Privacy Policy

Effective date: October 1, 2026.

Last updated: October 4, 2026.

Prayer Library is a free Catholic prayer library. You can read and print materials without an account. Saved prayer progress stays in your browser; we do not receive a copy of that progress. This policy explains the information used to provide the website and respond to requests.

Who is responsible

Sabiedrība ar ierobežotu atbildību Grigerlab (SIA Grigerlab) is the controller responsible for personal data processed for Prayer Library.

For privacy questions or requests, email support@grigerlab.com.

This policy covers Prayer Library. External websites linked from the library have their own operators and privacy policies.

Information we use

Website requests. When you open a page or request a source file, our hosting server receives your IP address, the requested address, request time, and technical information sent by your browser. This information is used to deliver the service, investigate faults, and protect against abuse. Limited diagnostic records may contain request or error information.

Messages you send us. If you email us, we use your email address, any name you provide, and your message and attachments to answer the request, investigate a correction or rights notice, and meet applicable legal obligations. Contacting support does not subscribe you to marketing.

Printing and saving a PDF. When you print a reading page or save it as a PDF through the print dialog, your browser creates the document on your device. We do not generate that PDF on our server.

Progress saved on your device. The library can save your selected novenas or prayer plans, progress, and chosen start dates on your device. This saved information is not sent to us or to an analytics service. Reading and printing do not require saving progress.

Search and calendar tools. Search and calendar tools work in your browser. Search words and chosen start dates are not sent to us. The address of a page you request may identify a prayer or plan and reaches our server when we deliver that page; saved progress stays on your device.

Information comes from your browser or directly from you or a person authorized to act for you. We do not obtain visitor profiles from data brokers. We have no user accounts, payment processing, cloud prayer histories, public comments, or prayer-intention submission form.

Why we use information

For website delivery, troubleshooting, and security, we rely on our legitimate interests in providing a functioning, secure service under GDPR Article 6(1)(f). We also rely on legitimate interests when handling ordinary correspondence and rights concerns, and on Article 6(1)(c) when processing is necessary to meet a legal obligation.

Technical connection information is needed to deliver the website. To answer a message, we need a reply address and enough information to understand your request. You do not have to provide a name or other personal details simply to read the library.

Religious and sensitive information

Prayer-related information can reveal religious beliefs or other sensitive circumstances. We do not use your activity or messages to build religious or health profiles or target advertising. Saved progress remains on your device.

Please avoid sending prayer intentions, medical histories, information about other people, or other sensitive details unnecessary for a technical, editorial, or rights request. Our support inbox is not a confidential pastoral, medical, or emergency service.

If handling sensitive information is necessary, we establish an applicable legal condition, such as explicit consent or necessity for legal claims, as well as the relevant ordinary legal basis. Sending a message does not permit unrelated uses of its contents.

Browser storage and cookies

The saving feature uses local browser storage to keep the prayer progress you choose to save. We do not use this information for analytics or advertising.

Saved attempts have no automatic expiry. You can remove an attempt in My novenas, or remove all saved information by clearing this site’s data in your browser settings. We cannot retrieve or delete a server copy because we do not hold one. Progress does not automatically transfer to another browser or device. Someone using the same browser profile may be able to see it.

You can open Cookie settings in the footer at any time. We use a necessary cookie to remember your choice for up to 180 days. We keep evidence of consent where required; it does not include prayer activity.

We use your approximate country to select the appropriate analytics notice. If your country cannot be determined, analytics stays off until you allow it.

Visit analytics

We use Google Analytics 4 for limited visit statistics. In jurisdictions where prior consent is required, analytics remains off until you allow it. Elsewhere, limited analytics starts automatically unless you opt out or a recognized Global Privacy Control signal applies. You can decline without losing access to reading, printing, or local progress features. In jurisdictions requiring consent, closing the notice or continuing to browse does not enable analytics. Where prior consent is required, no analytics information is sent to Google before you allow it.

Visit statistics include cookie identifiers, visit times, device and browser categories, and approximate country or region. Google receives connection information needed to process the requests. Where analytics relies on consent, the basis is GDPR Article 6(1)(a) and, where permitted processing reveals religious beliefs, explicit consent under Article 9(2)(a). For limited automatic visit statistics where prior consent is not required, we rely on our legitimate interests in understanding overall use and improving the library under GDPR Article 6(1)(f). You can object by switching analytics off in Cookie settings. We do not use automatic analytics to process sensitive religious or health information or build profiles.

Analytics does not include prayer texts or titles, saved progress or start dates, search words, private messages, or details from page addresses. We do not use analytics for personalized advertising or to build religious or health profiles.

Analytics cookies and retention

Google Analytics data associated with individual browsers and events is retained for two months. Standard aggregated reports may remain available longer. We keep choice records only as needed to honor your preference and demonstrate consent where required.

Changing your choice

You can decline or withdraw analytics consent, or switch off automatic analytics, at any time through Cookie settings in the website footer. Withdrawal stops further analytics and removes this website’s analytics cookies. It does not make earlier processing unlawful. You can contact us about relevant information already held by us or our providers. Analytics consent is separate from using the local progress feature.

Where a recognized Global Privacy Control signal is received, we keep optional analytics off. We do not sell personal information or share it for cross-context behavioral advertising.

Google and international processing

Google Analytics providers and their subprocessors receive the permitted analytics information. Processing may occur in the United States and other countries outside the EEA. We use the transfer safeguards applicable to the recipient and processing, such as approved contractual clauses with additional measures where required, or a valid adequacy decision where it applies. UK and Swiss transfers use the safeguards required by their applicable laws. Analytics consent is not our legal mechanism for routine international transfers.

See Google’s explanation of partner-site information and data transfer frameworks. Contact support@grigerlab.com for information about the safeguards relevant to your data and how to obtain a copy.

Recipients and international processing

Information necessary for website operation and correspondence may be handled by authorized personnel and our hosting, technical maintenance, and email providers. Advisers, authorities, or courts may receive limited information when necessary for a legal obligation or claim. We limit disclosure to the relevant purpose.

The website is hosted by Hetzner in Finland. Cloudflare provides website traffic protection and content delivery, including fonts and linked source files. Cloudflare receives the connection and request information needed for those services; processing may occur in countries outside the EEA. See Cloudflare’s privacy policy for its handling of information. The transfer safeguards described below apply where required.

Our contact email uses Proton Mail; Proton states that its mail servers are in Switzerland, Germany, and Norway. Germany and Norway are within the European Economic Area. Switzerland benefits from an EU adequacy decision. See Proton’s Mail privacy policy for its handling of email.

If another provider arrangement involves a transfer outside the EEA, we use an applicable lawful safeguard, such as an adequacy decision or approved contractual clauses with additional measures where required. Where UK or Swiss transfer rules apply, we use the safeguards required by those rules. You can contact us for information about safeguards relevant to your data and how to obtain a copy, subject to appropriate protection of confidential information.

How long information is kept

Technical diagnostic records are kept only as needed for troubleshooting and security. Information needed for a particular incident or legal claim may be kept for that matter.

Correspondence is kept while needed to answer and resolve your request and, after resolution, only where needed to document its handling, meet a legal obligation, or address a specific claim. Unnecessary sensitive details are removed when no longer needed.

Locally saved progress remains in your browser until you remove it or clear this site’s browser data. We do not keep a server backup of that progress.

Your rights

GDPR applies to processing within the scope of our establishment in Latvia, including relevant processing of visitors outside the EU. Subject to its conditions, you may request access, correction, deletion, restriction, or portability of personal data and withdraw consent where processing relies on it.

You may object to processing based on legitimate interests on grounds relating to your particular situation. We will stop unless the law permits continuation, for example because of overriding compelling legitimate grounds or the need to establish, exercise, or defend legal claims.

Email support@grigerlab.com to exercise a right. Describe the request and provide enough information to locate relevant records. We may seek proportionate verification of identity or authority. Do not send identity documents unless we explain why they are necessary. For information kept only in your browser, use the local removal options described above.

For GDPR requests, we respond without undue delay and within one month of receiving the request. Where the law permits an extension because of the complexity or number of requests, we explain it and its reasons within the first month. We observe other applicable legal deadlines and explain a refusal and available routes to challenge it.

You may complain to Latvia’s Data State Inspectorate or another competent supervisory authority, including where you live, work, or believe an infringement occurred. You do not have to contact us first.

Visitors in other regions

United Kingdom and Switzerland. Where local law applies, you may exercise its access, correction, deletion, objection, and other applicable rights through the same contact. You may also contact the UK Information Commissioner or the Swiss Federal Data Protection and Information Commissioner.

United States. Depending on your state and whether the relevant law applies, additional rights may include knowing what information is collected, obtaining a copy, correction, deletion, opting out of sale, sharing or targeted advertising, limiting certain uses of sensitive information, and appealing a denied request. We do not engage in sale, advertising sharing, or targeted advertising. Email support@grigerlab.com with your request or appeal. An authorized agent may act where the law permits, with appropriate proof of authority. We do not discriminate against people for exercising applicable privacy rights.

These provisions preserve applicable local rights without stating that every regional privacy law applies to this service.

Children

The library is for a general audience and is not specifically directed to children under 13. We do not knowingly collect children’s personal information through accounts or optional analytics. Children should read with suitable adult guidance and should not send private information to our support email.

If you believe a child’s information has been collected improperly, contact support@grigerlab.com. We will investigate and address the information and any applicable parental-consent requirements.

Security and changes

We use appropriate technical and organizational measures to protect information, including limiting access. No system can guarantee absolute security. If a personal-data breach occurs, we address it and notify affected people and authorities where the law requires.

The current policy and effective date appear on this page. We will give appropriate notice of material changes and obtain new consent where required before starting a new consent-based use.