Privacy

What you type is matched in your browser. The listings are downloaded with the page and the Wellness Shadchan compares your words against them on your own device. The text of a search is not transmitted to us and we hold no record of it.

Things kept on your device. Your saved listings, your past searches, your device key pair and your view preferences live in this browser’s local storage. They are not sent to us. Clearing your browser data removes them, and the Shadchan’s manage panel can clear them individually.

No cookies for tracking. The site sets no advertising or analytics cookies and runs no third-party tracker.

No account, ever. There is nothing to sign up for and no profile of you anywhere on our side.

Server request logs. The site is hosted on Netlify, which records ordinary web-server data for every request: IP address, the page requested, time, referring page and browser user-agent. That happens by default at the hosting layer.

What it is used for. Seeing how much traffic the site gets and diagnosing faults. It is not combined with anything else, not used to build a profile, not sold, and not shared except where the law requires it.

It is not tied to what you searched. A log line records that a page was requested. It does not contain what you typed into the Wellness Shadchan, because that never leaves your browser.

Retention. Log retention is set by our host, not by us.

Where listing data comes from. The enrollment form, which is a Google Form. Your responses sit in a Google spreadsheet we control, and the approved fields are published on the site. Google processes that form and sheet under its own terms.

Your listing is public on purpose. Everything on your page — including your contact details, your public key, and whether the listing is on a premium subscription — is published, readable by anyone, and indexed by search engines.

Photos. Uploaded through the form to Google Drive, then downloaded, resized and served from our own domain.

Google sign-in. Providers sign in with Google. The sign-in asks for your email address and for a hidden application folder in your own Google Drive — Google words it as “see, create, and delete its own configuration data”. That folder holds only FrumHealth’s own files: a copy of your listing code, your enrollment progress and settings, and flyers you choose to upload. We cannot see, open or list anything else in your Drive, and nothing in that folder is sent to FrumHealth.org. The site is a viewer for what sits in your account and your browser.

The sign-in token. Google gives your browser a short-lived token that lets it read and write that folder. It stays in your browser for about an hour, is never stored, and is never sent to FrumHealth.org. What your browser does send us at sign-in is the email address you signed in with, so the site can find the enrollment form you submitted with it, and — as always — the public half of your listing code, which is already on your page.

Flyers. A flyer you upload goes to a folder in your own Drive and is shared by link, so your event or group page can show it. Like photos, it is then downloaded, resized and served from our own domain.

Withdrawing it. Remove FrumHealth.org under your Google account’s third-party access settings at any time. Nothing already published changes; the sign-in stops working until you allow it again.

Payments. Handled by Stripe, who receive what they need to take the payment. ITQIX Technology Group LLC never sees your card number.

Correcting or removing it. Edit your form response, or write to info.itqix@gmail.com. Changes and removals take effect at the next site build.

We cannot read them. Messages and calls are end-to-end encrypted and travel directly between the two browsers. We run no chat server, store no messages, and have nothing on our side to read, hand over, or lose.

What the connection needs. A public signaling service introduces the two browsers, and Google and Cloudflare STUN servers tell each browser its public address. The signaling service sees a randomly generated ID and the technical setup messages; the STUN servers see an IP address. None of them sees who you are or anything you say.

Your keys. Generated in your browser and stored there. The public half is published on a provider listing; the private half never leaves the device and we never receive it.

Netlify hosting and server logs.

Google Forms and Sheets for enrollment, Drive for photos, provider sign-in with a hidden Drive folder for their listing code and progress, and Fonts for typefaces. A font request tells Google’s font servers your IP address.

Cloudflare the icon library served from cdnjs, and one of the two STUN servers.

Stripe card payments.

A public WebRTC signaling service connection setup for chat and calls, as described above.

We do not sell data. We have never sold or shared personal information for advertising, and there is no mechanism here to do so.

Children. The site is for adults and we do not knowingly collect anything from anyone under 18.

If this changes. Any change to what is collected will be described here and dated before it takes effect.