Privacy Policy

01Who we are

Phuntsok Deshe operates sangngak.com as the official site of Sangngak Tenzin Rinpoche. We are the data controller for the personal information described here. For any privacy question, contact us at info@phuntsok-deshe.com.

Where this policy says “you”, it means anyone who visits or uses the site.

02Information we collect

We only collect what a given feature needs in order to work:

• Account information — if you choose to sign in, our authentication provider (Google Firebase) processes your email address, your display name, and a unique account identifier. If you sign in with Google or Apple, we receive only the basic profile information those services pass to us.
• Your practice data — when you are signed in, the things you create while using the site are saved to your account so they follow you between devices: mantra and prayer counts, custom counters, your progress through courses and texts, and the passages you highlight together with any notes you add.
• Messages you send us — when you use the contact or feedback form, we receive the message itself, the category you choose, and any name and email address you provide so we can reply.
• Information stored on your own device — to make the site work smoothly we store some information locally in your browser (see “Cookies and local storage” below). This stays on your device unless you are signed in, in which case some of it syncs to your account as described above.
• Technical information — like almost every website, our servers keep short-lived logs that may include your IP address. We use these only to keep the site secure and to limit abuse of the contact and feedback forms, for example to stop spam.

03How we use your information

• To provide the site and its features — signing you in, saving your practice data, and syncing it across your devices.
• To respond to you when you contact us.
• To keep the site safe — preventing spam, abuse, and security problems.

We do not use your information for advertising or marketing, and we do not build profiles of you to sell or share.

04Legal bases for processing

For visitors in the EU, UK, and other regions with similar laws, we rely on the following legal bases:

• Performance of a contract, or steps you ask for — to give you an account and the features you request.
• Your consent — for anything optional, such as creating an account or sending us a message. You can withdraw consent at any time, for example by deleting your account or asking us to remove your data.
• Our legitimate interests — to keep the site secure and free of abuse, balanced against your rights.

05Cookies and local storage

We use the smallest possible set of cookies and on-device storage, and only for things that make the site work. We do not use advertising or third-party tracking cookies.

• Language preference — a cookie remembers the language you choose so the site opens in it next time.
• Sign-in — when you sign in, our authentication provider sets cookies needed to keep you signed in securely. These are essential to the account feature.
• On-device storage — your browser’s local storage holds things like your reading position, your highlights, your reader settings, and your mantra-counter state. This is functional, not tracking, and you can clear it at any time through your browser.

06Embedded video and images

Videos on this site are delivered through a video-hosting service (PeerTube), and some images are served through an image-delivery service. When such content loads, the provider may receive your IP address and may set its own cookies, as it would on any site that embeds it. We embed this content to show you teachings and photographs; we do not control those providers’ own practices.

07Who we share information with

We do not sell your personal information and we do not share it for advertising. We use a small number of trusted service providers (“processors”) purely to run the site:

• Google Firebase — sign-in and account authentication.
• Our application backend — stores your account and the practice data you sync to it.
• Resend — delivers the contact and feedback messages you send us by email.
• Our content system and media hosting — serve the articles, photos, and videos you view.
• Our hosting provider — runs the servers the site is delivered from.

We may also disclose information if the law requires it, or to protect the rights and safety of our community.

08International transfers

We serve a worldwide audience in several languages, and some of our service providers operate in other countries, including outside your own. Where personal data is transferred internationally, we rely on the safeguards offered by those providers, such as standard contractual clauses, to protect it.

09How long we keep your information

• Account and practice data — for as long as you keep your account. If you delete your account, or ask us to, we remove your personal data, except anything we must keep for legal reasons.
• Messages — we keep contact and feedback messages for as long as needed to handle your request and our records of it, then delete them.
• Server logs — kept only briefly, then discarded.

10Your rights

Depending on where you live, you have rights over your personal data. These typically include the right to:

• access the personal data we hold about you;
• correct it if it is wrong;
• delete it (the “right to be forgotten”);
• receive a copy in a portable form;
• object to or restrict certain processing; and
• withdraw any consent you have given.

Much of this you can do yourself from your account. For anything else, write to us at info@phuntsok-deshe.com and we will help. If you are in the EU or UK and believe we have not handled your data properly, you also have the right to complain to your local data-protection authority.

11Children

This site is intended for a general audience and is not directed at children. We do not knowingly collect personal information from children. If you believe a child has given us personal information, please contact us and we will remove it.

12Security

We take reasonable measures to protect your information, including encrypted connections (HTTPS) and trusted providers for sign-in and storage. No method of transmission or storage is completely secure, but we work to keep your data safe.

13Changes to this policy

We may update this policy from time to time. When we do, we will change the date at the top, and significant changes will be made clear on this page. Please check back occasionally.