GDPR, Privacy & Cookies

Worship Narc is committed to protecting the privacy of our users. We believe that your personal information belongs to you, and we have designed our platform with privacy as a core principle.

We do not collect, store, or share any personally identifiable information beyond what is strictly necessary to provide our services.

Worship Narc fully complies with the General Data Protection Regulation (GDPR) of the European Union. This means:

• Lawful basis: We only process data when we have a lawful basis to do so (consent, contract performance, or legitimate interest)
• Data minimization: We collect only the minimum data necessary to provide our services
• Purpose limitation: We use your data only for the purposes for which it was collected
• Storage limitation: We retain data only for as long as necessary
• Right to access: You can request a copy of any data we hold about you
• Right to erasure: You can request deletion of your account and associated data at any time
• Right to portability: You can request your data in a portable format

To exercise any of these rights, please contact us at [email protected]

We comply with all applicable privacy laws in the United States, including:

• California Consumer Privacy Act (CCPA): California residents have the right to know what personal information is collected, request deletion, and opt-out of the sale of personal information. We do not sell personal information.
• Virginia Consumer Data Protection Act (VCDPA)
• Colorado Privacy Act (CPA)
• Children's Online Privacy Protection Act (COPPA): Our services are not directed to children under 13, and we do not knowingly collect information from children.

We collect only the minimum information necessary to provide our services:

We use only essential cookies that are strictly necessary for the functioning of our website. These cookies are used solely for authentication and security purposes—keeping you logged in and protecting against cross-site attacks.

We do not use tracking cookies, advertising cookies, or any third-party analytics cookies. Because we only use essential cookies required for the site to function, no cookie consent banner is required.

You can disable cookies in your browser settings, but this may prevent you from logging in to your account.

We implement industry-standard security measures to protect your data:

• All data transmitted over HTTPS (TLS encryption)
• Passwords hashed using bcrypt with appropriate cost factors
• Database access restricted and encrypted
• Regular security audits and updates
• No plain-text storage of sensitive information

We use a minimal number of third-party services, each chosen for their privacy practices:

• Email delivery: For password reset and account verification emails only
• Cloud hosting: Industry-standard hosting with appropriate data protection agreements
• Payment processing: If you donate, payment is handled by a PCI-compliant processor; we never see or store your payment details

We do not use Google Analytics, Facebook Pixel, or any advertising or tracking services.