Privacy

The public church website is designed to work without advertising trackers. Nothing is loaded from another company until you choose. A banner asks once, and your answer is remembered in your own browser.

Your privacy choice

When you first visit, a banner asks whether content from other companies may load. Your answer is stored in your browser's local storage under the name "cookie-consent", together with the date you gave it, and is treated as valid for one year. It is not a cookie and is never sent to our server.

Until you accept, the Google Map and the SermonAudio browser do not load and no request is made to those companies. If you decline, or clear your browser storage, the site returns to asking.

Public website and technical records

Apart from the privacy choice described above, the public pages do not store anything in your browser. Our hosting and security systems may process limited technical records, such as a request time, requested path, IP address, browser identifier, and response status, to deliver and protect the site. Access to those records is limited to authorized operators and the hosting provider.

Maps, sermons, and videos

Each provider panel explains what will load. The Google Map on the Visit page and the SermonAudio browser on the Sermons page load only after you accept. Videos load only when you choose them individually, whatever your banner answer. The provider may set cookies or browser storage under its own policies. Unloading an embed prevents further requests from that frame, but cannot erase information the provider already received or stored.

Email

The contact form sends the name, email address, and message you enter to FormSubmit, which relays it by email to the church. FormSubmit and the church's email service process that information to deliver the message, and people authorized to answer church email can read it. Please do not include sensitive information in the form.

Shepherd portal

Shepherd is the church's private administration system. Signing in connects activity to your account and assigned role. Its server maintains an authenticated session and stores church records that an authorized user is permitted to see or change. After an Administrator deliberately continues from Shepherd to a public page, the server checks that same signed-in session before delivering any editing code, without exposing the session cookie to public-page JavaScript.

Before a release, the runtime storage inventory must be checked against the deployed Shepherd build. No item should be described as essential or optional until that review is complete. The reviewed names, purposes, duration, scope, and sign-out behavior are recorded in the repository's release inventory.

Questions

For a privacy question or a request concerning church records, email pastor@elkinsparkchurch.com. Please do not send sensitive information through ordinary email.