Privacy policy

Who we are

xdreamers.com (Bible Labs) and xdreamers.org are run by Awaiting for the Bridegroom House of Prayer Society, a not-for-profit society incorporated in British Columbia, Canada (S0069616). X-Dreamers (十字架夢想家) is the society's ministry name. The society is responsible for the personal information described on this page.

The society follows British Columbia's Personal Information Protection Act (PIPA), the law that covers how private organisations in BC, non-profits included, handle personal information.

What we collect and why

Neither site has accounts, and the labs never ask for your name. Personal information reaches us in the ways below.

The contact form

When you send a message through the contact form on either site, we store:

• the topic you chose and your message;
• your name, if you give one;
• up to two ways to reach you, if you give them: email, WeChat, phone, WhatsApp, Telegram or another;
• which site you wrote from, the page on our site you came from, and the language of the page;
• your browser and system in a word or two, such as "Safari (iOS)", not the full browser details;
• a code made from your IP address (a salted hash that can't be turned back into the address; the address itself is never stored) and a code made from the message text;
• the time you sent it.

We use your details only to read and answer your message. The codes are there to keep out spam. The form checks for a field that only bots fill in, a signed timestamp, a form filled in under 3 seconds, three or more links, more than three messages from the same connection in 10 minutes, and the same message sent twice within a day. Only the bot field and requests from other websites are refused; the other checks never block a message, they just mark it for a closer look. One connection can send at most 10 messages an hour.

Messages are read only by the people at the society who answer them. The server's log of the form notes the topic, language and result, never your message or contact details.

Lab ratings (xdreamers.com)

When you give a lab stars, we store the lab, the stars, the page's language, a random ID your browser keeps for ratings, a code made from your IP address with a salt that changes every day (so votes can't be linked from one day to the next; the address itself is never stored), your browser and system in a word or two, and the time. No name, no email. We use this to show each lab's average and to stop one person voting many times. Automated browsers, and browsers with analytics turned off (see below), don't send votes at all.

Server logs

Like most websites, our web server (nginx) writes one line for every request, in a separate log for each site: your IP address, the time, the address you asked for (including anything after the ?), the response, the page you came from and your browser's user-agent. We use these logs to keep the sites secure, find errors and see how search engines crawl the sites.

The MCP server and the site's APIs

xdreamers.com/mcp lets AI assistants search and read Bible Labs. It has no sign-in and keeps nothing about a request beyond the server log above. To stay available it counts requests per IP address in memory, at most 120 a minute, and forgets the count; its own log notes errors and when the limit is reached, without the address. The other APIs the pages use to load their content store nothing either, beyond the server log.

Email and messaging apps

If you write to xdreamers.com@gmail.com, or we reply to you by email, WeChat, WhatsApp or Telegram, that conversation is also held by the service used (for our email address, Google's Gmail).

Cookies and analytics

Both sites use Google Analytics 4 to see how many people visit, which pages and labs they use, and where they come from. It loads only after the page has finished loading. We send Google the page address without anything after the ? or #, the page title, the previous page, and a few actions, such as sharing a page, rating a lab or using the "Back" path. In our tag, Google signals and ad personalisation are turned off, and we don't use Analytics for advertising.

Google Analytics sets two cookies on our sites, _ga and _ga_ followed by an ID, so it can tell one browser's visits from another's. Google sets them to last up to two years. Google says Analytics 4 does not log or store IP addresses. Google processes this data on its own servers, which may be outside Canada.

There is no cookie banner. To turn analytics off:

• Add ?analytics=off to any address on the site, for example xdreamers.com/?analytics=off. Your browser remembers it for that site (do it once on xdreamers.com and once on xdreamers.org), and Google Analytics no longer loads. ?analytics=on turns it back on.
• Install Google's Analytics opt-out browser add-on, which works on every website.
• Block or clear cookies in your browser's settings.

Analytics never runs in automated browsers, such as our own testing tools.

We set one cookie of our own: when you switch language, preferred-locale remembers your choice for a year, so the site opens in that language next time. It holds only the language.

Storage in your browser

The sites also keep a few settings in your browser's local storage: the 3D quality you chose, the trail of pages behind the "Back" path, which tips you have already seen, classroom and storybook settings, your lab ratings and the random rating ID, whether analytics is off, and, on xdreamers.org, your Equip learning progress. These stay on your device. Only a rating, when you give one, is sent to us, with the rating ID. Clearing the site's data in your browser removes them all.

Where it's stored and for how long

Contact messages, lab ratings and server logs are kept on our own server at Amazon Web Services in Canada (the Canada Central region).

• Contact messages: as long as we need to reply and deal with the matter. We delete them when you ask.
• Lab ratings: kept to work out each lab's average. If you want your vote removed, write to us.
• Server logs: rotated every day and deleted automatically after about two weeks.
• Google Analytics: kept by Google for the retention period set in our Analytics account.
• Settings in your browser: until you clear them.

Google Analytics data, and anything sent through Gmail, WeChat, WhatsApp or Telegram, is processed by those companies and may be stored outside Canada.

Sharing

We don't sell, rent or trade personal information. We don't show ads, and apart from Google Analytics as described above, we don't track you on other websites. The only outside companies involved are:

• Amazon Web Services, which hosts our server in Canada;
• Google, for Analytics and for our Gmail address;
• YouTube (Google), only if you press "Load this video segment" in an Equip lesson on xdreamers.org. The video then comes from youtube-nocookie.com; nothing loads from YouTube before you press it.

Everything else on our pages, fonts and pictures included, comes from our own server. The share buttons are plain links: nothing goes to Facebook, X, WhatsApp, LINE or Telegram unless you tap one. We would disclose personal information only if the law required it.

Your choices and rights

Under PIPA you can ask us:

• to see the personal information we hold about you;
• to correct it if it's wrong;
• to delete it.

Write to xdreamers.com@gmail.com. As there are no accounts, we may ask for something that helps us find your message, such as the date you wrote and the contact you left. A rating or a log line can't be traced to you unless you give us your browser's rating ID or your IP address.

If you're not satisfied with our answer, you can complain to the Office of the Information and Privacy Commissioner for British Columbia: oipc.bc.ca.

If you live outside British Columbia, you can make the same requests in the same way.

You can also turn analytics off (see above), clear the site's data in your browser at any time, or email us instead of using the form.

Children

Children use the labs at Sunday school, in class and at home. The labs need no account and never ask for a name. We don't knowingly collect personal information from children under 13. Please ask children not to use the contact form without a parent or teacher. If a child has sent us personal information, a parent or teacher can write to us and we will delete it.

Google Analytics counts children's visits like anyone else's. A teacher can turn it off on classroom devices with ?analytics=off.

Contact

Awaiting for the Bridegroom House of Prayer Society. Privacy questions and requests: xdreamers.com@gmail.com. You can also use the contact form.

Changes to this policy

If we change how we handle personal information, we will post the new version on this page and update the date at the top. This version took effect on October 15, 2026.