Privacy Policy
Effective: April 15, 2026 · Last updated: April 15, 2026
Introduction
Welcome to Apostolate Navigator. This site helps visitors discover and connect with apostolates — mission-driven groups that put faith into action through service, formation, and fellowship.
This privacy policy covers theapostolates.com (Apostolate Navigator) and describes how we collect, use, and protect your information. The site is built and maintained by volunteers, and we are committed to being transparent about our data practices.
Data We Collect
We only collect information that helps us connect you with apostolates or improve the site. Here is what we collect and when.
Contact Form Submissions
When you submit a contact form — whether reaching out to a specific apostolate or sending a general inquiry — we collect the information you provide in the form. This is stored securely in an encrypted database.
Account Information
When you create an account, we collect the information you provide during sign-up (such as your name and email address). Your password is securely hashed and is never stored in plaintext.
Favorites
When you save an apostolate to your favorites, we store the apostolate identifier linked to your account with owner authorization, so only you can see your saved list.
Search Logs
When you use the search feature, a random session ID is generated for your browser tab using crypto.randomUUID() and stored in sessionStorage. This ID is not tied to your identity. We do not log your IP address, user agent, name, email, or any other personally identifiable information in search logs.
Location Data
If you allow location access, your city name, latitude, longitude, and source are stored in a browser cookie called apostolate_nav_location with SameSite=Strict and Secure attributes. This data is used entirely within your browser to sort apostolates by distance and is never sent to our servers.
Search Alerts
Search alerts are planned but not yet active. When available, this feature would collect an email address and saved search criteria so we can notify you of new matches.
How We Use Your Data
Each type of data we collect has a specific purpose. Here is a summary:
| Data Type | Purpose |
|---|---|
| Contact form info | Forwarded via email to the relevant apostolate leader or site administrator so they can respond to your inquiry |
| Account info | Used to authenticate you and personalize your experience, including favorites and your dashboard |
| Favorites | Used to display your saved apostolates on your personal dashboard |
| Search logs | Used for aggregate analytics to improve search results and content — never used to identify individuals |
| Location cookie | Used to sort apostolates by distance, entirely within your browser |
Who Receives Your Data
- Apostolate leaders receive the information you submitted in a contact form via email notification so they can follow up with you.
- Site administrators receive submissions when no active leader is found for the apostolate, or for general inquiries routed to the admin team.
- Amazon Web Services — our site runs on Amazon cloud infrastructure for hosting, database storage, authentication, and email delivery.
We do not sell, rent, or share your data with advertisers, data brokers, or any third party beyond what is described in this policy.
Cookies & Local Storage
Here is a complete list of what we store in your browser:
| Name | Type | Purpose | Duration |
|---|---|---|---|
apostolate_nav_location | Cookie (Strict, Secure) | Proximity sorting | Until cleared by you |
search_session_id | sessionStorage | Anonymous search analytics | Cleared when tab closes |
| Auth tokens | localStorage | Authentication session | Per session configuration |
We do not use third-party tracking cookies, analytics services, or advertising pixels.
Data Security
We take reasonable steps to protect your information:
- All data sent between your browser and our servers is encrypted using HTTPS/TLS.
- Data stored in our database is encrypted at rest using provider-managed keys.
- Passwords are securely hashed and are never stored in plaintext.
- Contact form submissions are transmitted to leaders via encrypted email with TLS in transit.
- Location data never leaves your browser — it stays in a local cookie.
- We use property-based testing to verify that personally identifiable information is excluded from public data and logs.
Your Rights & Choices
You have control over your data. Here is what you can do:
- Deny geolocation — you can decline the browser location prompt and the site will work without location data.
- Request account deletion — contact us and we will remove your account and associated favorites.
- Request submission removal — contact us to have a contact form submission removed.
- Clear cookies — clearing your browser cookies removes the location cookie.
We aim to respond to all data requests within 30 days.
Children's Privacy
This site is not directed at children under 13, and we do not knowingly collect personal information from children under 13.
Some apostolates serve youth — such as Challenge, Conquest, and Mission Youth. If you are a parent or guardian and your child is interested in one of these programs, please submit the contact form on their behalf.
Changes to This Policy
When we make changes to this policy, we will update the “Last updated” date at the top of this page. For significant changes, we may also post an announcement on the About page.
Your continued use of the site after changes are posted means you accept the updated policy.
Contact Us
If you have questions about this privacy policy, want to request data deletion, or have any other privacy concerns, please visit our contact page and submit a General Inquiry with the reason “Other.”