Privacy Policy

What is collected:

• Reviews: the three 1-5 ratings, how long you have attended the parish or known the priest, optional Mass context, and optional written review text you submit. No name or email is collected with reviews.
• Abuse-prevention token: a SHA-256 hash derived from request data (IP address plus user agent). Only the hash is stored, never the raw IP address or user agent string. It is used only to refuse duplicates, enforce the hourly review limit, and detect review spikes.
• Moderation submissions: reports, corrections, right-of-reply and removal requests, and legal notices, including any optional contact details you choose to provide. Contact details are never published.
• Owner session: a signed, httpOnly session cookie is set only when the owner signs in. It contains an expiry time and a signature, nothing else.

Nothing else is collected for tracking or advertising. There is no advertising on this site.