Privacy policy

This policy covers the Church Game Kit portal operated by Beverly B. Goodwin LLC, operating under the Kingdom Media Universe brand. Mailing address: 6305 Ivy Lane #265, Greenbelt, MD 20770. Privacy questions: support@kingdommediauniverse.com.

• Purchase details: purchase email, church name, membership tier and order history.
• Payment references from Stripe: checkout and payment identifiers, amounts, tax, billing address details Stripe returns for tax, and payment, refund and dispute status. We do not receive your full card number.
• Redemption details: church name, the leader's contact email and the version of the terms accepted.
• Email verification codes sent to confirm an email address.
• Session records: license sign-ins, leader sessions and recent activity times, used for seat limits and the 120-minute inactivity sign-out.
• Email records from Postmark: message identifiers and delivery, bounce and spam-complaint records for the emails we send you.
• Short-lived IP address records kept by our application for about 10 minutes to limit repeated failed attempts.
• Refund requests and support messages you send us.

Separately, our hosting and network providers keep their own security and access logs, which can include IP addresses, under their own policies.

Our own essential cookies keep leaders signed in and protect forms; they expire after up to 7 days.

Our hosting provider, Emergent, runs a first-party traffic dashboard for the platform. It sets two cookies: __emg_vid, which lasts 12 months, and __emg_sid, which lasts 30 minutes. Both are HttpOnly and Secure, so page scripts can't read them and they are sent only over encrypted connections. A per-portal opt-out is not currently available.

Our network provider, Cloudflare, may set technical bot-management cookies used to detect automated traffic and protect the portal.

A check of the live portal on November 1, 2026 found no analytics or session-recording scripts and no Cloudflare analytics beacon. We do not use advertising cookies. Our providers' scripts and cookies can change over time; we will update this policy when we learn of a material change.

To deliver and recover license codes, verify email addresses, enforce leader-seat limits, provide support, handle refunds, prevent misuse and keep business and tax records. We do not sell your information.

We share only what each provider needs to do its job: Emergent (managed hosting, database and file storage, which it runs on third-party cloud, database and network providers), Cloudflare (network delivery and security), Stripe (card payments and tax calculation), Postmark (transactional email, including delivery, bounce and complaint records) and Google Fonts (font files for the portal pages, which receive your browser's IP address).

According to Emergent, this portal's backend and its MongoDB Atlas database run on Amazon Web Services in the US West (Oregon) region, and its pages are delivered through Cloudflare's global network. Emergent's Data Processing Agreement lists the United States, the European Union and India as locations where Emergent processes data. We have not been given confirmed locations for private game files, backups or logs.

We keep records only as long as needed for the purposes below. We review records once a month: records that have passed their period are deleted or anonymized at the next monthly review, so a record may remain for up to about one month after its period ends. Deletion is not automatic.

• Transaction and terms evidence (orders, payment references, tax amounts, licenses, terms accepted, refund decisions): 7 years after the license's last term ends, as evidence of the sale, the agreement and tax records.
• Church contact details: while the license is active, then with the transaction evidence; contacts can be replaced on request.
• Verification codes: 30 days; each code works for only 10 minutes, and records are kept briefly to investigate misuse.
• Session and activity records: 90 days after last activity, for seat-limit and support questions.
• Email contents and delivery records in our system: 2 years, to show a license email was sent and to fix delivery problems.
• Support and refund-request message text: 2 years after the request is resolved.
• Free Christmas claim records: for the promotion period plus 2 years, to enforce one claim per church and email.
• Records held by providers (for example Stripe payment records, Postmark message logs and suppression lists, and hosting backups) follow those providers' own retention. Our hosting provider backs up the portal database on its managed schedule; those backups do not cover game files, which we back up separately.

We keep a record past its period only when it is needed for an open dispute, chargeback, refund review, tax or legal inquiry, or a legal hold, or to keep a suppression list so we do not email an address that asked us to stop. Once that matter ends, the record goes back into the monthly review.

This schedule is our own business schedule. It is separate from the period our hosting provider, Emergent, states for deleting or anonymizing data after a hosting account is deleted.

Registration and purchasing are intended for authorized adult church leaders. Children may take part in games hosted by a leader, without individual accounts, and we do not ask for their personal details.

Requests are handled manually: email support@kingdommediauniverse.com to ask for a copy of your information, a correction or deletion.

Before changing or deleting church information, we verify your identity and your authority to act for the organization, usually with a code sent to the email address on file. If that email is no longer available, we use another check, such as confirming purchase details and contacting the church's purchasing contact. Having a shared license code is not enough on its own.

A request from one leader covers that leader's own details and does not cancel the church's access. Closing a church's license is a separate request from an authorized contact. If a contact person changes, we can replace the contact email instead of deleting the record.

We respond within 45 days, or sooner where applicable law requires. If the law permits an extension and we need one, we will tell you before the deadline, explaining why and how much longer it will take. We may keep records needed as evidence of purchases, refunds, tax and the terms accepted. Email providers keep suppression records of bounced and complaining addresses so mail is not sent to them again. Copies in backups are removed only as those backups expire.

We may update this policy. The effective date above shows the current version.