Privacy policy

• There is no advertising here, no analytics, and no third-party tracking of any kind.
• We do not sell, rent or trade anything about you.
• If you join a group, its leader can see how far you have watched, what you answered in the exercises, and the notes you write on a study.
• You can ask us to delete your account and everything attached to it, and we will.

The site is run by Three Angels Seventh-day Adventist Church on behalf of the congregations of its district. Whichever congregation’s address you arrived through, the account and the study record are held in one place, by us.

Write to 3ac.sda@gmail.com with any question about this policy, or to Three Angels Seventh-day Adventist Church, Connecticut, USA.

Because you gave it to us:

• Your name and email address.
• A password, if you set one. It is stored only as a slow one-way hash — we cannot read it, and neither can anyone who obtains the database.
• The congregation you said you attend, whether you attend it, and the group you joined.
• How you described where you are spiritually, if you answered that at registration. It is optional, and “I would rather not say” is a real answer.
• Whether you prefer to meet in person or online.

Because you used the site:

• Which parts of each film you have watched, recorded as coarse spans rather than a continuous log, and the furthest point you reached.
• What you entered in a study’s exercises.
• Notes you write on a study, together with the moment in the film you were at when you wrote them.
• When your account was created and when a study was last opened.

Because you signed in with Google, Facebook, Apple or Microsoft, if you chose to: your name, your email address, and that provider’s identifier for your account. We do not ask for, receive or keep access tokens, so we cannot read your mail, your contacts, your calendar or anything else held by that provider.

This is the part most worth reading, because studying with a group means somebody is following along.

• The leader of your group can see your name and address, how far you have watched each study, what you answered in its exercises, and the notes you wrote on it. Notes are shown to them in film order alongside everyone else’s, because the point of a group is to talk about the places people got stuck.
• An administrator of your congregation can see the people enrolled there, the groups they are in, and the roles they hold.
• A district administrator can see all of the above across every congregation, and can sign in as another person in order to see what they see when helping them. Every occasion on which that happens is written to an audit record naming who did it, whose account it was, and when it started and stopped.

Nobody outside the district’s congregations is given access to any of it.

There are no advertising or analytics cookies on this site. What is set is what makes it work:

• A session cookie, so you stay signed in. It is scoped to this domain and its congregation subdomains so that signing in once is enough.
• A short-lived cookie while a social sign-in is being connected to an existing account, and another while a district administrator is signed in as somebody else. Both are signed, and both expire on their own.
• Your player preferences — volume, whether captions are on — kept in your own browser and never sent to us.

Confirming your address, resetting a password, a sign-in link if you ask for one, and an invitation if somebody invites you to a congregation or a group. We do not send marketing email and there is no mailing list to be added to.

Your account and study record are kept while the account exists. Ask us to delete it and we will remove the account, your progress, your notes and your answers. Two things outlive it deliberately: the record that an administrator signed in as somebody, which is a safeguard and would be worth nothing if it could be erased by the person it names, and ordinary server logs, which are rotated.

You can also just stop. Leaving a group removes you from its roster and leaves your own record intact.

If you signed in with Facebook, you can ask for this through Facebook itself — remove the app there and it tells us. What happens then depends on whether the account exists only because of Facebook: if it does, it is deleted; if you also have a password, the Facebook connection is removed and the account is left for you. Either way you are given a page saying which, and a code to quote if you want to ask us about it.

An account of one’s own is for people 13 and over. Younger children are welcome to watch the studies with a parent, using the parent’s account.

Passwords are hashed, the site is served over HTTPS, video is delivered through links that expire, and access to the administration screens is limited to the people the district has appointed. No system is perfect, and we will not pretend otherwise; if something goes wrong that affects you, we will tell you.

If this policy changes in a way that matters, the date at the top changes with it and we will say so on the site. The terms of service sit alongside this.