← Back to OneAltar · Community guidelines
DRAFT, not yet legal advice. Have a Kenyan advocate review this before launch, and fill in the [bracketed] details. Last updated: 2 November 2026 (Stage 1).
Who we are: OneAltar, operated by [legal entity name, registration number, Nairobi address]. Contact: [privacy email]. We follow the Kenya Data Protection Act, 2019 (and the GDPR where it applies).
There are no accounts, passwords, Google or phone logins. When you click Subscribe, your browser creates a random device ID and keeps it in its local storage. Our database stores:
| What | Why |
|---|---|
| The random device ID | Counts your device once, and lets you post, follow, join and unsubscribe |
| Date and time you subscribed | Counting subscribers over time |
| Country (two letters, from Cloudflare) and browser language | Planning languages and service times. We do not store your IP address. |
Your device ID is secret to your browser. Other people see only a short public code derived from it (for example @3f2b9a), plus an optional nickname if you choose one. Use a nickname, not your full name, if you prefer.
| Content | Visible to | Deleted automatically |
|---|---|---|
| Prayer requests (can be anonymous) | Everyone | After 7 days |
| Stories | Everyone | After 24 hours |
| Testimonies, sermon notes | Everyone | After 30 days (room notes: when the room ends + 1 day) |
| Comments, likes, "I prayed", views, shares | Counts are public; who did it is not shown | With the post they belong to |
| Fasts, Kesha vigils, study rooms | Everyone (personal fasts: only you) | 1–2 days after they end |
| Church listings you submit, and follows | Everyone (follower counts only) | Kept until removed; follows are removed when you unsubscribe |
| Reports | Moderators only | After 90 days |
You can delete your own posts at any time from the ⋯ menu. Bookmarks, reminders and your language choice stay only in your browser. OneAltar never records livestreams; church streams are played directly from YouTube (privacy-enhanced youtube-nocookie.com mode, loaded only when you press play) or opened on the church's own site.
Please don't put phone numbers, emails, money requests or other personal details in public posts. Our filter holds posts that look like they contain them for review.
If you choose to share contact details (phone, WhatsApp, email, city or a social handle) with another believer: you pick the fields, you tick a consent disclaimer, and nothing is shown to the other person until they also accept and tick the disclaimer. Only the two of you can see the details. We store the details you chose, the time each of you consented, and the status of the connection. When either person revokes, declines or blocks, both sets of details are erased from our database immediately (the other person may already have seen or saved them). Revoked and declined records are removed after 30 days. Lawful basis: your consent, which you can withdraw at any time.
OneAltar is free. Optional support is a voluntary contribution toward running the platform only (hosting, maintenance, security, development). It is not a tithe, offering or donation to any church or individual, and OneAltar offers no person-to-person or church giving. Payments happen entirely inside the provider you choose: Safaricom M-Pesa (Pay Bill 522533, Account 7674573), Paystack (when enabled), or world.support, each under its own terms; the provider and account holder receive the transaction details the provider shares. OneAltar never sees your PIN or card details. Your confirmation of the support conditions is stored only on your device.
Only if you fill in the optional "Church leader or volunteer?" form, we store the email or phone you enter, your role, country and a record of your consent, to contact you about onboarding. Kept until launch plus 6 months or until you ask us to delete it.
Press Unsubscribe this device under the Subscribe button. This deletes your subscriber row, nickname, follows, event joins, likes and "I prayed" marks, and every contact share you were part of, and removes the ID from your browser. Remaining anonymous posts disappear on their normal schedule, or delete them yourself first. For any other request, contact [privacy email].
i.ytimg.com, so those services receive your IP address when they load. [Consider self-hosting fonts.]