Sermon Registry is operated by Misppelled Ltd (“Misppelled”, “we”, “us”, “our”), a company registered in England and Wales under company number 17447906. Misppelled Ltd is the data controller responsible for personal data processed through the Sermon Registry service. Sermon Registry is a trading name of Misppelled Ltd, not a separate company.

Our registered office is shown on the legal information page. Privacy enquiries and requests about your data can be sent to [email protected]. We have not appointed a Data Protection Officer, as we are not required to.

We collect information submitted through the authenticated sermon importer, church listing, church correction and sermon report forms. A sermon submission privately records the submitting account's opaque user ID in the sermon's source metadata; that ID is available to administrators for provenance and is not displayed publicly or copied onto the church profile. A member may separately store a private discovery profile containing an intended use, up to three topics, a language, format, time preference and optional public church identifier. If private progress is explicitly enabled, we also store bounded reading or playback progress and completion timestamps. If you explicitly choose email updates, Resend stores your confirmed account email address, independently chosen email categories, and any church, denomination, sermon topic, language or location preferences you provide.

Under the UK GDPR we must have a lawful basis for each thing we do with personal data. Ours are:

• Contract — creating and running your member or church-administrator account, storing My Library and your saved items, and sending the transactional emails the account depends on.
• Consent — analytics cookies, newsletter categories and preferences, and optional private progress tracking. Each is off until you switch it on, and you can withdraw at any time without affecting anything we did before you withdrew.
• Legitimate interests — keeping the service secure and free from automated abuse, monitoring errors and availability, maintaining the public directory, and contacting churches about their listing. We balance these against your rights, and you can object at any time.
• Legal obligation — keeping unsubscribe and suppression evidence so we can show that an opt-out was honoured.

When a signed-in member submits a public YouTube sermon URL through My Library, the URL and importer-generated sermon data are stored in the directory database. The same source, content, duplicate, caption and transcription checks used by the administrative YouTube importer run once before editorial review. Approved sermon content is published publicly and may be indexed by search engines; the submitting user ID remains private. Submissions may be corrected, rejected or removed during review.

Published sermon entries and church listings are publicly accessible. Preacher names, church names, scripture references, tags, and other metadata included in published entries are visible to visitors and may be indexed by third-party search engines.

Railway application logs and Better Stack availability checks are used to operate and monitor the service. Google Analytics 4 measures traffic and acquisition; PostHog EU Cloud measures product funnels, feature use, member adoption, content popularity and engagement. Both services are disabled on staging and remain off on production unless you explicitly accept analytics cookies. PostHog product events are retained for up to 12 months. Cookie names, providers and durations are set out in full in the Cookie Policy, and your choice can be changed at any time through Cookie settings in the footer.

GA4 and PostHog receive sanitized, query-free route paths. On public sermon or church pages, PostHog also receives the public slug, internal database ID and content type for views, result opens and engagement. Consenting signed-in members are associated in PostHog only with their opaque Supabase account UUID and coarse account, library and newsletter status; administrators are associated only with that UUID and coarse role/status. Finder events record only step completion, outcome and a bucketed result count. Member events record coarse signup, login, verification, activation, section use, save/remove, completion, onboarding, preference-setting, newsletter and deletion outcomes. A save or completion action performed on a public detail page may carry that page’s public sermon or church identifiers. Neither analytics service receives finder answers, raw searches, query strings, hashes, separate sermon-title or church-name fields, scripture or topic values, preacher or denomination data, progress, sermon history, newsletter selections, form contents, email addresses, personal names, IP addresses or error text. PostHog IP capture, autocapture, session replay, heatmaps, surveys, exception capture and performance capture are disabled. PostHog traffic passes through relay.sermonregistry.com but is processed by PostHog as our analytics processor. When a search returns no results, we separately record only an anonymous keyed fingerprint, broad length and filter categories, and an aggregate count for up to 90 days; we do not store the search words, IP address, account, browser details, cookies, or result identifiers.

If you explicitly use natural-language search or the optional text field in Find a Sermon, the words you enter are sent to Anthropic solely to interpret them as bounded archive filters. Sermon records, candidate results and transcripts are not sent for this purpose, and the model does not choose or rank results. Structured quiz choices and standard keyword or filter search do not use Anthropic. The optional text is not stored in a member discovery profile.

Cloudflare Turnstile may be used on submission and authentication forms to distinguish legitimate use from automated abuse. Upstash Redis may be used for rate limiting. Client network addresses are validated and converted to a one-way, keyed value before rate-limit storage; raw addresses and challenge tokens are not included in application logs. Security checks may temporarily prevent a submission when we cannot verify it safely.

Sentry is used for application error and performance monitoring. Request bodies, transcripts, form values, email addresses, cookies, authorisation headers, challenge tokens, and IP-related headers are removed before events are sent. Better Stack checks only public pages and health endpoints. Session replay is not used.

Member and administrative identities are managed through Supabase. A member can explicitly activate My Library to keep saved sermons, completed sermons and saved churches across devices. A private discovery profile ranks recommendations from the choices the member directly saves. Saved items and partial progress do not influence the order; completed sermon IDs are used only to exclude sermons the member has already finished. Private progress is disabled by default and, when explicitly enabled, supports resume controls and member-owned insights. These records are not public, shared with churches, or automatically added to newsletters. If analytics consent is granted, PostHog records only coarse feature outcomes and does not receive discovery choices, private progress, sermon history, newsletter selections or their timestamps. Members can turn progress tracking off, clear activity while retaining saved items, or delete the entire account. Church-management information remains separately collected and administered through the Church Admin account type.

Resend delivers necessary transactional messages through Supabase custom SMTP and the Resend API, including signup verification, password recovery, church-management requests and decisions, sermon moderation outcomes, contextual church corrections and sermon reports, material church-profile changes, and failed YouTube imports. Resend processes the recipient address and limited message content to deliver these emails. Correction and report details are emailed to an approved church administrator when available, otherwise to one of our superadministrators. Church-connection explanations, sermon transcripts and raw processing errors are not included. Transactional recipients are never automatically enrolled in newsletters or added as marketing Contacts. Click/open tracking is disabled.

We maintain an internal outreach workspace for contacting churches about the directory and inviting an authorised representative to claim or improve a church profile. This is not the newsletter system: outreach history and suppression choices are kept in separate records, and a church contact is not enrolled in newsletter categories merely because outreach has taken place.

• Where the data comes from — the contact details we hold are collected from the church’s own publicly available website, listing or published directory entry. We do not buy contact lists.
• What we hold — the church name, a public contact address, the outreach messages sent, and whether the contact asked us to stop.
• Why we may do this — our legitimate interest in building an accurate public record of preaching and in giving churches control of their own listing. We have weighed this against the recipient’s interests and limited the contact accordingly.
• Your right to object — you can tell us to stop at any time, by using the unsubscribe option in the message or by emailing [email protected]. We will stop and keep a minimal suppression record so the request is not undone by a later import. You can also ask us to correct or delete the contact details we hold.

The newsletter is currently a waiting list rather than an active campaign. Resend is the sole newsletter record. A member's confirmed account address is added as a Resend Contact only when the member explicitly saves at least one email category in My Library Preferences. Product updates and the future Sermon digest are independent Resend Topics; optional church, denomination, sermon-topic, language and location choices are Contact properties. These are explicit selections and are not inferred from private library activity. Members can change their choices or unsubscribe from everything in My Library Preferences, while email unsubscribe links remain available without signing in. Church-administrator and member newsletter audiences remain separate Resend Segments. Open and click tracking are disabled. No newsletter or marketing campaign is currently sent by this system.

Sermon Registry links to and embeds content from external platforms such as YouTube, MapTiler, and church websites. Loading or following this content may connect your browser to those providers, which operate under their own privacy policies. We do not control the content or data practices of external sites.

Published directory records are retained while they remain useful to the archive. Private library, preference and progress state is retained until the member clears the relevant record or deletes the account. Find a Sermon keeps structured choices in the visitor's browser for no more than seven days so they can choose whether to import them after signup; the optional free-text answer is excluded. Deleting an ordinary member account removes its Supabase identity and private member state and globally unsubscribes its email address from newsletter categories. Provider suppression and unsubscribe evidence may be retained by Resend in accordance with its service and retention practices. Consent-gated PostHog product events are retained for up to 12 months. Anonymous no-result search statistics are kept for up to 90 days.

Several of our service providers process data outside the UK, mainly in the United States. Where that happens, the transfer is made under Article 46 of the UK GDPR, relying on the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses as incorporated into each provider's terms, together with the additional safeguards those providers apply. Providers that may process data outside the UK include Google (Analytics), Anthropic, Sentry, Resend, Upstash, Railway and Cloudflare. PostHog is used on its EU Cloud infrastructure.

You have the right to ask us for a copy of the personal data we hold about you; to have inaccurate data corrected; to have data erased; to restrict or object to how we use it, including any use based on legitimate interests; to receive data you gave us in a portable format; and to withdraw consent at any time where we rely on it. Where the data relates to your account, most of these can be exercised directly in My Library Preferences, which lets you change your choices, clear activity, or delete the account outright.

For anything else, email [email protected] and tell us what you would like. We will respond within one month. Exercising these rights is free, and we will not treat you differently for doing so.

If you are unhappy with how we have handled your personal data, please contact us first at [email protected] so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority, at ico.org.uk or on 0303 123 1113. Complaining to the ICO does not affect any other rights you have.

This is separate from your rights over your own account data above. If you believe information published in the directory is inaccurate or should be removed, use the contextual correction or report action on the relevant church or sermon page. You may also email [email protected] with details of the entry and the nature of your request.

This privacy notice may be updated as the service develops. Significant changes will be reflected on this page and, where they materially affect you, brought to your attention. Last updated: 9 September 2026.

For privacy-related enquiries, email [email protected]. Misppelled Ltd’s registered details and formal notice address are on the legal information page. See also the contact page.