— Updated 2026-10-16

Privacy Policy

Plain English. What we collect, why, what we don't, and how to be removed. We are a Catholic men's formation brand, not a data broker. We treat your information the way we'd want ours treated.

Who we are

1765 Sanctum Co. is a brand operated under 1765 Apparel Co LLC, a Georgia-registered limited liability company. We publish a Catholic-formation YouTube channel, a weekly newsletter (The Sanctum Dispatch), and a collection of free Catholic tools. Contact: Editorial Standards · will@1765sanctum.com.

What we collect — and why

1. Email address (when you subscribe to the Dispatch)

Voluntary. You give us an email address so we can deliver the weekly Sunday Dispatch newsletter + the free Daily Examen card we promised. Email service handled by Beehiiv on our behalf. We do not sell, rent, lease, or otherwise share your email with third parties. You can unsubscribe from any Dispatch with the link at the bottom of every email — your address is then deleted from our list within 7 days.

2. Anonymous browsing analytics

Until 2026-10-07 we also used the Meta Pixel and Meta's Conversions API, to measure whether people who clicked one of our ads subscribed to the Dispatch. We run no ads, so on 2026-10-07 we removed both from this site. What they sent to Meta before that date is held by Meta under its own privacy policy.

We count page views on our public website with Metricool, the same service we use to schedule our social posts. Its counter uses no cookies, stores nothing on your device, and gives you no identifier; your browser connects to Metricool's server, which sees your IP address for the length of that connection (as any web server does) and, by Metricool's own account, does not store it. What we see is a tally: visits, pages viewed, and country. This paragraph was missing from this policy until 2026-09-20; the counter was running before then, and it should have been named here.

We also keep two tallies of our own, in the app and on this site. The first: how many times each tool is opened, per month, and, since 2026-10-16, how many minutes it stays open on screen that week — paused while the app or tab is in the background, so idle time never counts. The second, since 2026-09-28: how many phones open the app each day, week and month; how many of them are opening it for the first time; how many come back a week and a month after their first day; and how many days of the 30-day program are checked off. To know whether it has already been counted, your phone keeps a few dates in its own storage and sends us only "count one more". Both tallies are numbers — no name, no account, no cookie, no device identifier.

We also use Cloudflare as our website host and CDN, which produces standard server logs (IP address, request path, user agent, timestamp). Cloudflare logs are retained per their privacy policy and are not used by us for marketing. Cloudflare also adds its Web Analytics beacon to our public pages to measure page loads and speed; by Cloudflare's account it uses no cookies or local storage and does not fingerprint visitors by IP address or user agent. Like Metricool's counter, it is refused inside the app and on the sacred tools (see section 4).

Since 2026-10-02 we also use Google Analytics 4 on our public pages, to learn how people find us: which searches, websites and AI assistants send visitors, and which pages they read. Unlike the two counters above, it sets first-party cookies on your browser (their names begin with _ga) that hold a random ID, so a return visit counts as a return and not as a new visitor. Google states that Google Analytics 4 does not log or store IP addresses. Our tag switches off Google signals and ad-personalization signals. Like Metricool's counter, it is refused inside the app and on the sacred tools (see section 4). To opt out, use any tracker blocker, or Google's opt-out browser add-on.

3. Anonymous local-storage state on interactive tools

Some tools (the Examination of Conscience, the Visual Rosary) store your progress in your browser's local storage so the tool remembers where you are between sessions. If you are not signed in, this data never leaves your browser. If you are signed in, the tool's progress markers sync to your member record with our host (Cloudflare) so they follow you across devices: for the Examination of Conscience, the dates you examined, your streak, and the date you last went to confession; for the Visual Rosary, the dates you prayed it. The sins you tap in the Examination are never among them. They are held in memory for that sitting only, never written to your browser and never sent to us. Clearing your browser's site data deletes the local copy; Delete Your Data removes the synced one.

4. The Sanctum app — your account and Family Altar

The Sanctum app (the Brotherhood Pass companion and the free tools inside it) is where we hold the most about you — always because you typed it in to make the app serve your family, never to sell or share.

Your account. To sign in you give us an email address and we send a one-time sign-in link; you may also set an optional password for faster sign-in next time. Link delivery is handled by Resend on our behalf. We store your email, your sign-in sessions, an optional password (kept only as a salted hash — never in plain text), and — if you hold a Brotherhood Pass — your membership status.

Signing in with a 6-digit code. Instead of a link, we can email you a 6-digit code to type in. We never store the code itself: what we keep is a one-way hash of it, salted with your own email address, for 10 minutes, after which it is gone whether you used it or not. A wrong guess is counted and the code is burned after a few of them. The hash is worthless to anyone who reads it — it cannot be turned back into the code, and salting it with your address means it cannot be reused against any other account.

Deleting your account yourself. You can erase your account without asking us, in the app (Profile → Delete account) or on your account page. We email a 6-digit deletion code to your own address — the same 10-minute window, the same hashing — and nothing is deleted until you enter it. When the deletion runs we keep exactly one record of it: a marker filed under a one-way hash of your email address, holding the date it happened, that it came through the self-service door, and a count of the records removed. It cannot be turned back into your email. It is kept for two reasons only: a device still holding a session is refused from that moment, and we can show the deletion was carried out. Everything the deletion destroys and everything that outlives it is listed on Delete Your Data.

Your Family Altar. If you choose to set it up, the app stores the household details you enter so it can speak to your family by name: your wife's first name; each child's first name, age, and baptismal saint; the dates of your children's sacraments (Baptism, First Reconciliation, First Communion, Confirmation); and, in the Three-Generation Map, a fault you choose to name and break, a daily discipline against it, and the patron saints of your father, yourself, and your sons. This lives on your member record with our host (Cloudflare), so it follows you across devices when you sign in. We never sell it, share it, or use it for advertising. You can change or clear any of it in the app, or email us to delete your whole record.

The Confession Vault is different — it never reaches us. Anything you write in the Confession Vault is encrypted on your own device (AES-GCM, under a PIN only you know) and is never transmitted to us or to anyone else. We cannot read it, recover it, or be compelled to hand it over, because we never receive it. If you clear the app's data or forget your PIN, those notes are gone — by design. When you mark that you have been to confession, the notes are wiped. When you prepare for confession, the Examination of Conscience can lay those notes on your confession card: they are decrypted on your own device, for that sitting only, and the card keeps no copy. The one related thing kept outside the vault is the date of your last confession. Since 2026-09-20 it is one date, shared by the Confession Vault, the Examination of Conscience and Fight Club, so marking it in one place corrects the others. If you are not signed in, it stays in your browser. If you are signed in, the date syncs to your member record so every tool, on every device you use, can tell you it has been a month. (Before that day the Vault's copy of the date never left the device.) The date only. Never what you confessed.

Your tools and your night examen. The tools inside the app — the 30 Days, the night examen, the Rule of Life, the Scriptorium, the Prayer Log, the Rosary, the consecrations, Souls, Fight Club, The Watch, The Hearth, The Campaign, The Catechist, The Muster, Priest of the Home — remember what you enter: the days you kept, your streaks, your dates, the names you pray for, and the lines you write (in the night examen, a grace, a fault and a resolve; in the Prayer Log, the prayers you log and any note you add). The Prayer Log's share card is made on your phone and goes nowhere unless you tap Share; it carries the number of days and a verse, never your notes. That lives on your device and, when you are signed in, on your member record with our host, so a lost phone does not cost you a year of work. We do not read it for any purpose but running the tool for you; it is never sold, shared, or used for advertising; and Delete Your Data removes it. If there is something you want to write down that must never leave your phone, the Confession Vault is the place for it. Since 29 September 2026 the night examen can send a line straight there: when you turn on “Keep this for my next confession” (or, after a fall, “Add this to my confession list”), the words are encrypted into the Vault on your phone and the examen record that syncs keeps only the fact that you put one there — not the words.

The 30 Days, and doing them with others. The 30 Days remembers the day you started and which days you kept, like the tools above. If you ask for the days by email as well, we add your own account's address to the Dispatch's 30-day program with our newsletter service, beehiiv — we never add an address you typed for someone else, and if you once unsubscribed we do not add you again. If you start or join a group, the others in it see only what you picked from our lists — who you are to them (husband, wife, father, son, brother or friend) and a mark such as a cross or a shield — which of the 30 days you kept, and how many of them prayed for you today. They never see your name, your email, or anything you write, and nothing you type is shown to them. The group's record holds no address. You can leave a group at any time, the person who started it can remove someone, and deleting your account removes you from it.

Payments. Brotherhood Pass billing is handled by Stripe. We never see or store your card number — Stripe does, under its own terms.

No tracking inside the app. The app does not run the Meta Pixel, Metricool, or any other outside analytics or advertising script. That includes the website tools the app opens inside itself: for those pages our server tells your device to refuse every script that is not our own. The outside analytics described above apply to our public website, not to the app; inside the app we keep only the two tallies of our own named above.

No tracking on the sacred tools. We do not load the Meta Pixel, Metricool, or any other outside analytics or advertising script on the pages where a man examines his conscience, sits at a deathbed, walks an annulment, or fights for chastity — the Examination of Conscience, Vigil, Navigating Annulments, and Fight Club. Some things are between a man and God; we will not meter them for an ad platform.

5. What we don't collect

We do not collect: card or bank numbers (Stripe handles payment data, not us), government identifiers, health information, biometric or facial data, location beyond what's inferred from a normal IP-address request, or anything in voluntary correspondence beyond what you choose to write to us.

Children's privacy

1765 Sanctum is written for and aimed at adult Catholic men, and the app is meant to be used by a father, not by a child. We do not knowingly let anyone under 13 create an account or subscribe.

The app does let a father record details about his own children — their first names, ages, baptismal saints, and sacrament dates — so it can remind him of the milestones ahead and help him lead his family in prayer. This information is provided by the parent, is used only to personalize that father's own experience, is never used to contact or profile a child, is never sold or shared, and can be deleted at any time in the app. If you are a parent and want your child's details — or your whole account — removed, email will@1765sanctum.com and we'll delete it within 7 days.

Your rights

Where we operate

1765 Sanctum Co. is a US-based brand serving a US-targeted audience. We do not target users in the EU, UK, or California for advertising purposes. We don't currently offer a region-specific consent banner because we don't market in those regions; if our operating reach expands we'll add one.

Changes

We'll update this page when our data practices change. Material changes will be announced in the Dispatch. The "Updated" date at the top is the source of truth.

Contact

Questions, requests, complaints: will@1765sanctum.com.

Altar. Arms. Allegiance.