Privacy
As of 2026-11-06. This page describes what the code in the repository actually does.
What does not happen
- There are no accounts and no sign-in for readers, and no name is collected. An email address arrives only when someone sending a proposal chooses to write one in order to get an answer. Only the one operator signs in, through Cloudflare Access, to manage the operator’s own model settings and the proposals received.
- No analytics, no tracking scripts and no tracking cookies are included.
- What you read or search is not sent to a server. There is no database of readers; all that is stored on the server is the operator’s model settings (addresses, model names and encrypted keys) and the proposals readers choose to send.
- Advertising is not enabled; the ad script stays commented out.
What is kept in your browser
Everything below stays inside your own browser. It is not synced to another device and not sent to this site.
| Kept in | Name | What it is |
|---|---|---|
| This browser | theme | Whether you chose the light or the dark screen |
| This browser | biblepedia:language | The interface language you chose with the KO/EN switch, so addresses without a language (the front page) open in it |
| This browser | biblepedia:font-size | The text size for reading |
| This browser | biblepedia:reading-position:{language} | The book, chapter and verse you last read, per language |
| This browser | biblepedia:translation-position:{language}:{edition} | Where you last read in each edition |
| This browser | biblepedia:last-translation:{language} | The edition you last opened |
| This browser | biblepedia:last-reader:{language} | Which reader you used last, the KRV study reader or the editions library, so that "Bible" in the menu opens it |
| This browser | biblepedia:favorite-editions:v1 | The editions you marked as favourites |
| This browser | biblepedia:edition-columns:{language} | The editions you last read side by side in the edition library (up to three), so that "Bible" in the menu opens them together again |
| This tab only | biblepedia:reading-focus | Whether reading focus is on in the edition library; it ends when you close the tab |
| This browser | biblepedia:recent-editions:v1 | Up to eight editions you read recently |
| This browser | biblepedia:graph-settings:v1 | How long the graph waits before it turns on its own |
| This browser | bp_graph_exploration_v1 | A graph exploration you saved: the selection and filters |
| This browser | bp_graph_review_drafts_v1 | Review proposals you recorded, including the reviewer name, reasons and corrections you typed |
| This browser | bp_llm_provider | The model provider you selected |
| This browser | bp_llm_endpoint | The model server address |
| This browser | bp_llm_model | The model name |
| This browser | bp_llm_temp | The temperature setting |
| This browser | bp_llm_maxtokens | The maximum output tokens setting |
| This browser | bp_llm_apikey_persist | Whether you chose to keep the API key in this browser |
| This tab only | bp_llm_apikey | The model API key, held for the tab unless you choose to keep it in this browser |
| This browser | bp_llm_fallbacks | Addresses and model names of the fallback routes tried in turn after a failure. Keys are not written here |
| This tab only | bp_llm_fallback_keys | API keys for the fallback routes, kept in the same place and under the same choice as the main API key |
| This browser | bp_llm_use_server | Whether the assistant is set to ask through the operator’s server settings (/api/admin/chat); it works only with the operator’s sign-in |
| This tab only | bp_llm_proxy_token | The proxy token, held for this tab only and never written to the browser |
| This browser | bp_adsense_pubid | Left by the advertising publisher ID note the settings screen once had; it does nothing now and the settings screen can delete it |
| This browser | bp_admin_pwd | Left by the former password screen; it does nothing now and the settings screen can delete it |
| This tab only | bp_admin_auth | Left by the former password screen; it does nothing now |
Clearing this site’s data in your browser removes all of it. The model API key also has its own delete button on the settings screen.
Requests that leave your device
A request to an outside address hands that party your browser’s IP. This is every address the site asks your browser to contact, and a check compares the list with the built output.
| When | Address | What for |
|---|---|---|
| Only when you press Send on a proposal | https://challenges.cloudflare.com | Checks that the sender is not a bot (Cloudflare Turnstile). |
- When you use the assistant: Your question, the cited passages and the API key you configured are sent to the model address you entered. That address is yours, not the site’s; if it is an outside service, that service’s own policy applies. With a model running on your own machine, the request never leaves it.
- In a browser where the operator switched on the server settings: Questions and cited passages go through this site’s /api/admin/chat to the model addresses the operator stored on the server, which adds the key itself. This path opens only with the operator’s sign-in; readers’ browsers do not use it.
- The operator’s sign-in: When the operator opens /api/admin, Cloudflare Access shows its sign-in page and leaves a sign-in cookie (CF_Authorization, HttpOnly) in the operator’s browser. Cloudflare Access sets and manages it, and it is used to confirm that an /api/admin request is the operator’s. It does not apply to readers.
- Model addresses the settings screen offers: The site never contacts them on its own, but the settings screen offers https://ollama.com, https://api.openai.com, https://generativelanguage.googleapis.com as presets. One is reached only if you pick it and send a question.
- Opening the site at all: A static hosting provider serves the request. How that provider handles access logs is governed by its own policy, and this site does not read those logs.
When you send a proposal
None of this applies to a reader who sends no proposal.
- What is received: The kind and text of the proposal, its source (optional), an email address (optional), the id and address of the entry it is about, the page language and the time. No name is asked for.
- What it is for: Checking the proposal, correcting the material, and the operator answering by hand if you left an address. The site sends no mail by itself.
- What is published: Your text and address are not published. The operator may publish the result of a review in the operator’s own words, and a public record of a data change may carry the receipt number alone.
- How long it is kept: It is deleted on its own after one year. To have it deleted sooner, ask with your receipt number, as below, and it is deleted at once.
- Your IP address: It is not stored. A one-way value made from it stays for one hour, to hold the limit of five an hour.
- Who processes it for us: Cloudflare. Proposals are stored in Cloudflare Workers KV, whose servers may be outside your country.
- The bot check: When you press Send, Cloudflare Turnstile processes your IP address, TLS fingerprint, User-Agent, and the site key and origin to tell people from bots. It is not loaded before you press it. Cloudflare’s Turnstile addendum
- Who to ask: The person responsible for personal data is the operator of Bibliadatum. Questions and deletion requests go through Contact and proposals, choosing “Privacy”.
Not settled yet
If advertising is ever enabled, the ad provider processes data of its own, so this page has to be updated first.