This policy is tailored to the current website build. The operating legal entity, address, governing law, service providers, and dedicated contact details must be confirmed in site-config.js before public data collection or paid enrollment begins.
1. Current website behavior
The Rainbow Sanctuary site does not set first-party tracking cookies or use its own advertising pixels. Hanan’s retreat video connects to YouTube and attempts playback with sound when at least half of its player enters view, falling back to muted playback if the browser blocks it. It can also be started manually. Reduced-motion or data-saving browser settings disable automatic loading. The song recordings and artwork in the retreat page’s audio players are served by this website and play only when you use their controls.
The hosting provider may still process ordinary HTTP request and security-log data. See the Privacy Policy.
2. Google Fonts
The site currently loads typefaces through the Google Fonts Web API. This causes the browser to request stylesheet and font files from Google domains. Google states that this API is unauthenticated and does not set or log cookies. It is still a third-party network request and should be reassessed for the final hosting market; self-hosting the font files is an available privacy improvement.
Optional YouTube video
Hanan’s retreat film uses a YouTube player that loads automatically when at least half of the player enters view, or when you select Play. Until then, its thumbnail is served by this website and the player makes no requests to YouTube. Loading connects to Google/YouTube through youtube-nocookie.com and loads the player-control API from youtube.com; this is not a consent gate. The provider receives connection information such as your IP address and browser details, and may use cookies or similar storage. Playback tries with sound, then muted if the browser blocks audible autoplay. Some browsers require you to press Play. You can turn sound on or off using the player controls.
Reduced-motion and data-saving browser settings keep playback manual. Select “Stop video” to remove the player; scrolling it fully out of view or leaving the browser tab also removes it. It will not autoplay again on that page visit, but you can select Play to restart from the beginning. No playback choice is saved between visits. The downloaded player-control script remains on the page until navigation. Stopping does not delete data already received or storage already set by the provider; you can manage that storage in your browser. Opening the separate YouTube link takes you to that service instead. The enquiry does not require watching the film.
Google controls its own processing and retention, including processing that may occur outside your country. See Google’s Privacy Policy. Video notice updated: 20 October 2026.
Story song and Spotify link
The full Sonqoypi Bobinsana recording and its cover artwork are served by this website. The player does not autoplay or connect to Spotify. Choosing the separate “Open in Spotify” link takes you to Spotify, which receives ordinary connection information and may use cookies or similar storage under its own policies. Listening is not required to enquire. See Spotify’s Privacy Policy.
3. If other tools are added later
Analytics, maps, scheduling widgets, payment tools, chat, or further social-media embeds may introduce cookies or similar storage. Before any non-essential technology is activated, Rainbow Sanctuary must:
- document the provider, purpose, data, duration, and countries involved;
- update this policy and the Privacy Policy;
- provide a consent control where applicable;
- keep optional tools off until the visitor makes a valid choice where consent is required;
- make withdrawal as easy as acceptance.
4. Browser controls
You can use browser settings to inspect, block, or delete cookies and similar storage. Blocking YouTube may prevent the optional video from playing; the retreat information and enquiry links remain available.
5. Contact
Questions about site technologies can be sent to the privacy contact listed before launch.