Privacy policy
MissaMap helps people find churches and Mass times. This policy explains the information we process and the controls available to you.
1. Operator and contact
Operator: MissaMap, an individually operated project
Privacy, correction and deletion requests: privacy@missamap.com
The operator's personal email and home address are not published; use the dedicated contact address above.
2. Information we process
- Google-provided identifier, email, display name and verification state when you choose Google sign-in
- Account display name, sessions and security state, saved churches, confirmations and contributions
- Processed WebP photo derivatives, rights attestations and moderation/report records for photos you submit
- Information you include in a message and operational records needed for security and reliability
3. Purposes
- Authentication, account operation, saved places and community contributions
- Data quality, abuse prevention and photo reports
- Security, troubleshooting, service operation and legal obligations
4. Retention and deletion
Account information is retained until you delete the account. Deletion removes sessions, Google links, saved places, confirmations, photo reports and your identifying profile values. A non-identifying tombstone may remain so contribution history and foreign keys stay consistent.
MissaMap does not retain upload originals; it stores processed derivatives. Deletion attempts to remove those derivatives and marks any temporary storage cleanup failure as non-public cleanup work.
Session cookies last up to 30 days and are cleared on logout or account deletion. Records may be retained where a legal or security obligation requires it.
5. Providers and international processing
- Cloudflare Workers, D1, R2 and Images for hosting, database, processed photo storage and image transformation
- Google for the Google sign-in flow you choose
- Map tile and map-library providers for browser map display
- MissaMap does not store OAuth access/refresh tokens, upload originals or advertising-tracking cookies.
6. Your choices
You can change your display name and delete your account from the account page. Contact privacy@missamap.com to request correction of the login email or Google identity, access to information, restriction or other privacy help. We may ask for minimum information needed to verify the request.
7. Cookies and location
The service uses an HttpOnly, SameSite session cookie for login and does not intentionally use advertising or analytics cookies. Location is used for a map search only when you explicitly grant browser location permission and is not stored as account data.
8. Children
Where parental consent or guidance is required for a person under 14, it must be obtained before submitting personal information or photos. If you believe this has not happened, contact privacy@missamap.com.
9. Changes
Effective/last updated: 2026-08-16
We may update this policy as the service or applicable requirements change; the current version is posted on this page.