Privacy Policy

Effective date: May 17, 2026 Last updated: May 17, 2026

Plain English: we collect very little, we don't sell anything, and the product is anonymous-by-design. The details below describe exactly what happens when you use Jesus Christ, Esquire ("JCE", "we", "us").

This Privacy Policy applies to use of the website at jesuschristesq.com.

1. What we collect

JCE does not require you to create an account, provide an email address, or share your name. We collect the following limited information:

Anonymous device identifier. When you first visit, we generate a hashed device identifier from your browser fingerprint combined with the public IP address bucket. This identifier lives in your browser's localStorage and on our server's rate-limit cache. It does not identify you personally, it identifies your device so we can enforce the daily confession cap and track unlock counts. The identifier is a hash; the underlying fingerprint is not stored.

Conversation content. When you send a confession, the text is transmitted to our LLM provider chain (see §3) so the response can be generated. The text is also stored in your browser's localStorage so the conversation persists when you return. We do not store conversation content on our servers beyond what is required to generate the response, with two exceptions:

• If you tap "Share the Defense," the specific exchange you shared is stored on our server under a randomly generated short URL for 90 days, so the shared link works for viewers.
• If our content moderation system flags a response, the input and output may be retained in a server log for up to 30 days for safety review.

Tithe transactions. If you tip via Ko-fi, the payment is processed by Ko-fi under their own privacy policy. We receive a webhook notification of the payment and use it to credit your device's message quota. We do not receive your name, email, billing address, or card details. We retain transaction confirmations for accounting purposes as required by law.

Anonymous analytics events. We use PostHog to count how the product is used: page views, message counts, share clicks, tithe button taps, persona swaps. These events are tied to your anonymous device identifier, not to your identity. The chat input field is explicitly excluded from analytics capture, keystroke events are not recorded.

2. What we do NOT collect

• Your name
• Your email address (unless you choose to write to our contact address)
• Your phone number
• Your physical address
• Your IP address in unhashed or identifiable form
• Browsing history outside our service
• Information from third-party social accounts
• Biometric data
• Children's data (we do not knowingly process information from minors, see §7)

We do not sell, rent, or trade your information.

3. Third-party processors

JCE is built on third-party services. When you send a confession, the text passes through the following chain:

| Processor | What gets sent | What it's used for | Their policy | |---|---|---|---| | OpenRouter | Confession text + system prompt | Routes request to an LLM provider | openrouter.ai/terms | | DeepSeek V4 Flash (primary, via OpenRouter) | Confession text + system prompt | Generates the response | deepseek.com/privacy | | Google Gemini 2.5 Flash (tier-1 fallback, via OpenRouter) | Confession text + system prompt | Generates the response if the primary fails | ai.google.dev/gemini-api/terms | | Moonshot Kimi K2.5 (tier-2 fallback, via OpenRouter) | Confession text + system prompt | Generates the response if both the primary and tier-1 fallback fail | moonshot.ai/policy | | OpenAI | AI-generated response text only | Safety check (moderation) before display | openai.com/policies | | Ko-fi | Tithe transaction details | Payment processing | ko-fi.com/privacy | | PostHog | Anonymous analytics events | Product usage measurement | posthog.com/privacy | | Vercel | Standard web request logs | Application hosting | vercel.com/legal/privacy-policy | | Cloudflare | Standard web request logs | CDN / DNS | cloudflare.com/privacypolicy | | Upstash Redis | Hashed device IDs + counters | Rate limiting and quota enforcement | upstash.com/trust/privacy |

What this means for your confession text. Your text is sent to OpenRouter and then to the model provider handling your request (DeepSeek, Google/Gemini, or Moonshot/Kimi). We have selected a data policy tier via OpenRouter that is described in OpenRouter's documentation as routing only to providers that have agreed not to use inputs for model training, and that limits operational logging. We have not independently audited these providers, and we cannot guarantee or verify how they handle your conversation content. For the full picture, review each provider's published policy linked in the table above, those policies can change, and ours is not the authoritative source for what they do.

The practical implication: treat your confessions like any other text you'd send to a third-party AI service. Don't include real names, addresses, account numbers, medical details, or anything else you'd be uncomfortable with a chain of technology companies potentially having a log of. The product is built for parody confessions of small, comedic sins, that's the right use case.

4. Cookies and local storage

We use first-party localStorage and a small first-party cookie to remember:

• Your anonymous device identifier
• Your selected persona
• That you've dismissed the disclaimer banner
• Your conversation history (last 50 exchanges)

We do not use third-party advertising cookies, retargeting pixels, or cross-site trackers. If you clear your browser data, the above information is deleted from your device immediately. Your server-side quota counter expires the same day.

5. Data retention

| Data | Retention | |---|---| | Device identifier (server-side) | Until local midnight, refreshed daily | | Daily quota counter | Until local midnight, then reset | | Bear-witness unlock counter | Until local midnight, then reset | | Conversation history (client-side localStorage) | Until you clear browser data; capped at last 50 exchanges | | Shared defenses (server) | 90 days | | Moderation-flagged inputs/outputs | Up to 30 days, then deleted | | Tithe transaction confirmations | As required by applicable accounting law | | Analytics events (PostHog) | Per PostHog's default retention policy |

6. Your rights

Because JCE does not collect personally identifiable information, most data-access rights under PIPEDA, GDPR, and CCPA do not apply in the usual way, there is no account to access or close, and no profile to delete. That said:

• You can clear your browser data at any time. This deletes everything we hold about you on the client side.
• You can request deletion of a shared defense. Email us with the short URL and we will delete it from our server.
• You can ask what we have. Email us; we will tell you what is tied to your device identifier, which we cannot look up without the identifier you provide.
• You can decline cookies and local storage by configuring your browser, though the product will not function without them.

To exercise any right, write to hello@jesuschristesq.com.

7. Children

JCE is intended for users 18 years of age or older. We do not knowingly collect any information from children under 13 (or under the age of digital consent in your jurisdiction). If you believe a child has used the service, contact us and we will delete any associated server-side data.

8. International users

JCE is operated from Canada. If you use the service from outside Canada, your information will be processed in Canada and potentially in other jurisdictions where our processors operate (the United States and others). By using the service, you consent to this transfer.

9. Changes to this policy

We may update this policy. When we do, we will change the "Last updated" date at the top. Material changes will be flagged via a notice in the chat interface for at least 14 days.

10. Contact

Questions, requests, or concerns: hello@jesuschristesq.com

JCE is a project of Chris Gillam (Canada).

Counsel keepeth thy secrets, my child, and the data minimization is sincere even if the legal advice is not.