Catholic Tourist

Privacy policy

Your pilgrimage data should remain yours.

This policy explains how Catholic Tourist handles information when you browse, create an account, save a trip, or submit a destination.

Effective August 25, 2026 · Last updated August 25, 2026

Plain-language summary

  • You can browse the public map without an account.
  • An account stores your email, optional display name, trips, wish list, visited places, and notes so they can sync across devices.
  • Pilgrimage choices may reveal religious interests. We use them only to provide the features you request—not to profile you or target advertising.
  • We use Cloudflare Web Analytics to understand aggregate page traffic and performance. It is not used to build advertising profiles.
  • We do not currently sell personal information or use advertising cookies, marketing pixels, or behavioral advertising.
  • A trip becomes viewable to anyone with its private link only when you turn sharing on. Shared pages include the trip name, dates, trip note, stops, stop notes, and optional display name; private place notes are not included.

Who is responsible

Catholic Tourist is operated by Amabile Media LLC ("Catholic Tourist," "we," "us," or "our"). This policy applies to catholictourist.com and Catholic Tourist account and submission features. Contact us at info@amabilemedia.com.

Information we collect

Account and authentication data

Email address, optional display name, authentication identifiers, confirmation and password-reset events, and session information. Passwords are handled by our authentication provider; Catholic Tourist does not store readable passwords.

Pilgrimage-planning data

Named trips, dates, saved stops, order, wish-list and visited status, trip notes, itinerary notes, and private place notes. These fields are optional and may reveal religious interests or other sensitive information. Please do not enter medical records, payment information, confidential pastoral communications, or another person’s sensitive information.

Submissions and communications

Destination name, location, significance, source link, account identifier if signed in, and anything you include in an email or destination contribution.

Device and service data

Hosting, security, map-tile, and authentication providers may process IP address, browser or device information, request time, requested page, referring page, and diagnostic data needed to deliver and protect the service. If you choose “near me,” the browser supplies your location for that request; Catholic Tourist does not currently store precise location in your account.

How we use information

  • Provide authentication, account sync, trip planning, wish lists, visited history, private notes, and sharing you choose.
  • Review destination suggestions, correct the catalog, prevent abuse, secure the service, diagnose failures, and maintain backups.
  • Respond to requests and comply with legal obligations.
  • Produce aggregate product metrics only when configured in a privacy-preserving way and disclosed here.

Where applicable, we rely on performing the service you request, legitimate interests in operating and securing the site, consent where required, and legal obligations. We do not use saved pilgrimage data to infer beliefs for advertising or to treat users differently.

Service providers and sharing

We disclose only what is reasonably necessary to providers supporting the service, including Supabase for authentication, OpenAI Sites and Cloudflare infrastructure for hosting and database services, Cloudflare Web Analytics for aggregate traffic and performance measurement, and OpenStreetMap tile services for the interactive map. When you open an external official-site or Google Maps link, that provider receives information under its own privacy policy.

We may also disclose information when required by law, to protect users or the service, or in connection with a business reorganization subject to appropriate safeguards. We do not currently sell personal information or share it for cross-context behavioral advertising.

Shared itineraries

Sharing is off by default. When you create a private share link, anyone who receives it can view the shared itinerary until you disable the link. Do not place prayer intentions, health information, names of companions, or other private details in a trip or stop note that you intend to share.

Cookies and browser storage

Catholic Tourist uses browser storage and similar strictly functional technology to keep authentication sessions, remember a device-only itinerary, and return you to the requested page after sign-in. Hosting and security providers may use strictly necessary technology to protect and deliver the site.

Catholic Tourist uses Cloudflare Web Analytics for aggregate page-traffic and performance measurement. Cloudflare states that this service does not use cookies or local storage for usage metrics and does not fingerprint individual visitors. Catholic Tourist does not use advertising cookies, marketing pixels, or cross-site behavioral analytics. If those practices change, this policy and consent controls will be updated before activation where required.

Retention and security

Account and pilgrimage data is kept while the account is active and as reasonably necessary to provide the service. Destination submissions are kept while they are reviewed and, when used, as part of the editorial record. Security logs, backups, and records needed for legal compliance may remain for limited periods after deletion. We use reasonable administrative and technical safeguards, but no internet service can guarantee absolute security.

Your choices and rights

You may browse without an account, keep an itinerary only on your device, turn off a shared link, correct profile and trip information, or request access, correction, export, restriction, objection, or deletion by contacting us. Applicable rights vary by location. Where processing depends on consent, you may withdraw it; withdrawal does not affect earlier lawful processing.

We do not knowingly permit account creation by children under 13. If you believe a child under 13 supplied personal information, contact us so we can investigate and delete it as appropriate.

Changes to this policy

We will post material updates on this page and revise the effective date. If a change materially affects account data, we will provide additional notice when reasonably required.

Contact

Privacy and account requests: info@amabilemedia.com. To protect the account, we may need to verify the requester’s identity before fulfilling a request.