Privacy Policy
Torah Codex needs very little about you. We do not sell your data, we do not share it for advertising, and there are no ads.
Draft of October 31, 2026. This text is waiting for legal review and may change before launch.
Who we are
Torah Codex at torahcodex.com, on the web and in the apps, is responsible for the data described here. Reach us at hello@torahcodex.com.
What stays on your device
The search itself runs on your device. The letters of the text are downloaded to your browser or app, and the matching happens there. Your place in the reader and the trial counter stay in your browser's own storage and are not sent to us.
What we collect
If you read without an account, we keep nothing that identifies you. With an account, we hold:
| What | Why |
|---|---|
| Your email address | To sign you in, and to send sign-in codes and billing notices |
| Your Apple or Google account identifier, if you sign in that way | To find your account. For Apple we also keep a token so we can revoke the link when you delete your account |
| Your sessions: when they began and were last used, and a short hint of the device | To keep you signed in and to help you recognize a session |
| The searches counted against your allowance: the terms and where they were searched, with a date | To count your free searches, and to let you run a search you hold again at no charge |
| How you first reached us: the page you landed on, the name of the site that sent you, and any campaign tag on the link | To learn which ways of finding Torah Codex lead to people staying. Copied from the tx_ft cookie when you create an account |
| What you save: matrices, searches, locked searches and exports | To keep your work and show it back to you |
| Your settings: the reverent display and the theme | So they follow you to any device you sign in on |
| Your plan: Premium status, dates, and the Stripe, Apple or Google subscription identifiers | To give you what you paid for |
| Messages you send us | To answer you |
We never see your card. Card details go to Stripe, Apple or Google, and they stay there.
A short link you create stores the settings of that search, and anyone with the link can open it. It carries no name or email.
We also keep two things that are not tied to you by name. Sign-in rate limits are hourly counters held under a keyed hash of your email and network address, never the raw address, and they are removed after a day. Site counts, such as how many people opened a view or pressed a button, carry no account, no address and no search term, and each is timed only to the minute. Payment totals, kept for our accounts, hold the amount, date, plan and how the buyer first reached us, with no name, no email and no account, and they stay after an account is deleted.
Cloudflare, which runs the service, processes network addresses and basic request data to deliver the site and protect it from abuse.
Cookies
We set only small first-party cookies, none for advertising and none that follow you to other sites.
- tx_session keeps you signed in, for up to 90 days.
- tx_ft remembers how you first reached the site, for up to 90 days. It holds no identifier.
- tx_code ties a sign-in code to the browser that asked for it, for 15 minutes.
- tx_gstate and tx_astate protect Google and Apple sign-in, for minutes.
- tx_src tells the site it is running inside our app, for a year.
Who handles data for us
We use these providers and no others, each only for the job named here. We require them to protect your data at the same level this policy does.
- Cloudflare: hosting, the database, file storage, delivery and our email.
- Stripe: payments on the web.
- Apple: Sign in with Apple, and purchases in the iPhone app.
- Google: Google sign-in, and purchases in the Android app.
- RevenueCat: tracks app subscriptions from Apple and Google for us, under an account identifier and not your name.
We may also disclose data if the law requires it. No AI service receives your searches or your data.
How long we keep it
- Your account data stays until you delete your account.
- Sign-in codes expire after 15 minutes and are removed within a day.
- Sessions end after 90 days.
- Nightly backups age out within 45 days of a deletion.
- Stripe, Apple and Google keep payment records under their own legal duties.
- After a deletion, we keep one anonymous entry that an account was deleted, with no email and no name. If the account ever held a subscription or a free trial, the entry also keeps a keyed one-way hash of the address, used only so that the free trial stays one per person. It cannot be turned back into the address.
Your choices and rights
You can see and remove your saved work in your account, except a locked search, which is a record and stays until the account goes. You can delete the whole account yourself at any time on the delete your account page, on the web or in the app. Write to us to ask for a copy of your data or to correct it. We do not make decisions about you by automated profiling.
If you are in the UK, the EU or the EEA: you may access, correct, delete, restrict or object to our use of your data, take a copy of it, and complain to your data protection authority. We rely on contract to run your account, on legitimate interest to keep the service secure and measure it in aggregate, and on legal duty for tax records.
If you are in California: you may know, delete and correct your personal information and opt out of its sale or sharing. We do not sell it or share it for advertising, and we will not treat you differently for using a right.
Where it is handled
Our providers work in the United States and other countries. If your data leaves your country, it is protected by the safeguards those providers offer, such as standard contractual clauses.
Children
Torah Codex is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has given us data, write to us and we will delete it.
Security
There are no passwords to steal. Sign-in codes and session keys are stored only as hashes or signed values, and all traffic is encrypted in transit.
Changes
If this policy changes in a way that matters, we say so on the site and by email before the change takes effect.
Last changed October 31, 2026. Questions: hello@torahcodex.com