Last updated: September 8, 2026
This policy explains what happens to your information when you visit jeanroorda.com and when you use the CHALICE app for iOS and Android. Both are run by Jean Roorda, based in Bend, Oregon, in the United States. You can reach her at any time at hello@jeanroorda.com.
The two are covered separately because they work differently. Part One is the website. Part Two is the app.
Part One: The Website
The short version
There are no visitor accounts on this site, nothing to log into, and no comment section. Nothing you do here is sold. Two things do follow you: Google Analytics counts visits, and a Meta pixel lets Jean advertise on Facebook and Instagram to people who have been here. Both are described below, and both can be refused. The site collects three things: what you deliberately send through a form, the ordinary record every web server keeps, and the activity those two services record.
What you send us
- The contact form. When you write to Jean through the site, we receive your name, your email address, your phone number and subject if you filled those in, your message, the time you sent it, and the internet address your browser connected from. The message is saved on the website's own server and emailed to hello@jeanroorda.com so that Jean can reply.
- The newsletter. If you subscribe, your first name and email address are held by Mailchimp, the company that sends the mailings. Every email carries an unsubscribe link, and using it removes you immediately.
- Buying the poem book. Payment is taken by Stripe on Stripe's own secure pages. Card numbers are never seen by, sent to, or stored on this website. Stripe passes on the name and delivery address needed to post the book to you, and the record of the order.
- Booking a reading. Some pages carry a booking window provided by Calendly. If you book a session there, Calendly collects the name, email address and time you choose and passes them to Jean. Calendly is a separate company with its own privacy policy.
What is collected automatically
Server records. Like every website, this one keeps a log of requests: the internet address you connected from, the page you asked for, the time, and which browser you used. These exist so that faults can be diagnosed and abuse can be blocked. They are not used to identify individual readers.
Google Analytics. The site uses Google Analytics 4 to count visits. It records which pages are read, which site you arrived from, roughly which city you are in, what kind of device and browser you use, how far down a page you scroll, which outbound links you follow, and what you type into the site's search box. It does not record your name, and this site sends Google nothing that identifies you. Google Analytics 4 does not store internet addresses; it uses them to work out an approximate location and then discards them.
Three settings matter, and all three are deliberate. Google's advertising features are switched off. Data sharing with Google's advertising products is switched off. Nothing collected here follows you to other websites. The statistics are kept for 14 months and then deleted automatically.
If you would rather not be counted at all, install Google's official opt-out add-on, or use any content blocker. Both work, and neither affects how the site behaves for you.
The Meta pixel. Jean advertises on Facebook and Instagram. To make that work, this site carries a small piece of code from Meta that tells Meta which pages you visited here and whether you did something that matters to her: sent a message, subscribed, or started to buy the book. Meta uses this to show her advertisements to people who have been here, to measure whether an advertisement worked, and to find new people who resemble the ones who visited. When you send a message through the contact form, the server reports that to Meta as well, with your email address, phone number and name first turned into one-way fingerprints, so that Meta can match them against its own records without receiving the details themselves. What you wrote is never sent. Meta is a separate company with its own privacy policy, and if you have a Facebook or Instagram account, Meta can connect this activity to it.
Your choice
Both services above can be switched off for this browser with one click, and switched back on with the other. Declining changes nothing about how the site works for you. The first control is also the opt-out that California law provides.
Do not sell or share my information Ask me again
Cookies
A cookie is a small file a website stores in your browser. This site sets these, and no others.
- trx_addons_is_retina records whether your screen is a high-density one, so that pictures are sent at the right sharpness.
- jr_liked remembers which posts you have liked from this browser, so the heart stays filled when you come back. It holds nothing but a list of article names, and it is not connected to any name or address.
- jr_consent remembers whether you accepted or declined the two services above, so that you are not asked again. It lasts a year.
- _ga and _ga_081SRDW0TQ belong to Google Analytics and let it tell a returning visit from a new one. They last up to two years.
- _fbp and _fbc belong to Meta. The first tells one browser from another; the second remembers which advertisement brought you here, so that a message or a purchase can be credited to it. Both last 90 days.
One more, PHPSESSID, exists only inside the private area Jean uses to edit the site. Ordinary visitors never receive it.
The embedded services described below may set cookies of their own when, and only when, they load. You can refuse or delete cookies in your browser's settings. The site works without them, apart from the heart no longer remembering you.
Content embedded from elsewhere
Some pages include material served by other companies. When that material loads, the company providing it can see your internet address, in the same way it would if you had visited its site directly.
- Vimeo hosts the video on the front page. It is deliberately set not to load until you press play, and it asks Vimeo not to track you.
- Calendly provides the booking window on the journal pages.
- Google Fonts supplies the typefaces the site is set in.
- Spotify hosts the audio of The Higher Vibe Podcast. Pressing play on an episode here streams it from Spotify's servers, which see your internet address in the same way they would if you listened on Spotify itself. Nothing loads until you press play.
Who else sees your information
Meta does, for advertising, in the way described under The Meta pixel, and you can stop that under Your choice. Nobody else. Your information is not sold, rented or traded, and the only other companies that touch it are the ones named in this policy, each acting on Jean's instructions to do a specific job: send an email, take a payment, post a book, count a page view. The only other circumstance is a legal one, where a court order or a law obliges disclosure.
How long things are kept
- Messages from the contact form are kept for up to two years so that a conversation can be picked up again, then deleted.
- Newsletter subscriptions last until you unsubscribe.
- Analytics is deleted automatically after 14 months.
- Meta's cookies last 90 days. What Meta keeps on its own side is governed by Meta's policy, not this one.
- Server records are held for a short period by the hosting company, normally a few weeks.
- Order records are kept for as long as tax and accounting law requires.
Where your information is held
The website runs on a server in Michigan, in the United States. Google, Meta, Mailchimp, Stripe and Calendly are United States companies and store information there.
How it is protected
The whole site is served over an encrypted connection. Messages sent through the contact form are stored in a place that cannot be reached from the web. The area Jean uses to edit the site is protected by a password that is never stored in readable form. There are no visitor accounts on this site, which means there are no visitor passwords to steal. If a breach ever occurred that put your information at risk, you would be told.
Your rights, wherever you live
You may ask what information is held about you, ask for it to be corrected, ask for a copy, or ask for it to be deleted. Write to hello@jeanroorda.com. There is no charge, and you will have an answer within 30 days.
If you are in the European Economic Area or the United Kingdom
Under the General Data Protection Regulation and the UK GDPR, the data controller is Jean Roorda, Bend, Oregon, United States, reachable at hello@jeanroorda.com.
Why we are allowed to hold your information. Each use rests on one of these legal grounds:
- Replying to your message rests on taking steps you have asked for, and on the legitimate interest in answering people who write in.
- Sending the newsletter rests on your consent, given when you subscribe.
- Fulfilling a book order rests on performing the contract you entered into.
- Keeping the site running, secure and free of abuse rests on legitimate interests.
- Counting visits rests on your consent, given on the bar this site shows to visitors in Europe and the United Kingdom, and otherwise on the legitimate interest in knowing which pages are worth keeping.
- Advertising through Meta rests on your consent, given on the same bar and withdrawable at any time under Your choice.
Your rights. You have the right of access to your information; the right to have it corrected; the right to have it erased; the right to restrict how it is used; the right to receive it in a portable form; the right to object to processing based on legitimate interests; and the right to withdraw consent at any time, which does not affect anything done before you withdrew it. You also have the right to complain to your national data protection authority, and you may do so without contacting us first, though we would rather have the chance to put things right.
Automated decisions. There are none. No decision affecting you is made by a machine, and no profiling is carried out.
Information leaving Europe. Your information is processed in the United States. Google, Meta, Stripe, Mailchimp's parent company Intuit, and Calendly each rely on the EU-US Data Privacy Framework, the UK extension to it, or the European Commission's Standard Contractual Clauses, which are the mechanisms European law provides for this.
How consent is asked for. If your device's clock is set to a European time zone, this site shows a bar with two equal buttons before either Google Analytics or the Meta pixel runs, and nothing tracks you until you choose. Declining changes nothing about how the site works. The choice is kept in your browser, and you can reverse it at any time under Your choice. Visitors elsewhere are not asked first, which is the ordinary practice where they are, and have the same controls.
If you are in California
In the past twelve months this site has collected identifiers such as your email address and internet address, commercial information if you bought the book, and internet activity such as which pages you read. It does not sell personal information. It does share internet activity with Meta for what the law calls cross-context behavioral advertising, which is the pixel described above, and it does not do so knowingly for anyone under 16. You have the right to opt out of that sharing: the control marked "Do not sell or share my information" under Your choice stops it on this browser. You may also ask what has been collected, ask for it to be deleted, or ask for it to be corrected, and you will not be treated any differently for asking.
Children
This website is not aimed at children and does not knowingly collect information from anyone under 16. If you believe a child has sent us something, write to us and it will be deleted.
Changes to this policy
If this policy changes, the new version will appear on this page with a new date at the top. Material changes will be described rather than slipped in quietly.
Part Two: The CHALICE App
CHALICE is a place for spiritual growth, healing and learning: a library of guided clairvoyant meditations, live sessions, and a community of people practising together. This part of the policy covers the app on iOS and Android.
What the app collects
- Your account. Creating an account records your name and email address. These are used to run your account, to support you when something goes wrong, and to tell you things you need to know about the app.
- Purchases. Lessons, courses and subscriptions are paid for through Apple's App Store or Google Play. The payment happens inside Apple's or Google's systems. CHALICE never receives or stores your card details.
- How you use the app. The app records which lessons and courses you open and how far through them you are, so that your place is kept and so that the material can be improved.
- What you post. Anything you write in the Community area or send through Chat is stored so that it can be shown to the people it is meant for.
Signing in
CHALICE uses Sign in with Apple and Sign in with Google. Your password is held by Apple or Google, never by CHALICE, and their two-factor and anti-fraud protections apply. If you use Apple's private email relay, CHALICE never learns your real address.
Subscriptions
CHALICE offers one-month and three-month subscriptions. Payment is taken by Apple or Google when you confirm the purchase, and renews automatically unless you turn renewal off at least 24 hours before the period ends. You manage and cancel renewals in your Apple ID or Google Play account settings, not in the app. No payment information reaches CHALICE at any point.
Who else sees it
Your information is not sold, and it is not shared with advertisers. It is handled by Apple and Google for sign-in and payment, and by the services that store the app's data and deliver its video and audio. Beyond that, it is disclosed only where the law requires it.
Your rights in the app
You can change your account details in the app at any time. You can ask for your account and everything in it to be deleted, either from inside the app or by writing to hello@jeanroorda.com, and it will be done. If you are in Europe or the United Kingdom, the full set of rights described in Part One applies here in the same way, and Jean Roorda is the controller for the app as well.
Children
The meditations are suitable for people of any age, but an account is not. CHALICE does not knowingly create accounts for children under 13 without a parent's consent, and will delete any that come to light.
Questions
Anything at all about this policy, either part of it, write to Jean Roorda at hello@jeanroorda.com.