Privacy, with care.
Snapshot is Forward Church’s private leadership workspace. This notice explains the information used to provide the workspace and protect access to it.
The public site
The welcome, privacy and terms pages contain no church records. Private records remain locked while launch verification is in progress. These pages do not load social-media embeds or advertising trackers. The sign-in page loads Cloudflare Turnstile to check for automated abuse.
Sign-in information
Google and Cloudflare Access authenticate approved users. Snapshot uses a verified identity, including your email address, to decide whether you may access the workspace. Google sign-in can supply your name and basic profile information to Cloudflare Access. Snapshot does not receive your Google password or request access to your Gmail messages, contacts or Google Drive through this sign-in connection.
Access is limited to Forward’s Google Workspace accounts. Individually invited leaders may use an emailed sign-in code once their access is approved and enabled; no outside addresses are currently approved. Authentication services use session cookies and process technical information such as IP addresses and sign-in events to operate and protect access.
Turnstile processes browser and network signals under Cloudflare’s privacy policy. Snapshot validates each security-check token on the server. A short-lived cookie records that check during sign-in; after authentication, a secure, HTTP-only cookie binds the browser session to the approved identity for up to eight hours. Signing out clears that browser cookie and requests sign-out from Cloudflare Access.
Church and ministry information
The restricted dashboard uses connected church systems, including Planning Center, and ministry-channel reporting services. Depending on the report, this can include names, household addresses, registrations, group membership and engagement statistics. This information is for authorized ministry work, not public browsing. Reports may use stored snapshots so leaders can review information without repeatedly querying each connected service.
Address checks and embedded content
If an authorized user requests an address suggestion once that connection is enabled, the address being checked is sent to Google Address Validation. Suggestions require human review; Snapshot does not automatically change the Planning Center record. Google validation results are not saved in a persistent results cache by Snapshot.
Opening media in the private dashboard may load content from providers such as Google/YouTube, Meta/Facebook/Instagram or podcast hosts. Those providers receive requests from your browser and handle information under their own privacy notices. External links take you to the provider’s website.
Use, storage and sharing
Information is used to authenticate users, provide ministry reports, support follow-up and investigate operational or security problems. Cloudflare hosts the application and its stored report snapshots. Connected providers process the requests needed for their features. Snapshot does not sell Google sign-in information or use it for advertising. Access to church records is restricted to authorized users; it is not shared through these public pages.
Authentication records, cached ministry reports and operational logs can have different storage periods. Contact the administrator for the retention and deletion settings that apply to your information. Source records remain managed in their original church systems; changing or deleting a source record may require a subsequent sync to be reflected in Snapshot.
Questions or corrections
Contact hello@justinallen.net for privacy questions, access removal or correction requests. Do not send sensitive church records in an initial support message. This notice may be updated as connections and features change.