# Privacy Policy **Last updated: September 8, 2026** This Privacy Policy explains how the Tacoma ASD Church website uses information and Google API services. ## Information We Collect Our website does not require visitors to create an account or provide personal information in order to browse the website. We do not intentionally collect or store personal information from website visitors through the website. ## Google API Services Our website uses Google API Services to determine whether the church's YouTube channel is currently broadcasting a livestream. The website uses the YouTube API with read-only authorization for the church's YouTube account. The authorization is used only to check the status of the church's livestream and identify the livestream video that should be displayed on the website. We do not use this access to read, modify, upload, delete, or manage YouTube content. ## Google User Data The Google account authorization used by this application belongs to the church and is used solely to provide the livestream functionality described above. We do not sell Google user data. We do not use Google user data for advertising. We do not transfer Google user data to third parties except as necessary to use the Google API Services required to provide the livestream functionality. We do not use Google user data for personalized advertising, targeted advertising, or other unrelated purposes. We do not use Google user data for training generalized artificial intelligence or machine-learning models. ## Data Storage and Retention The website does not intentionally store Google user data in a database. Authentication credentials required to access the church's YouTube account are stored securely on the server and are not exposed to website visitors or client-side code. Livestream status information is used only to provide the livestream functionality of the website. ## Data Security We take reasonable measures to protect authentication credentials and other information used by the website. OAuth credentials and API credentials are stored as server-side environment variables and are not exposed publicly through the website. ## Data Sharing We do not sell, rent, or otherwise provide Google user data to advertisers, data brokers, or unrelated third parties. Google API Services are used solely for the functionality described in this policy. ## Data Deletion If the church's Google authorization is no longer needed, the authorization can be revoked from the Google account. Server-side authentication credentials can also be removed from the application. ## Changes to This Policy We may update this Privacy Policy when the website's functionality or data practices change. The updated policy will be published on this page with a new effective date. ## Contact If you have questions about this Privacy Policy or the website's use of Google API Services, please contact the church through the contact information provided on this website. This application uses Google API Services. Its use and transfer of information received from Google APIs will adhere to the [Google API Services User Data Policy](https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.