Congregation Directory — Privacy Policy

Last updated: 27 July 2026

Congregation Directory ("the app") is a free, browser-based tool for searching a congregation's person directory and, optionally, creating Google Calendar events that invite the people currently displayed. The app runs entirely in your web browser and is served as static files from GitHub Pages. There is no application server that receives, stores, or processes your data.

Information the app handles

Directory data (names, contact details, tags) that you import from a Persons.csv file. This is stored only in your browser (IndexedDB) and never leaves your device except when you choose to act on it.
Google account data, only if you use the "Add Google Calendar Event" feature and sign in with Google (see below).
App settings and notes you create, stored locally in your browser (localStorage/IndexedDB).

Google user data & API scopes

When you choose to create a calendar event, the app requests these Google OAuth scopes:

https://www.googleapis.com/auth/calendar.events — used solely to create the calendar event you configure and to send the invitations you request. The app does not read, modify, or delete your other calendar events.
https://www.googleapis.com/auth/userinfo.email — used only to show which Google account is signed in.

Sign-in uses Google Identity Services in your browser. The resulting access token is stored only in your browser's local storage and is used only to call the Google Calendar API directly from your browser. Tokens are short-lived, are never sent to us or any third party, and can be cleared at any time via the app's Sign out control or by revoking access at your Google Account permissions page.

Limited Use disclosure

The app's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the calendar features described above, is processed only within your browser, is not transferred to others, and is not used for advertising or any other purpose.

Data sharing

We do not collect, receive, sell, or share your data. The only outbound transmissions are made directly from your browser to Google's own APIs, and only when you initiate a calendar action. If you send calendar invitations, the attendee email addresses you selected are provided to Google in order to deliver those invitations, exactly as with any calendar invite you send.

Data retention & deletion

Because all data lives in your browser, you control it entirely. Clearing the app's data (via the app's Clear Database and Sign out controls, or by clearing your browser's site data) removes it. Revoking the app at your Google Account permissions page ends its access to your Google data.

Children's privacy

The app is intended for congregation administration use and is not directed to children.

Changes to this policy

Updates will be posted on this page with a revised "Last updated" date. The current version is maintained in the project's public repository.