Privacy Notice

Who we are

This website is run by Sons2Shine (神眾子顯現), a Christian Kingdom Healing ministry. “We” in this notice means the Sons2Shine ministry team.

For any question or request about your personal data, write to service@sons2shine.org. This is also our data-protection contact (responsible: the Sons2Shine ministry team).

What we collect

Only two kinds, both described here.

• Visit statistics: the page you viewed (its path only, never the query after it), the domain you came in through, the site that linked you here (domain only), your browser’s user-agent string, window width, page language, whether you are in a regular browser, an app’s built-in browser such as LINE’s, or the installed web app, and how long you stayed and whether you scrolled, tapped or typed. Each record carries a random ID that changes every day and is kept in your browser (localStorage), used only to count “how many visitors today”; it does not carry over between days or devices and cannot be linked to who you are. We do not record IP addresses, names or email addresses.
• The newsletter (only if you choose to subscribe): your email address, receiving language, how you would like to be addressed (optional), the page you subscribed from, when you agreed and which version of this notice you agreed to, and when you confirmed.
• Nothing else. We never ask for prayer requests, health details or your faith; there is no advertising, no tracking cookie, no cross-site tracking, and we never sell any data.

If your browser sends Do Not Track, no visit statistics are sent at all. Automated browsers, such as testing tools, are not counted either.

Why we collect it

• Visit statistics: to understand how many people visit, which pages they read and on what devices, so we can make the site easier to use.
• The newsletter: only to send you the newsletter you subscribed to (upcoming gatherings and ministry news). Your address, receiving language and name are used for nothing else.

Subscribing is entirely voluntary. You may choose not to give your address; the only effect is that you will not receive the newsletter, and the rest of the site works as usual. Giving a name is optional.

Where it is kept and who processes it for us

We have no servers of our own. The cloud services of Google LLC and of Resend (Plus Five Five, Inc.) keep and transmit the data for us:

• Visit statistics and the newsletter list: Google Firebase Realtime Database, in Singapore (asia-southeast1).
• The confirmation email: Google Firebase Authentication. To send it, the system creates a one-time verification account with your address; it is deleted as soon as you confirm.
• Sending the newsletter: a small program of ours on Google Cloud Functions (in the United States) puts each email together from the approved issue and hands it, one at a time, to Resend (Plus Five Five, Inc., United States), which sends it from its North Virginia region. Resend does not hold our subscriber list. It keeps a record of each email sent — the recipient’s address, the content (including the name you gave us) and whether it was delivered — for 30 days, then deletes it automatically. If an email to you is permanently rejected by your mailbox, or you mark it as spam, Resend keeps your address on a do-not-send list so that nothing more is sent to you.

We entrust your data only to Google and Resend. The providers Resend itself relies on — such as Amazon Web Services, which hosts its systems and carries its email — are all in the United States and are listed at resend.com/legal/subprocessors. We do not provide your data to any third party.

Transfers abroad

These services run mainly in Singapore and the United States, so your data may travel beyond the country where you live: for readers in the United States, Singapore is abroad; for readers in Taiwan, Canada and elsewhere, both are. While your data is in another country, it may be accessed by that country’s courts, law-enforcement or national-security authorities under its laws. The details:

What

Newsletter: email address, receiving language, optional name, page and time of subscription; when an issue is sent, your email address, name and that issue’s content go to Resend, which keeps a record of each email for 30 days, and keeps your address if an email is permanently rejected or marked as spam. Visit statistics: the items listed under “What we collect”.

Where, when and how

Singapore (the database, Google Firebase); the United States and other places where Google’s services run (including the Google Cloud Functions that send the newsletter); and the United States (Resend, sending from its North Virginia region). Transferred at the moment you subscribe or browse, or when we send an issue, over encrypted connections (HTTPS).

Recipient

Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA); Plus Five Five, Inc. (Resend, 2261 Market Street #5039, San Francisco, CA 94114, USA).

Their purpose and how long

To keep the data and send the confirmation email and the newsletter on our behalf. Resend’s record of each email is used to confirm delivery and is deleted automatically after 30 days; its do-not-send list is used only to make sure nothing more is sent to you. If we close our Resend account, Resend deletes any remaining data within 90 days. Otherwise, kept for the periods under “How long we keep it”.

How to refuse

Do not subscribe, or unsubscribe at any time; turning on Do Not Track in your browser stops visit statistics. The only effect of refusing is that you will not receive the newsletter.

Other services the site uses

These services only come into contact with your browser (for example, your IP address) when you use the matching feature, and handle it under their own privacy policies:

• The website itself is served by Google Firebase Hosting. Like any web host, it sees your IP address when delivering pages; we do not receive or store it.
• The map page: Google Maps and Street View. If you let the map use your location, it is used only inside your browser to find the nearest centre, and we do not store it; addresses you type into its search may be sent to Google to look them up.
• Videos: nothing loads from YouTube until you press play; after that, the video is played by YouTube (Google), which may set its own cookies.
• Photos: delivered by Amazon S3 and Cloudinary.

What your browser keeps

We set no cookies. The site remembers a few small things in your browser (localStorage): the language and appearance you chose, hints you dismissed, the daily ID for visit statistics, and — on the newsletter page — the address you last subscribed with, its progress and what is needed to resend the confirmation email, so that when you return you can see where it went and ask for it again.

These stay on your device. You can clear them at any time in your browser’s settings, and the site keeps working as usual.

Who can see it, and how it is protected

Only Sons2Shine’s site administrators — members of the ministry team who sign in to the admin with a Google account — can see the subscriber list and the visit statistics; the database rules prevent anyone else from reading them. We never give, sell or rent your data to anyone.

Safeguards: all traffic is encrypted (HTTPS); the list can be read only by people signed in with Google who hold an administrator role; every unsubscribe link carries its own random key.

How long we keep it

• The newsletter: kept until you unsubscribe. Whether you use the unsubscribe link at the bottom of an issue or the “Unsubscribe” button your mailbox shows next to the sender (one-click unsubscribe, received by our own site), your entry is deleted from the list at once. All that remains is a record without your address (the time and language of the unsubscription), used only to count how many people have left.
• Sign-ups that are never confirmed: treated as expired after 48 hours and deleted by the administrators. The one-time verification account is deleted the moment you confirm.
• Visit statistics: currently kept for the statistics dashboard and not yet deleted automatically. We will set a retention period and publish it here; until then, you can ask us to delete them. Because these records cannot be linked to a person, we may not be able to single out the ones that are yours.
• Sent email: issues are sent by Resend, and we keep no copies of the messages ourselves; our sending log records only when each message was sent and whether it succeeded, not its content. Resend keeps each message, content included, for 30 days and then deletes it automatically; its backups may hold it for up to 7 more days. An address that was permanently rejected or marked as spam stays on Resend’s do-not-send list until you ask us to remove it. Your replies to the newsletter arrive in our newsletter@sons2shine.org mailbox; you can ask us to delete them.

Deletion means permanent removal from the database and from Resend; it cannot be undone. When you ask us to delete your data, we also remove your address from Resend’s do-not-send list and ask Resend to delete, ahead of time, any record of emails to you that is still within its 30 days.

Your rights

You may at any time ask to see your data, get a copy, have it completed or corrected, have its collection, processing or use stopped, or have it deleted. These rights cannot be waived in advance, and a parent or guardian may ask on a child’s behalf. The simplest ways:

• To stop and be deleted: press the unsubscribe link at the bottom of any issue and confirm once — no account, no password; or use the “Unsubscribe” button your mailbox shows next to the sender.
• Anything else: write to service@sons2shine.org. We will reply promptly and within the legal time limits — in Taiwan, 15 days for access or a copy, and 30 days for completion, correction, stopping or deletion.

If you feel we have not handled your data properly, please write to us first at service@sons2shine.org so that we can put it right. You may also take it to the authority where you live. In Taiwan, the Personal Data Protection Commission is still being set up (its Preparatory Office is at www.pdpc.gov.tw); until it is formally established, private organisations are supervised by the city and county governments and the relevant central authorities. In the United States, you can report to the Federal Trade Commission at ReportFraud.ftc.gov. In Canada, you can contact the Office of the Privacy Commissioner of Canada (www.priv.gc.ca). In Korea, you can contact the Personal Information Infringement Report Center (call 118, privacy.kisa.or.kr).

Children

We ask anyone under 14 to subscribe only with a parent’s or guardian’s consent. This is the strictest line among the places our readers live: Korean law draws it at 14, and the children’s privacy rules of the United States and Canada at 13. In Taiwan, we also ask anyone under 18 to talk to a parent or guardian first. If we learn that someone under 14 has subscribed without that consent, we will delete the entry.

Changes to this notice

If this notice changes, we will publish the new version and its effective date on this page; every subscription records which version you agreed to. This third version takes effect on 13 October 2026. It reflects that the newsletter is now sent through Resend, and rewrites the sections on transfers abroad and on complaints for the newsletter’s readers, who live mainly in the United States, Taiwan and Canada. The second version (sending through Amazon SES) took effect on 7 October 2026, and the first on 6 October 2026.