (GDPR) and the UK GDPR, we are the controller of the personal data described in this policy. You can contact us about anything in this policy at [email protected].
2. Summary
- You do not need an account, and we never ask for your name, email or other identity.
- We do not sell personal data, do not share it for advertising, do not show ads, and do not build profiles of you.
- The site uses cookieless analytics that record aggregate usage, not who you are. We set no cookies.
- Your saved verses, settings and reading progress are stored on your own device, not on our servers.
- The Chrome extension cannot read the pages you visit. What you type in its search box goes to the search engine you chose in Chrome, not to us.
3. Data we process on the website and web app
3.1 Technical data needed to deliver the site
When your browser requests a page, image or file, our hosting and network provider, Cloudflare, Inc., necessarily receives your IP address, the requested URL, the time, your browser's user agent and similar request data. Cloudflare uses this to deliver the content, to keep the Services available and to protect them against abuse and attacks (for example by filtering malicious traffic). We do not use this data to identify you.
Legal basis: our legitimate interest in operating a secure and reliable website (Article 6(1)(f) GDPR).
3.2 Cookieless analytics
To understand which pages and features are useful, we use Umami Cloud, provided by Umami Software, Inc. It does not use cookies or similar identifiers, does not track you across other websites, and does not store your IP address. It records the page visited, the referring website, the browser, operating system and device type, an approximate country derived from the request, and anonymous interaction events on our pages (for example that the "Another verse" button was pressed). We see this data only as aggregate statistics.
Legal basis: our legitimate interest in understanding and improving the Services (Article 6(1)(f) GDPR). You can block the analytics script with any common content blocker; the Services keep working.
3.3 Storage on your device
The site and the web app store some information in your browser's local storage so that they work the way you left them: your theme, your preferences (such as Bible translation and draw scope), the verses you save, your reading progress, your daily streak, and whether you have seen or dismissed the install prompt. The installed web app also keeps an offline copy of its files using a service worker. This information stays on your device. It is not sent to us, and we cannot see it. You can delete it at any time by clearing the site data for random-bible.com in your browser.
Legal basis: this storage is strictly necessary to provide the features you use (Article 5(3) of the ePrivacy Directive and its national implementations), so no consent banner is required.
3.4 The embeddable verse widget
Website owners can embed our verse widget on their own pages. When a page with the widget loads, your browser requests the widget script and verse data from random-bible.com, which involves the technical request data described in section 3.1. The widget sets no cookies and does not collect analytics about visitors of the host website. The host website's own privacy policy governs everything else on that page.
4. Data processed by the Chrome extension
4.1 What stays on your device
Your settings, the verses you save, your daily streak, your mood choice, the side panel state and any photo you upload as your own background are stored in Chrome's extension storage (chrome.storage.local) on your device. They are not sent to us or to anyone else. Removing the extension deletes this data.
4.2 Web search
The new tab page has an optional search box. When you press Enter, the extension passes the text you typed to Chrome through the chrome.search API, and Chrome runs the search with the default search engine you selected in Chrome's settings. The extension does not store, read, log or transmit your search queries, and it never changes your search engine. Your search is then subject to that search engine's privacy policy. You can hide the search box in the extension's Settings.
4.3 Background photos
To refresh its gallery of background photos, the extension downloads a list of images and the image files from random-bible.com. These requests carry only the technical data described in section 3.1 and nothing about your activity, saved verses or settings.
4.4 Links to the website
When you open a chapter, quiz, word search or study from the extension, it opens on random-bible.com in a new tab, where section 3 of this policy applies. These links include campaign parameters (such as utm_source=extension) that tell our aggregate analytics which part of the extension the visit came from. They contain no personal data.
4.5 Usage statistics
The extension sends anonymous usage events to Umami Cloud, the same cookieless analytics service described in section 3.2. An event records which screen was opened or which button was used (for example "Another verse" or "Keep"), the extension version, your browser language and screen size. Once a day it also sends the settings in use (such as the translation, theme and whether the search box is shown), how many days ago the extension was installed and the length of your daily streak, each rounded into a range. Umami also derives the browser, operating system and an approximate country from the request. The extension creates and stores no identifier for this, and never sends the text of verses, your saved verses, your search queries or the background photo you chose. We see this data only as aggregate statistics.
Legal basis: our legitimate interest in understanding which features are useful and improving the extension (Article 6(1)(f) GDPR).
4.6 Feedback and uninstall forms
If you choose to send feedback, or if you uninstall the extension, a Google Form may open. The uninstall form address includes only the extension version and your browser language. Any answers you type are entirely voluntary and are collected by Google LLC on our behalf through Google Forms. Please do not include personal information in free-text answers. If you send us an email instead, we use your address and message only to reply.
Legal basis: our legitimate interest in improving the extension (Article 6(1)(f) GDPR) and, for emails, taking the steps you asked for (Article 6(1)(b) GDPR).
4.7 Permissions
The extension asks Chrome for these permissions only:
- storage, to keep your settings and saved verses on your device;
- sidePanel, to show its side panel;
- search, to send your search box query to your default search engine.
It has no host permissions, no content scripts, and no access to your tabs, browsing history, bookmarks or the content of websites you visit.
4.8 Chrome Web Store User Data Policy
The use of information received by the Random Bible extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. The extension does not collect user data beyond what is described above. We do not sell or transfer user data to third parties, do not use or transfer it for purposes unrelated to the extension's single purpose, and do not use or transfer it to determine creditworthiness or for lending purposes.
5. Service providers and transfers
We use the following providers, each acting on our behalf as a processor:
- Cloudflare, Inc. (United States): hosting, content delivery and security;
- Umami Software, Inc. (United States): cookieless analytics;
- Google LLC (United States): Google Forms for optional feedback.
Some of these providers process data outside the European Economic Area. Where they do, the transfer relies on the EU-U.S. Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses included in the provider's data processing terms.
Google, as the distributor of the Chrome Web Store and of Chrome, processes data about installations and your use of Chrome under its own privacy policy, as an independent controller. The same applies to the search engine you choose.
6. How long we keep data
- Data on your device stays until you delete it or remove the extension or app.
- Request data at Cloudflare is kept only as long as Cloudflare needs it for delivery, security and its legal obligations, under its own retention schedules.
- Analytics data is kept in aggregate form for as long as it is useful to us.
- Feedback form answers and emails are kept until the matter is resolved, and deleted on request.
7. Your rights
If you are in the EU, the EEA or the UK, you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to its processing, and to data portability. Where we rely on legitimate interests, you can object at any time. To use these rights, email [email protected]. Because we do not identify visitors, we usually hold no data that can be linked to you; if we cannot identify you, we will tell you.
You also have the right to lodge a complaint with a supervisory authority, in particular in the country where you live. Our lead authority is the Commissioner for Personal Data Protection of the Republic of Cyprus (dataprotection.gov.cy).
California and other US states. We do not sell or share personal information as those terms are defined in the California Consumer Privacy Act (as amended by the CPRA) or similar state laws, and we do not use it for targeted advertising or profiling. You may request to know, delete or correct personal information by emailing us, and we will not discriminate against you for doing so.
8. Children
The Services are suitable for general audiences and do not ask for any personal information. We do not knowingly collect personal data from children under 13, or under 16 where local law sets that age. If you believe a child has sent us personal data, for example in a feedback form, contact us and we will delete it.
9. Security
The Services are served only over HTTPS. Because we keep almost no personal data, there is little to protect on our side. Data stored on your device is protected by your browser and your device's own security.
10. Changes to this policy
We may update this policy when the Services change. The effective date at the top shows when it was last changed. If a change materially affects how we handle personal data, we will make it visible on the website or in the extension's store listing before it takes effect.
11. Contact
Questions, requests or complaints about privacy: [email protected].