What we collect, in plain language.

What we collect

Account and membership details. If you create an account: your email address, username, display name, the legal-notice versions and times you accepted, membership tier, and cancellation status. Your password is stored only as a salted hash, so we cannot read it. Sign-in attempts and password resets are logged to protect your account.

Your saved activity. Follows, saved searches, and collections you create are stored with your account so they work across visits.

Usage events. Page views, searches (including the search text), and item views, tagged with a random per-browser visitor id kept in a signed cookie, plus your browser's user-agent string and the referring page. These tell us which content matters and which searches come up empty. Usage events never include your IP address or email address, and old events are pruned.

Things you send us. Waitlist signups store the email you enter. Contact messages, suggestions, research requests, and membership-cancellation requests store what you write and the account or reply details needed to act on the request. Reply addresses are used to respond and operate the requested service, not for advertising.

Cookies

One signed session cookie, used for your login session and the anonymous visitor id above. No advertising or cross-site tracking cookies, and we do not set the visitor cookie for automated crawlers.

Third parties

Cloudflare proxies the site. Stripe handles payments on its own checkout pages, so card details never touch our servers; Stripe sends Uplift customer, checkout, payment, and subscription identifiers and status needed to provide paid access. Google Fonts serves the site's typeface, OpenStreetMap serves the church-map tiles, and YouTube serves video thumbnails and players on pages with video; your browser contacts those services directly when it loads those pages. We do not sell or share your information for advertising.

How long we keep it

Account and saved activity remain until the account or data is deleted. Contact and request records remain while needed to respond, prevent abuse, and document the action taken. Payment and cancellation records may be kept as long as reasonably needed for accounting, disputes, fraud prevention, and legal obligations. Usage events are pruned on a rolling basis. Backups and security logs may retain deleted information for a limited time before rotation.

Your choices

You can use nearly all of the site without an account. To correct or delete your account data, or ask what we hold about you, use the contact page. It is read by the people who run the site, and we will act on requests promptly.