Privacy and Data Use Policy
Last updated: September 26, 2026
Replaces the 2011 version. Aligned with the LGPD (Brazilian Law No. 13,709/2018).
1. Introduction
Horário de Missa ("Portal", "we") respects the privacy of its users. This Policy describes which personal data we process, why, how we use it, with whom we share it and which rights you have, under Brazil's General Data Protection Law (LGPD).
2. Data Controller
Horário de Missa is run as a personal, volunteer project, with no legal entity incorporated. For the purposes of the LGPD, the data controller is the person responsible for the Portal, who can be reached through the contact form, under the "Privacy and LGPD" option.
3. Data We Process
- Account data (Google login): name, email, profile picture and your Google account identifier, received at login. We also record the date and the version of these Terms and this Policy that you accepted.
- Contribution data: the church and schedule edits and additions you submit, with their date, review status and, where applicable, the reviewer's notes. Your name and email are associated with these contributions for review purposes.
- Account usage data: churches you marked as favorites, Portal notifications and usage counters for tools with a daily limit (address lookup and schedule formatting).
- Contact messages: the content you write in the contact form, sent by email to the person responsible for the Portal together with your name and email. If you are logged in, your name and email come from your account. In the "Privacy and LGPD" option, which can be used without logging in, you provide them yourself.
- Technical and security data: IP address, browser, pages accessed and date/time, recorded in the server and web application firewall logs, for security and abuse prevention.
- Device location (optional): if you check "sort by distance" in the search or search by proximity, your browser asks for permission and, if you allow it, sends your latitude and longitude to the Portal to sort churches by proximity. These coordinates are not stored in the database, but they are part of the results page address and therefore appear in the server logs for the period stated in item 10.
4. Google Login
Access to the contribution features is exclusively through a Google account. We only receive the data that Google shares with your authorization: name, email and profile picture. We never have access to your password. You can revoke this access at any time in your Google account settings.
5. Third-Party Services
- Google Maps (geocoding): when a contributor adds or edits a church's address, that address is sent to Google to obtain the map coordinates. None of your data is sent in this process. Church pages have a link to open the location in Google Maps, and by clicking it you start using Google's service.
- Google Gemini (artificial intelligence): the schedule text a contributor types may be sent to Gemini to be converted into the Portal's standard format. Only the schedule text is sent, with no personal data.
- Google Fonts: the site's fonts are loaded from Google's servers, which receive your IP address.
- Google (email delivery): the Portal's emails, such as contact messages and notices to reviewers, are sent through Google's email service.
- Cloudflare Turnstile: the contact form uses Turnstile, from Cloudflare, to tell people from bots. Turnstile receives your IP address and browser information.
- Hosting: the Portal and its database are hosted on Oracle Cloud servers in the Brazil region.
These services have their own policies: Google Privacy Policy and Cloudflare Privacy Policy.
6. Purposes and Legal Bases
| Purpose | Legal basis (LGPD art. 7) |
|---|---|
| Creating and maintaining your account, authenticating access | Performance of a contract (Terms of Use accepted at login) — art. 7, V |
| Receiving, reviewing and publishing your contributions; keeping the churches' change history | Performance of a contract — art. 7, V; legitimate interest — art. 7, IX |
| Displaying schedules, search and sorting by distance | Legitimate interest — art. 7, IX (location is only used with the permission you grant in the browser) |
| Answering contact messages | Legitimate interest — art. 7, IX |
| Security, fraud and abuse prevention, blocking users | Legitimate interest — art. 7, IX; compliance with a legal obligation — art. 7, II |
8. Data Sharing
We do not sell or rent personal data. We only share data:
- with the service providers in item 5, to the extent necessary for the Portal to work;
- with public authorities, when required by law or court order.
Your name and email may be visible to the Portal's reviewers and administrators alongside your contributions. Your email is never displayed publicly.
9. International Transfer
Google and Cloudflare may process data outside Brazil, mainly in the United States. These transfers rely on the cases provided for in art. 33 of the LGPD, such as contractual clauses adopted by these providers.
10. Retention and Deletion
- Account data: kept for as long as the account exists. You can delete your account at any time on the My account page, with immediate effect.
- Contributions already reviewed: approved changes remain published and the churches' history is kept, but your name and email are removed from them when you delete your account. Contributions still pending review are deleted.
- Backups: the database has daily, weekly and monthly backups. Deleted data ceases to exist in them within 6 months, as old backups are discarded.
- Server logs: up to 14 days. Web application firewall logs: up to 30 days.
- Data may be kept longer when required by law.
11. Information Security
We adopt technical and administrative measures to protect your data, including encrypted connections (HTTPS), role-based access control, a web application firewall and backups. No system is completely free of risk. In the event of a security incident that may cause relevant risk or harm, we will notify the affected data subjects and the ANPD, as required by art. 48 of the LGPD.
12. Your Rights (LGPD art. 18)
You can, at any time:
- see the data we hold about you and download it as a file (access and portability), on the My account page;
- delete your account, also on My account;
Accounts blocked for misuse cannot be deleted through the My account page. In these cases, the request must be made through the contact form, which does not require login, and will be assessed with fraud and abuse prevention in mind.
13. Data Subject Channel
As this is a small personal project, there is no formally appointed data protection officer. The contact form, under the "Privacy and LGPD" option, serves as the communication channel for any matter related to personal data and can be used even by people who do not have an account on the Portal. Before acting on a request, we confirm by replying to the email address provided that it was made by the data subject themselves.
14. Children and Adolescents
The Portal is for general use and is not directed at children. We do not verify the age of people who log in with a Google account. If a legal guardian finds that a child or adolescent in their care has provided personal data to the Portal, they can request its deletion through the contact form, and the request will be handled with priority, in the best interest of the child or adolescent (art. 14 of the LGPD).
15. Changes to this Policy
This Policy may be updated. The date of the last update always appears at the top of this page. When there is a relevant change, your next login will count as acknowledgement of the new version, as set out in the Terms of Use.
16. Contact
Questions, complaints or requests about personal data: use the contact form and choose the "Privacy and LGPD" option. You do not need to be logged in.