Trust, Security & Privacy

Administrative areas of the site are protected by email and password sign-in. Each admin account is assigned a role; access to admin tools is checked server-side on every request, not in the browser alone.

Public visitors do not need an account to read pages, view events, or subscribe to email updates.

The website is hosted on Lovable's managed infrastructure and served over HTTPS. The backend uses a managed Postgres database with row-level security enabled on every table that holds user data, so each query is checked against an access policy before any rows are returned.

Server-side secrets (API keys, service credentials) are stored in the platform's secret manager and are never shipped to the browser. Lovable provides the underlying platform controls; how those controls are configured for this site is our responsibility as the app owner.

We keep the data footprint small. The site collects:

• Newsletter subscribers — your email address and the time you subscribed, so we can send you updates.
• Contact and prayer requests — the details you choose to submit through our forms.
• Email delivery logs — message identifiers and delivery status so we can diagnose failed sends.
• Suppression list — addresses that have unsubscribed or hard-bounced, so we do not email them again.

We do not sell your information, and we do not share it with third parties for advertising.

Transactional and newsletter emails are sent from Admin@godscrusadeministries.com. Every newsletter includes a one-click unsubscribe link backed by a single-use token; once you unsubscribe, your address is added to our suppression list and excluded from future sends.

To unsubscribe at any time, use the link in any email you have received from us, or contact us at the address below.

We retain subscriber and contact data for as long as you remain subscribed or while it is needed to respond to your enquiry. You can ask us to access, correct, or delete the personal data we hold about you by contacting us.

We rely on a small number of trusted service providers to operate the site — including our hosting and database provider (Lovable / Supabase) and our email delivery provider. They process data on our behalf under their own security and privacy commitments.

If you believe you have found a security vulnerability or a privacy issue affecting this site, please contact us so we can investigate. Please do not publicly disclose the issue before we have had a reasonable opportunity to respond.