Skip to main content

Privacy Policy

Last updated: October 2026

Gospel Doodle is committed to being straightforward about privacy. This page explains what data we collect, why, who helps us process it, and the choices you have.

The Short Version

  • You can browse, download, and print everything without an account.
  • We don't use advertising, tracking cookies, or social media pixels, and we never sell or share your data for advertising.
  • Our analytics are cookieless and only show us totals, never individual visitors.
  • If you create an account, we store only what's needed to run it.

Who We Are

Gospel Doodle (gospeldoodle.com) is responsible for the personal data described in this policy (the "controller" under data protection laws such as the GDPR). You can reach us at contact@gospeldoodle.com.

If You Browse Without an Account

We do not ask for your name, email address, or any other personal information.

Analytics. We use Umami, a cookieless, privacy-focused analytics service, to see aggregate page views and a few anonymous interactions such as searches, downloads, and prints. Umami does not set cookies or build profiles of visitors, and we only ever see totals. Your IP address is passed to Umami so it can determine your approximate country; it is not stored as part of our analytics. If your browser sends a Do Not Track signal, we don't record your visit.

Performance. We use Vercel Speed Insights to measure how quickly pages load. It collects anonymous performance data only.

Download and print counts. Our servers count how many times each resource is downloaded or printed, which helps us understand which resources are most useful. To avoid counting the same person twice on the same day, each count briefly uses a scrambled identifier created from your IP address and browser type, which cannot be reversed. This identifier is deleted once that day is over, after which the record contains only the resource, the type of event, and the date. We never store IP addresses.

Security and bot protection. Our sign-in, sign-up, and password reset forms use Cloudflare Turnstile to block automated abuse. Turnstile checks technical signals from your browser (such as your IP address and browser characteristics) only to tell people apart from bots. Our hosting provider also processes this kind of technical information (such as IP address and browser type) to deliver pages and protect the site from abuse.

If You Create an Account

Accounts are optional. They let you save and like resources and keep a profile.

What we store:

  • Your email address and password. Your password is securely encrypted by our authentication provider, and we can never see it.
  • Your display name (required). We never show your email address publicly.
  • Optional details you choose to add: full name, organization, bio, the age group you teach, and a profile photo. Your profile is not shown on public pages, but your profile photo is stored at a web address that is not password-protected. Please don't use a photo of children as your profile photo.
  • The resources you save or like.
  • When you're signed in, the resources you download or print may be linked to your account.

How we use it: to provide your account features and to send account-related emails, such as email confirmation and password resets. We do not send marketing emails.

Why We Process Your Data (Legal Bases)

If you are in the European Economic Area or the United Kingdom, we rely on these legal bases:

  • To provide your account (contract): your account details, saved and liked resources, and account emails.
  • Our legitimate interests: running and improving the site (aggregate analytics, download and print counts) and keeping it secure (bot protection, abuse prevention). We use minimal or anonymous data for these purposes, and you can object at any time (see Your Rights).

Cookies and Browser Storage

We do not use advertising or tracking cookies, so we don't show a cookie banner.

  • Signed-in users have a secure session cookie that keeps them logged in. It is required for accounts to work.
  • Theme preference. If you switch between light and dark mode, your choice is saved in your browser.
  • Our hosting and security providers may use strictly necessary technical cookies for security and performance.

Third-Party Services

We use the following services to run the site. Each processes data only to provide its service to us:

  • Vercel: hosting, content delivery, security, and page-speed measurement. Privacy Policy
  • Supabase: database, user accounts, and file storage; data stored in the United States. Privacy Policy
  • Resend: delivers account emails such as email confirmation and password resets. Privacy Policy
  • Cloudflare: Turnstile bot protection on our account forms. Privacy Policy
  • Umami: cookieless website analytics. Privacy Policy

If you email us, your message is handled by our email provider. We do not use advertising networks or social media tracking pixels. Links to our social media pages are plain links; those sites have their own privacy policies.

International Data Transfers

Gospel Doodle is operated from the United States, and our service providers process data in the United States and other countries. When personal data from the European Economic Area, the United Kingdom, or Switzerland is transferred, our providers rely on safeguards set out in their data processing terms, such as the European Commission's Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.

Data Retention

  • Account data is kept until you delete your account (from your account page, or by asking us). When your account is deleted, your profile, profile photo, saved items, and likes are deleted, and any download or print records linked to your account become anonymous.
  • Download and print records: the daily identifier is deleted once the day is over; the remaining anonymous records are kept to calculate usage statistics.
  • Analytics data is aggregate and contains no personal information.
  • Emails you send us are kept as long as needed to answer you and keep a record of the conversation.
  • Technical logs kept by our hosting and security providers are retained for a short period under their own policies.

Children's Privacy

Gospel Doodle creates content designed to be used with children, but the website and accounts are intended for adults: parents, teachers, and church leaders. We do not knowingly collect personal information from children under 13. If you believe a child has created an account or shared personal information, contact us and we will delete it promptly.

Your Rights

You can view and update your profile information at any time from your account page, and you can permanently delete your account there too. You can also ask us to:

  • give you a copy of your personal data;
  • correct or delete it;
  • restrict or object to how we use it; and
  • provide your data in a portable format.

To make a request, email contact@gospeldoodle.com. We will respond within 30 days and may need to confirm your identity first. We will never discriminate against you for exercising your rights.

If you are in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local data protection authority. Depending on where you live (for example, in California), you may have additional rights under local law. We do not sell or share personal information as those terms are defined under California law.

Changes to This Policy

We may update this policy as the site evolves. The "last updated" date at the top of this page always reflects the most recent version. If we make significant changes to how we handle account data, we will notify account holders.

Contact

Questions about this policy? Email us at contact@gospeldoodle.com. We aim to respond within 5 business days.

Last updated October 22, 2026