Grace & Goals is a free, non-profit faith page. This policy explains what happens to your information when you visit this page, written in plain language. It applies to visitors in the European Union and European Economic Area (EU/EEA), the United Kingdom and the United States.
In short: this page has no forms, no accounts and no ads. We do not sell your personal information. Optional measurement tools only run if you say yes. When you tap a product, you go to Etsy, and Etsy’s own privacy policy applies there.
This page is operated by TwoTapsStudio, the Etsy shop that makes the planners shown here, based in Portugal. For the EU/UK General Data Protection Regulation (GDPR) we are the “controller” of the limited data described below. Our full company details are available on request at the email below.
Contact for any privacy question or request: [privacy contact email].
| What | Why | Legal basis (EU/UK) | How long |
|---|---|---|---|
| Technical data your browser sends when the page loads (IP address, browser type, date and time, page requested) | To deliver the page securely and protect it against abuse. Recorded in our hosting provider’s server logs. | Legitimate interest (Art. 6(1)(f) GDPR) in running a secure website | Kept by the host for a short period, normally no more than 30 days, unless needed to investigate an attack |
| Your device choice (e.g. “iPad”) and your cookie choice, stored in your own browser | So the page remembers what you picked and does not ask again | Strictly necessary for the service you asked for; your consent choice itself is a legal obligation | Until you clear your browser storage; you can change your cookie choice at any time |
| Optional: anonymous visit and click statistics (only if you accept “Analytics”) | To learn which verses and resources help people most | Your consent (Art. 6(1)(a) GDPR) | No longer than 14 months |
| Optional: your visit and whether you tap a product button (only if you accept “Marketing”) | Meta Pixel (Meta Platforms Ireland Ltd.) to measure our ads and show our posts again on Instagram and Facebook to people who visited; Google Ads tag (Google Ireland Ltd.) to measure ad results only, without building remarketing lists | Your explicit consent (Art. 6(1)(a) and, because a visit to a faith page may reveal religious interest, Art. 9(2)(a) GDPR) | Meta audiences: up to 180 days. Google: as set by Google, see its policy |
No analytics tool is installed today. The Meta Pixel and Google Ads tag only load after you accept “Marketing”; if you reject it, nothing is sent to Meta or Google. You can withdraw your consent at any time in “Cookie settings”.
We do not collect names, emails, payment details or any special categories of data on this page. We do not make automated decisions about you.
Without your consent, this page sets no advertising cookies and only uses your browser’s local storage to work. With your consent to “Marketing”, Meta and Google set the cookies listed below.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| gg-device | Strictly necessary (local storage) | Remembers the device you selected | Until cleared |
| _fbp, fr (Meta), _gcl_au and Google Ads cookies | Marketing, only with consent | Measure ad results; Meta may also show our posts again to visitors | Up to 90 days (Meta _fbp), up to 90 days (Google _gcl_au) |
| gg-consent | Strictly necessary (local storage) | Remembers your cookie choice and when you made it | Until cleared; we ask again if this policy changes in a meaningful way |
Fonts and images are served from our own server, so loading this page does not send your data to Google or other font services.
Product buttons take you to Etsy, where purchases are made from TwoTapsStudio. Links to Instagram and Facebook take you to Meta’s platforms. These are separate services with their own privacy policies: Etsy Privacy Policy and Meta Privacy Policy. We do not receive your payment details from Etsy.
Only our hosting provider, acting on our behalf under a data processing agreement, and, if you consent, Meta Platforms Ireland Ltd. and Google Ireland Ltd., as described in section 2. See the Meta Privacy Policy and Google Privacy Policy. We do not sell personal information and we do not share it for cross-context behavioural advertising without your consent.
Some providers may process data outside the EU/EEA. When that happens we rely on an adequacy decision (such as the EU-U.S. Data Privacy Framework) or the European Commission’s Standard Contractual Clauses.
You have the right to access your data, correct it, have it erased, restrict or object to its use, and receive it in a portable format. Where we rely on consent, you can withdraw it at any time through “Cookie settings”, without affecting what happened before. To use any right, write to [privacy contact email]. We answer within one month.
You may also complain to a data protection authority. In Portugal this is the Comissão Nacional de Proteção de Dados (cnpd.pt); you can also contact the authority where you live or work. In the UK it is the Information Commissioner’s Office (ico.org.uk).
Depending on your state (for example California, Colorado, Connecticut, Virginia, Texas and others with consumer privacy laws), you may have the right to know what personal information we process, to access, correct or delete it, and to opt out of the sale or sharing of your personal information, targeted advertising and profiling.
We do not sell personal information for money. If you accept “Marketing”, data about your visit is shared with Meta and Google for ad measurement and, for Meta, to show our posts again to visitors. Some state laws treat this as “sale” or “sharing” for targeted advertising, and visits to a faith page may count as sensitive information. You can opt out at any time:
We honour the Global Privacy Control (GPC) signal: if your browser sends it, marketing stays switched off automatically.
To make a request, email [privacy contact email]. We will verify the request in a reasonable way, answer within 45 days, and will not treat you differently for using your rights. You may use an authorised agent. If we decline a request, you can appeal by replying to our answer.
Identifiers and internet activity (IP address, browser data, pages viewed), collected for security and, only with consent, for analytics and measurement. Retention is described in section 2. Visiting a faith page may be treated as sensitive information about religious belief; it is only shared with Meta and Google if you accept “Marketing”, and you can limit or stop this at any time.
This page is meant for adults. We do not knowingly collect personal information from children under 13 (or under 16 in the EU/EEA). If you believe a child has sent us information, contact us and we will delete it.
Direct donations are not open yet. When they are, payments will be handled by the payment provider you choose (such as a card processor or PayPal), and this policy will be updated before the donation buttons go live.
If we change this policy, we will update the date at the top. If a change affects how we use your data, we will ask for your consent again where the law requires it.