Privacy Policy

Catholic Kids Crafts operates www.catholickidscrafts.com (the "Site"). This policy describes what we collect when you browse the public site, how we use cookies, which third parties process data, and how to contact us.

Information we collect

• Usage analytics (aggregated): Page views and approximate unique visitors per calendar day. Operators view totals in /admin; we do not sell this data.
• Visitor identifier cookie: On public pages we set an httpOnly cookie named ckc_vid (random UUID, up to one year) so we can count one visit per browser per day. It is not used for advertising profiles. Admin routes do not use this tracker.
• Server and hosting logs: Our host (Vercel) may log IP address, user agent, and request metadata for security and reliability, under Vercel's privacy policy.
• Admin accounts: Operator email and a hashed password for /admin only. Session cookies are managed by our authentication library (NextAuth).
• Family accounts (optional): Parents may create an account at /account/signup with email and a hashed password. We store reader display names, Access ID hashes (not plain Access IDs), and Bible chapter completion counts for sticker progress. Children sign in with an Access ID only—no child email is collected.
• Google sign-in (optional): If enabled, parents may use Google OAuth on /account/login. We receive your Google account ID, verified email, and display name from Google's OpenID service. We do not receive your Google password. See docs/FAMILY_GOOGLE_SIGNIN.md for operator setup.
• Home search: Queries you type on the home page are sent to our server to search published resources, curriculum, games, and Bible titles. We do not log search queries for advertising.

Cookies and similar technologies

• Essential / analytics: ckc_vid as described above, set via POST /api/analytics/visit when you change pages on the public site.
• Admin session: Authentication cookies when you sign in at /admin/login.
• Family / reader sessions: ckc_family, ckc_reader, and ckc_bible_reader for optional Bible sticker progress (see above).
• We do not run third-party advertising or social-tracking pixels on the Site. Embedded YouTube players (when a resource uses a YouTube URL) may set cookies on YouTube's domain if you play a video; see YouTube/Google policies.

You can clear or block cookies in your browser settings. Blocking ckc_vid does not prevent you from using the Site; it only affects our internal visitor counts.

How we use information

• Operate and improve the Site (content, games, Daily Mass calendar).
• Secure admin access and prevent abuse.
• Understand general traffic levels (not individualized marketing).

Third-party services

We rely on the following categories of providers:

• Vercel — hosting, CDN, and (optionally) file storage (Vercel Blob) for uploaded PDFs and images.
• Neon — PostgreSQL database for site content, traffic aggregates, and admin users.
• Google — Optional parent sign-in (OAuth) when operators enable it; see our family account privacy notes above.
• Evangelizo.org — Liturgical day titles on the Daily Mass calendar. Our servers call their Reader API when you view that calendar. We do not republish full lectionary text from Evangelizo on public pages by default.
• USCCB / bible.usccb.org — The Daily Mass page links out to the official USCCB Daily Readings site for full texts. We do not display USCCB reading bodies on public HTML pages. USCCB and CCD copyrights apply on their site.
• Living with Christ (Bayard) — Optional outbound links from Daily Mass to readings.livingwithchrist.ca. We do not host or scrape their reading text.
• GoodNews (서울대교구) — Optional outbound links from Daily Mass to maria.catholic.or.kr for Korean daily Mass texts. We do not host or scrape their reading text.
• Universalis (universalis.com) — The Play → Typing → "Today's Bible" mode loads today's Mass readings via Universalis's JSONP service for webmasters. Reading text appears on that game page with Universalis's copyright notice and links back to Universalis. This uses a different calendar/translation than the U.S. USCCB lectionary.
• YouTube — Embedded players on some resource pages when operators link a video URL.
• Operator-uploaded content — PDFs, images, and lesson text posted by site operators (Kids Resources, Curriculum, etc.) are the responsibility of the publisher who uploaded them. Do not reuse those materials without permission from the rights holder.
• Amazon, Teachers Pay Teachers, and other outbound links — When you click recommendations or store links, those sites' policies apply. Amazon links may be marked as Associate links when configured; see Affiliate disclosure.

Data retention

Traffic aggregates are kept in our database for operator reporting. The ckc_vid cookie expires after about one year unless you clear it sooner. Admin account data remains until an operator removes it.

Children

The Site is intended for adults planning activities for children. We do not knowingly collect personal information directly from children under 13. If you believe a child provided personal data to us, contact us below and we will delete it where appropriate.

Your choices

Depending on where you live, you may have rights to access, correct, or delete personal data we hold about you (primarily relevant for admin accounts). For public analytics we store only a pseudonymous visitor id and daily counts, not your name.

Contact

Questions about this policy or data practices: email the site operator at the address published on About (set NEXT_PUBLIC_CONTACT_EMAIL in production to display it here)..

See also About and Affiliate disclosure.