Privacy Policy

Last Updated: September 22, 2024

www.roarrr.online (“we,” “us,” or “our”) is committed to protecting your privacy and ensuring compliance with global data protection laws, including the General Data Protection Regulation (GDPR) (EU 2016/679), California Consumer Privacy Act (CCPA) (California Civil Code §1798.100 et seq.), and the Children’s Online Privacy Protection Act (COPPA) (15 U.S.C. §6501–6506). This Privacy Policy outlines our practices for collecting, using, storing, sharing, and protecting personal information when you visit or interact with our WordPress-based website, which provides Christian-based content for personal and spiritual growth, including affiliate marketing links and advertisements.

1. Definitions

• Personal Information: Information relating to an identified or identifiable individual, as defined by GDPR (Article 4(1)) and CCPA (§1798.140(o)).
• Data Subject: You, the individual whose personal information is processed.
• Processing: Any operation performed on personal information, including collection, storage, use, or disclosure.
• Controller: www.roarrr.online, the entity determining the purposes and means of data processing.

2. Information We Collect

We collect the following categories of information:

• Personal Information You Provide:
  • Comments: Data entered in the comment form (e.g., name, email address, comment content), IP address, and browser user agent string for spam detection and moderation. If you use Gravatar (a WordPress-integrated service), an anonymized hash of your email address may be sent to Gravatar to display your profile picture publicly with your comment (see Gravatar’s Privacy Policy: https://automattic.com/privacy/).
  • Contact Forms: Name, email address, and any additional information you submit via WordPress contact form plugins (e.g., Contact Form 7).
  • Newsletter Subscriptions: Email address and, optionally, your name, collected via WordPress plugins (e.g., Mailchimp for WordPress).
  • User Accounts (if applicable): Information provided in your user profile (e.g., username, email, preferences) if you register on our WordPress site.
• Media Uploads:
  • If you upload images or media (e.g., via comments or submissions), we collect the files and embedded metadata (e.g., EXIF GPS location data). Visitors may download and extract such metadata from publicly available media.
• Automatically Collected Information:
  • Device and Browser Data: IP address, browser type, operating system, device type, and unique identifiers.
  • Usage Data: Pages visited, time spent, links clicked (including affiliate links), and referral URLs, collected via cookies, web beacons, or WordPress analytics plugins (e.g., Google Analytics, Jetpack).
• Cookies and Tracking Technologies:
  • Essential Cookies: Enable core WordPress functionality (e.g., session management, security).
  • Comment Cookies: If you opt in when leaving a comment, we save your name, email, and website in cookies for convenience, persisting for one year.
  • Login Cookies (if applicable): Temporary cookies to check browser cookie acceptance (discarded on browser close), login cookies (two days), screen options cookies (one year), or “Remember Me” cookies (two weeks). Editing or publishing articles creates a cookie with the post ID (expires in one day).
  • Analytics Cookies: Track site performance and user behavior (e.g., Google Analytics, Jetpack).
  • Advertising Cookies and Tracking Pixels: Used by affiliate programs (e.g., [list programs, e.g., “Amazon Associates, ShareASale, ChristianBook Affiliate Program”]) and ad networks (e.g., Google AdSense) to serve personalized ads, track affiliate link clicks, or monitor ad interactions. These may collect IP addresses, device IDs, or browsing behavior.

3. Legal Basis for Processing (GDPR)

We process personal information under the following GDPR legal bases (Article 6):

• Consent: For non-essential cookies, advertising cookies, affiliate tracking, newsletter subscriptions, and targeted advertising (Article 6(1)(a)).
• Legitimate Interests: For site analytics, spam detection, fraud prevention, and improving user experience, including affiliate link and ad performance tracking (Article 6(1)(f)), balanced against your rights.
• Contractual Necessity: To respond to inquiries, manage user accounts, or deliver requested services (Article 6(1)(b)).
• Legal Obligation: To comply with laws, such as GDPR, CCPA, COPPA, or FTC regulations (Article 6(1)(c)).

4. Purposes of Data Processing

We use your information to:

• Operate and maintain the Website’s functionality and security, including WordPress core and plugin features.
• Facilitate user interactions (e.g., comments, contact form submissions).
• Deliver newsletters or promotional content, with your explicit consent where required.
• Analyze website performance and user behavior, including affiliate link and ad interactions, to optimize content and user experience via WordPress analytics tools.
• Detect and prevent spam, fraud, or security threats (e.g., via automated spam detection for comments, such as Akismet).
• Serve personalized advertisements and track affiliate link performance (e.g., clicks, conversions) via affiliate programs and ad networks.
• Comply with legal and regulatory obligations, including FTC disclosure requirements for affiliate links and ads.

5. Data Storage and Security

• Storage Location: Data is stored on secure servers managed by [specify hosting provider, e.g., “SiteGround, located in the United States”], using industry-standard encryption (e.g., SSL/TLS).
• Security Measures: We implement robust safeguards, including encryption, access controls, firewalls, and regular security audits, enhanced by WordPress security plugins (e.g., Wordfence), to protect against unauthorized access, loss, or alteration.
• Retention Periods:
  • Comments: Retained indefinitely to recognize and approve follow-up comments, unless you request deletion.
  • User Accounts (if applicable): Profile data retained until you delete your account or request erasure, except for legally required data.
  • Contact Form Data: Retained for [specify, e.g., “12 months”] unless further interaction occurs.
  • Newsletter Data: Retained until you unsubscribe or request deletion.
  • Analytics and Advertising Data: Retained for [specify, e.g., “26 months”] per Google Analytics or ad network defaults.
  • Affiliate Tracking Data: Retained for [specify, e.g., “12 months”] to track commissions, per affiliate program terms.
  • Media Uploads: Retained indefinitely unless removed by you or an administrator.

6. Data Sharing and Disclosure

We may share your information with:

• Service Providers: Third-party processors, including:
  • Analytics providers (e.g., Google Analytics, Jetpack) for site performance.
  • Email marketing platforms (e.g., Mailchimp) for newsletters.
  • Spam detection services (e.g., Akismet) for comment moderation.
  • Affiliate networks (e.g., [list programs, e.g., “Amazon Associates, ShareASale”]) for tracking link clicks and commissions.
  • Ad networks (e.g., Google AdSense) for serving targeted advertisements.
  • Gravatar (Automattic) for comment avatar display, sharing an anonymized email hash.
  • All processors are bound by GDPR-compliant data processing agreements (Article 28) and CCPA service provider requirements.
• Advertising and Affiliate Partners: Non-personal, aggregated data or tracking data (e.g., IP addresses, click data) may be shared with ad networks or affiliate programs for personalized ads or commission tracking. You may opt out of targeted advertising via our cookie consent tool or browser settings.
• Legal Authorities: When required by law, court order, or regulatory request (e.g., GDPR Article 6(1)(c), CCPA §1798.145).
• Password Reset: If you request a password reset, your IP address may be included in the reset email for security purposes.
• Business Transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred, with notice where required.
• Embedded Content Providers: Embedded content (e.g., YouTube videos, social media widgets) may collect data, use cookies, or track interactions as if you visited the third-party website.

We do not “sell” personal information as defined by CCPA (§1798.140(t)) or share personal data beyond GDPR-permitted purposes.

7. Embedded Content from Other Websites

Articles may include embedded content (e.g., YouTube videos, social media posts, affiliate links). These third-party websites may:

• Collect data (e.g., IP address, browsing behavior).
• Use cookies or tracking pixels, including for affiliate tracking or ad personalization.
• Monitor interactions, especially if you are logged into their services.
  We are not responsible for their privacy practices. Review their policies before interacting.

8. International Data Transfers

If you are located outside [Your Country], your data, including affiliate, ad, and Gravatar tracking data, may be transferred to [e.g., the United States]. For EU residents, we ensure GDPR compliance through:

• Standard Contractual Clauses (SCCs) with third-party processors (Article 46).
• Adequacy decisions, where applicable (Article 45).
• Technical and organizational safeguards for data transfers.

9. Your Data Rights

Under GDPR, CCPA, and other laws, you have the following rights:

• GDPR (EU Residents):
  • Access your personal data (Article 15).
  • Rectify inaccurate data (Article 16).
  • Erase your data (“right to be forgotten,” Article 17).
  • Restrict processing (Article 18).
  • Object to processing for legitimate interests, direct marketing, or advertising (Article 21).
  • Data portability (Article 20).
• CCPA (California Residents):
  • Know the categories and specific pieces of personal information collected, used, or disclosed, including for advertising, affiliate, or Gravatar purposes (§1798.100).
  • Opt out of the sale of personal information (§1798.120).
  • Delete your personal information (§1798.105).
  • Non-discrimination for exercising your rights (§1798.125).
• General Rights:
  • Request an exported file of your personal data (e.g., from comments, accounts, Gravatar hashes) or its erasure, excluding data required for legal, administrative, or security purposes.
  • Opt out of targeted advertising or affiliate tracking via our cookie consent tool or by contacting [Your Contact Email].

To exercise these rights, contact our Data Protection Officer at [Your Contact Email]. We will respond within 30 days (GDPR) or 45 days (CCPA), with possible extensions. Identity verification may be required.

10. Where Your Data Is Sent

• Spam Detection: Comments may be processed by automated spam detection services (e.g., Akismet), analyzing IP addresses and content.
• Third-Party Processors: Data may be sent to analytics, email, affiliate, ad, or Gravatar providers (e.g., Google Analytics, Amazon Associates, Automattic) in [e.g., the United States], subject to GDPR and CCPA safeguards.
• Embedded Content and Affiliate Links: Interaction with embedded content or affiliate links may send data to third-party providers (e.g., YouTube, Amazon).

11. Children’s Privacy

Our Website is not intended for individuals under 16 (GDPR) or 13 (COPPA). We do not knowingly collect personal information from children, including via affiliate, ad, or Gravatar tracking. If you believe we have collected such data, contact us at [Your Contact Email] for immediate removal.

12. Cookies and Do Not Track

We honor “Do Not Track” signals where supported. You may manage cookie preferences, including those for affiliate tracking, ads, and Gravatar, via our GDPR-compliant cookie consent tool (e.g., via a WordPress plugin like CookieYes) or browser settings. Disabling cookies may limit Website functionality, such as ad personalization, affiliate link tracking, or comment features.

13. Updates to This Policy

We may update this Privacy Policy to reflect changes in our practices, including affiliate, advertising, or Gravatar practices, or legal requirements. Updates will be posted with a revised “Last Updated” date. Significant changes will be communicated via email or a Website notice, per GDPR Article 13 and CCPA §1798.135.

14. Contact Information

For questions, complaints, or to exercise your rights, contact our Data Protection Officer:

• Email: [Your Contact Email]
• Mailing Address: [Your Mailing Address]

EU residents may lodge a complaint with their Member State’s supervisory authority. California residents may contact the California Attorney General.