Legal
Privacy Policy
This website (www.trivalleystonino.org) is run for the Tri-Valley Santo Niño Prayer Group (“we”, “the group”). It is hosted and operated on the group's behalf by itpro360 LLC on a server located in the United States. This policy explains exactly what the site collects and why.
What we collect
- Member accounts: your name, email address, optional phone number, a securely hashed password (bcrypt), whether you agreed to these terms and when, your theme preference, and — if you turn on two-step sign-in — your authenticator secret and hashed recovery codes. Accounts moved from our old WordPress site keep their existing hashed password until your first sign-in, when it is replaced with a new hash.
- Tooly SSO sign-in (operated by itpro360 LLC): if you choose “Continue with Tooly”, the site receives your Tooly user ID (
sub), email, name, profile photo link and security groups. Your Tooly password and authenticator codes are never seen by this site. See Tooly SSO's own Privacy Policy. - Newsletter subscribers: email, name (if given), subscription status, tags (for example “Coordinators”), when and from which IP address you confirmed, and when you unsubscribed. We record which newsletters were sent to you and whether delivery failed. We do not track opens or clicks.
- Sign-in history and devices: for each sign-in we keep the time, method, IP address and browser/device description, and a random device identifier stored in a cookie so we can recognise new devices and warn you about them.
- Security and activity log: sign-ins, failed attempts, lockouts, account changes, content changes, newsletter sends, admin actions and server errors, each with time, account, IP address and browser/device description.
- Visitor statistics: daily page views, unique visitors (counted with a hash of IP address and browser that changes every day — raw IP addresses are not stored for statistics), pages viewed, referring website domain, browser, operating system, device type and country (from Cloudflare). No third-party analytics.
- Contact form: the name, email and message you send are emailed to the group's contact address; the site keeps only a log line that a message was sent.
- Content you upload as staff (articles, photos, music, newsletters).
Cookies and browser storage
We use only strictly necessary storage, so there is no cookie banner: a session cookie (stn_sid) that keeps you signed in and protects forms, a device cookie (stn_dev) used for new-device alerts and security, a marker cookie (stn_cc) that remembers your browser already cleared files cached from our old website, and your light/dark theme choice in your browser's local storage (stonino-theme). The music player remembers the current track in session storage so it can resume after you move between pages. No tracking or advertising cookies.
Who can see your information
- You — on your account page, including a download of your data.
- Moderators can see member and subscriber names, emails, phone numbers and status in order to approve members and send newsletters.
- Administrators (the group's site owner and itpro360 LLC) can see everything above plus the security log and statistics.
- Members can read members-only content, including past newsletters, which may list hosts' names, addresses and phone numbers that the group published.
- Service providers: Cloudflare (network and security), SMTP2GO (delivers all emails), and itpro360 LLC (hosting). Authorities if required by law.
Emails we send
Newsletters (only after you subscribe and confirm, or opt in as a member), subscription confirmations, password reset and account set-up links, membership approval notices, new-device sign-in alerts, and notices to staff. Every newsletter has a one-click unsubscribe link. Email is delivered through SMTP2GO; link and open tracking are turned off.
Third-party content
If an article embeds a YouTube or Vimeo video, your browser contacts that service when the page loads. If spam protection is enabled, Cloudflare Turnstile runs on the sign-up, subscribe and contact forms.
How long we keep it
- Accounts: until you delete your account or ask us to.
- Sign-in history: 30 days. Known devices: while your account exists.
- Security and activity log: 12 months.
- Visitor statistics: about 120 days of daily totals.
- Database backups: daily copies kept 14 days.
- Newsletter subscribers: until you unsubscribe; we then keep your email marked “unsubscribed” so we never email you again by mistake, unless you ask us to erase it.
- Records of deleted accounts (email, time, IP and device): 12 months.
Your rights
You can see and correct your details and download your data from your account page, unsubscribe from any newsletter, and delete your account yourself. For anything else — including erasing a subscriber record — contact [email protected].
Security
Passwords are hashed, staff accounts require two-step sign-in, connections are encrypted by Cloudflare, sign-in attempts are rate-limited and accounts lock after repeated failures. No system is perfectly secure, but we work to protect your information.
Children
Accounts are for people aged 16 and over.
Changes
We will update this page and its effective date when what we collect or how long we keep it changes.