Privacy, with care.
Snapshot is Forward Church’s private leadership workspace. This notice explains the information used to provide the workspace and protect access to it.
The public site
The welcome, privacy and terms pages contain no church records. The dashboard and its data require an approved sign-in; these public pages do not grant access. These pages do not load social-media embeds or advertising trackers. The sign-in page loads Cloudflare Turnstile to check for automated abuse.
Sign-in information
Cloudflare Access and Google authenticate staff, and Snapshot sends one-time email codes to individually approved leaders. Snapshot uses the verified email address to decide whether someone may enter the workspace. Snapshot does not receive your Google password or request access to Gmail, contacts or Google Drive.
Access is limited to Forward’s Google Workspace accounts and individually invited leaders. Invited leaders use an emailed sign-in code sent only to the address approved for Snapshot. Sign-in services process technical information such as IP addresses and sign-in events to operate and protect access.
Turnstile processes browser and network signals under Cloudflare’s privacy policy. Snapshot validates each security-check token on the server. A short-lived, secure cookie records the sign-in challenge; after authentication, a secure, HTTP-only cookie binds the browser session to the approved identity for up to eight hours. Signing out clears Snapshot’s sign-in cookies.
Church and ministry information
The restricted dashboard uses connected church systems, including Planning Center, and ministry-channel reporting services. Depending on the report, this can include names, household addresses, registrations, group membership and engagement statistics. This information is for authorized ministry work, not public browsing. Reports may use stored snapshots so leaders can review information without repeatedly querying each connected service.
Address checks and embedded content
If an authorized user requests an address suggestion once that connection is enabled, the address being checked is sent to Google Address Validation under the Google Privacy Policy. Suggestions require human review; Snapshot does not automatically change the Planning Center record. Google validation results are not saved in a persistent results cache by Snapshot.
Opening media in the private dashboard may load content from providers such as Google/YouTube, Meta/Facebook/Instagram or podcast hosts. Those providers receive requests from your browser and handle information under their own privacy notices. External links take you to the provider’s website.
Use, storage and sharing
Information is used to authenticate users, provide ministry reports, support follow-up and investigate operational or security problems. Cloudflare hosts the application and its stored report snapshots. Connected providers process the requests needed for their features. Snapshot does not sell Google sign-in information or use it for advertising. Access to church records is restricted to authorized users; it is not shared through these public pages.
Authentication records, cached ministry reports and operational logs can have different storage periods. Contact the administrator for the retention and deletion settings that apply to your information. Source records remain managed in their original church systems; changing or deleting a source record may require a subsequent sync to be reflected in Snapshot.
Questions or corrections
Contact hello@justinallen.net for privacy questions, access removal or correction requests. Do not send sensitive church records in an initial support message. This notice may be updated as connections and features change.