California Privacy Notice
This notice supplements our Privacy Policy with disclosures and rights specific to California residents under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).
Effective May 9, 2026
This notice describes how Bible Agents — operated by PLAY PLAY CARDS S.R.L. — collects, uses, and discloses Personal Information of California residents, and the rights California residents have under California law. It supplements our general Privacy Policy.
1. Notice at Collection — categories and purposes
At or before the point we collect Personal Information, California law requires us to tell you the categories of Personal Information we collect, the purposes for which we collect it, the categories of sources, and how long we keep it. Here it is.
| Category (CCPA § 1798.140(v)) | Examples | Sources | Retention |
|---|---|---|---|
| Identifiers | Email address, IP address (anonymized), Stripe customer ID | You; automatic on visit; payment processor | Subscription life + 12 months; logs ~30 days; tax records 7 years |
| Customer records (Cal. Civ. Code § 1798.80(e)) | Email, payment-method type and last four digits (held by Stripe, not us) | You; Stripe | Same as above |
| Commercial information | Purchase history, plan chosen, agent topic chosen, subscription status | You | Subscription life + 12 months; tax records 7 years |
| Internet or other electronic activity | Pages viewed, referrer, user agent, email open/click events | Automatic on visit; Resend | Analytics 14 months; email engagement 24 months |
| Geolocation (approximate) | Country / region inferred from IP. We do not collect precise GPS. | Automatic on visit | ~30 days in logs |
| Sensitive Personal Information | The agent topic you chose (may reveal religious or philosophical preference) | You | Subscription life + 12 months |
| Inferences | None — we do not infer characteristics or build profiles. | n/a | n/a |
Categories we do not collect: characteristics of protected classifications under California or federal law (e.g. race, gender, sexual orientation — we never ask), biometric information, professional or employment-related information, education information not publicly available, audio or visual data, precise geolocation, or genetic data.
2. Business or commercial purposes
We use the categories above for the following business or commercial purposes:
- Providing the Service you signed up for.
- Processing payments and managing your subscription, via Stripe.
- Communicating with you about your subscription, billing, and the Service.
- Detecting fraud, abuse, and security incidents.
- Measuring the performance of our advertising and email campaigns at the aggregate level.
- Complying with our legal obligations.
3. Disclosures to third parties
In the past twelve months we have disclosed Personal Information to the categories of recipients listed in § 4 of our Privacy Policy: Stripe, Resend, Supabase, Vercel, Anthropic, and Google. Each is a service provider under the CCPA, contractually bound to use the data only on our instructions. The full table of recipients and purposes is in the Privacy Policy.
4. No sale; no sharing for cross-context behavioral advertising
We do not sell Personal Information for monetary or other valuable consideration as "sale" is defined under the CCPA. We do not share Personal Information for cross-context behavioral advertising as defined under the CPRA.
We have not sold or shared the Personal Information of any person, including any minor under the age of 16, in the past twelve months.
5. Sensitive Personal Information — limited use
The Bible Agent topic you select at checkout (e.g. Anxiety Reset, Spiritual Warfare 101, Porn-Free Freedom) can reveal information about your religious or philosophical beliefs. Under Cal. Civ. Code § 1798.140(ae), this information is Sensitive Personal Information.
We use Sensitive Personal Information solely to:
- Deliver the weekly drops to you (i.e. the agent you chose dictates which content you receive).
- Internally measure subscription concentration by topic, in aggregate only.
We do not use Sensitive Personal Information to infer characteristics about you, for advertising, or for any other purpose. Because our default practice already matches the statutory limit, you do not need to take any action to be protected — but if you would like a written confirmation, you can exercise the right described in § 6.5 below.
6. Your California rights
Subject to verification of your identity, California residents have the following rights under the CCPA / CPRA. To exercise any of them, write to hello@trybibleagents.com with subject "California Privacy Request — [name of right]".
6.1 Right to know
You can request that we disclose: the categories of Personal Information we have collected about you, the categories of sources, the business or commercial purposes for collecting or sharing, the categories of third parties to whom we disclosed it, and the specific pieces of Personal Information we hold about you.
6.2 Right to correct
You can request that we correct inaccurate Personal Information we maintain about you.
6.3 Right to delete
You can request that we delete Personal Information we have collected from you, subject to statutory exceptions (e.g. completing a transaction, complying with legal obligations, detecting security incidents).
6.4 Right to opt out of sale or sharing
Although we do not sell or share Personal Information, you can submit an opt-out request as a precaution. We will record it. The Global Privacy Control (GPC) browser signal will also be honored as an opt-out.
6.5 Right to limit the use of Sensitive Personal Information
You can ask us to limit the use of your Sensitive Personal Information to that which is necessary to perform the Service. Because our default practice already matches this limit, exercising this right will not change anything in how we process your data — but we will record your request and confirm in writing.
6.6 Right to non-discrimination
We will not deny service, charge a different price, provide a different level of quality, or retaliate against you because you exercised any California privacy right.
6.7 Authorized agent
You may designate an authorized agent to make a request on your behalf. We will require proof of agency (e.g. a signed permission from you) and verification of your identity before responding.
6.8 Verification
For most requests we verify identity by confirming you control the email address on file. For high-risk requests (e.g. requests for specific pieces of Personal Information), we may require additional verification.
6.9 Response time
We confirm receipt within 10 business days and respond to verifiable requests within 45 days. We may extend this once by an additional 45 days where reasonably necessary, provided we tell you and explain why.
7. Shine the Light
California Civil Code § 1798.83 permits California residents to request a notice describing what personal information we have shared with third parties for those parties' direct marketing purposes during the preceding calendar year. We do not share Personal Information with third parties for their direct marketing purposes. Requests for this notice may be sent to hello@trybibleagents.com.
8. Notice of financial incentive
We do not currently offer any financial incentives in exchange for Personal Information within the meaning of the CCPA / CPRA. If we ever do, we will publish a notice describing the program, the value of the data, and how to opt in and out, before collecting Personal Information for that purpose.
9. Changes to this notice
We may update this notice. Material changes will be communicated to active subscribers and the "Effective" date at the top will be updated.
10. Contact
PLAY PLAY CARDS S.R.L.
Str. Drumul Pescarilor nr. 16 A, Olimp, Constanța 905503, Romania
hello@trybibleagents.com