☥Per Ankh

Privacy & your data

Last updated 16 September 2026. This page is part of the site's source code, so its history is visible and any change to it is a recorded change.

Per Ankh is a church with a members' area. That means we hold some information about people who apply or belong, and it means we owe you a plain account of it. This page is that account: what we store, where it lives, what never leaves your own device, who else is involved, and how to have your information removed.

The short version

What we store, and why

Everything in this table is information you have given us, or that exists because you used a feature. There is no profile we build from other sources.

WhatWhy we have it
Membership application Name, email, phone, postal address, date of birth, your answers to the eligibility questions (including the law-enforcement question and your relationship to entheogens), how you heard about us, and why you want to join. We need this to consider an application, to confirm you are eligible to belong, and to contact you about it.
Proof-of-identity image If you upload one with your application. It is stored on our own server storage, outside the public website directory — it is not downloadable from the site — and it is used to verify identity and eligibility. It is visible only to the administrators who review applications.
Payment records Your membership status and identifiers from our payment processor. We never see or store your card number — that goes directly to Stripe.
Member profile Display name, handle, avatar, biography, lineage, pronouns, city and state, and the interests you choose. You decide what goes in it.
Community activity Posts, comments, reactions, images you attach, and reports ("flags") on content. This is the members' area working as intended; a post is visible to other members.
Private messages Conversations with other members, when you use the inbox, and the list of members you have blocked.
Standings, only if you publish them If you opt in to the Fungarium's board: a display name you choose, your XP, rank, number of specimens, capstones and best streak. Nothing else — no lesson history, no quiz answers, no capstone notes. Withdrawing removes the entry.
Account and sign-in Your sign-in is handled by Clerk. We receive your account identifier, email and the role that decides what you can open.
Access repairs When your sign-in identity changes — most obviously if the church moves to a different authentication service, where everyone's account identifier changes — we re-connect your record to the new identity and restore the access your approved membership entitles you to. Each time that happens we record it: which identity, which record, and when. It exists so that a change in who can open the members' area is always traceable.
Notes by administrators Internal notes recorded while an application is reviewed. They exist so a decision can be explained later.

What never leaves your device

Two parts of this site are deliberately built so that we cannot see them, and that is a design decision rather than a setting:

Both let you export your own copy as a file, and both let you erase everything on the device. When you erase, it is gone from your browser immediately; we have nothing to delete because we never had it.

If a browser refuses local storage — some private-browsing modes do — the modules say so plainly rather than pretending to save your work.

Cookies and local storage

Who else is involved

We use a small number of service providers, and each one sees only part of the picture:

ProviderWhat it handles
ClerkAccounts, sign-in and sessions. Clerk holds your login credentials and session; we never see your password.
StripeCard payments and subscription management for membership.
VercelServes the website. Standard server logs (including IP addresses) are kept by the host.
RailwayRuns the members' API and holds the database and uploaded files described above.
Google Fonts and a public CDNSome pages load fonts and styling from public content networks. Those requests are made by your browser directly to them, which means they see your IP address and browser details.
AI providersOnly used by the administrators' own internal assistant, which can look things up in the membership records while drafting replies. It is not available to members or visitors, and it is not present on any public or member page. Nothing you do in the members' area is sent to an AI provider.

How long we keep things

Your choices

To make any of these requests, write to contactperankh@gmail.com. We may need to confirm that the request comes from you, because otherwise anyone could ask for your records.

How it is protected

No system is perfect, and we would rather say that than imply otherwise. If we ever became aware of a breach affecting your information, we would tell the people affected.

Eligibility

Membership is for adults. We ask for your date of birth to confirm that, and it is used for nothing else.

Changes to this page

When this page changes, the date at the top changes with it, and the change is visible in the site's own history. If a change materially affects what we do with your information, we will say so in the members' area rather than relying on you to reread this page.

What this page is not

It is a plain description of how this site handles information, written to be checkable against the code that runs it. It is not legal advice, and it does not create rights beyond those you already have.