Cookie Policy — Ministrium
Last updated: October 14, 2026 · Version: 1.0
This Cookie Policy explains how Judah Creative Agency LLC, which operates the Ministrium brand ("Ministrium", "we"), uses cookies and similar technologies on ministrium.com and app.ministrium.com (the "Site" and the "Platform"). It supplements our Privacy Policy (https://ministrium.com/privacy).
1. What are cookies and similar technologies?
Cookies are small files a website stores in your browser. "Similar technologies" include browser storage (localStorage/sessionStorage), pixels, tags, and server-to-server transmissions such as Meta Conversions API. In this Policy we call all of them "cookies."
- First-party: set by Ministrium.
- Third-party: set by another provider (for example, Google or Meta) when its code loads on our Site.
- Session: deleted when you close your browser. Persistent: last until they expire or you delete them.
2. Categories we use
| Category | Purpose | Requires your consent? |
|---|---|---|
| Strictly necessary | Signing in, keeping your session secure, preventing fraud and abuse, remembering your cookie and language preferences, processing payments. | No. The Site or Platform cannot work without them. |
| Functionality | Optional features such as IP-based country detection (ipapi.co) on Site forms. | Yes, in the Site preference manager. |
| Analytics | Understanding how many people visit the Site, which pages they use, and how to improve it (GTM / Google Analytics). | Yes. Only active if you accept "Analytics." |
| Marketing and advertising | Measuring the effectiveness of our ads. Includes Meta Pixel and Meta Conversions API (CAPI). | Yes. On the Site, Meta Pixel loads only if you accept "Analytics" (the current manager groups measurement and marketing). On the Platform, only with marketing consent and without GPC. |
Meta Pixel and Conversions API. Only with your consent, and never if your browser sends a Global Privacy Control signal, we use Meta Pixel and Meta Conversions API to measure our ads. When you visit the Site or start a trial or subscription, we may send Meta your email (and phone, if provided) in hashed form, your IP address, browser information, and the event type. We never send Meta any member, donor, child, or other church CRM data. Under California and other state laws, this may be considered "sharing" personal information for cross-context behavioral advertising or "targeted advertising."
Inside the Platform (app.ministrium.com) we use strictly necessary cookies and storage for session and security, plus error monitoring (Sentry) that sends traces to the server. GTM and marketing tags load only on public routes (for example home, login, register, start-trial, welcome) after your consent and never with GPC. We do not use marketing cookies on churches' giving pages, forms, or kiosks.
3. Global Privacy Control (GPC) and "Do Not Sell or Share"
We honor the Global Privacy Control (GPC) signal. If your browser or extension sends it, we treat it as a request to opt out of "sale," "sharing," and targeted advertising: we do not turn on marketing cookies or send Meta Conversions API events from that browser, even if you previously accepted. The Site reads navigator.globalPrivacyControl; the Platform does so in the client and, on the server, does not call CAPI without consent or when GPC is present (Sec-GPC).
You can also use the "Do Not Sell or Share My Personal Information" link in the Site footer, which opens the preference manager with analytics/marketing turned off.
4. How to change your preferences
- Cookie manager: click "Cookie Preferences" in the footer of any Site page to accept, decline, or change each category. You can withdraw consent at any time; the change applies from then on.
- Your browser: you can block or delete cookies and local storage in your browser settings. If you clear storage, your choice is deleted too and we will ask again.
- Provider tools: Google offers a Google Analytics opt-out add-on (tools.google.com/dlpage/gaoptout), and Meta lets you manage ads in your Meta account settings.
- Declining analytics or marketing cookies does not affect your access to the Site or the Platform.
We store your choice in localStorage until you change it, clear it, or we update the consent categories (storage version).
5. List of cookies and providers
This list reflects what was verified in the Site code and the published Platform client as of the last update. Third-party cookie names and durations are set by each provider and may change.
| Provider / tool | Category | Purpose | Cookie(s) or storage | Duration | Where |
|---|---|---|---|---|---|
| Ministrium (Platform auth) | Strictly necessary | Keep you signed in on the Platform (account token and context in the browser). | localStorage: luzia_token, luzia_user, luzia_active_context | Until you sign out or clear site storage | app.ministrium.com |
| Ministrium (kiosk session) | Strictly necessary | Kids check-in kiosk session on the Platform. | sessionStorage: ministrium_kiosk_token, ministrium_kiosk_session | Up to 12 hours or until the tab closes | app.ministrium.com |
| Ministrium (consent manager — Site) | Strictly necessary | Remember your cookie preferences and honor the GPC signal on the Site. | localStorage: ministrium_cookie_consent_v1 | Until you change preferences or clear storage | ministrium.com |
| Ministrium (consent manager — Platform) | Strictly necessary | Remember your consent decision (accept/reject) on public Platform routes. | localStorage: ministrium_consent_v1 | Until you change preferences or clear storage | app.ministrium.com |
| Ministrium (language) | Strictly necessary | Remember ES/EN on the Site and Platform. | localStorage: ministrium-lang (Site); app-language (Platform) | Until you change it or clear storage | ministrium.com / app.ministrium.com |
| Ministrium (theme) | Strictly necessary | Light/dark theme preference. | localStorage: ministrium-theme (Site); ministrium-theme-v2 (Platform) | Until you change it or clear storage | ministrium.com / app.ministrium.com |
| Stripe | Strictly necessary | Process payments and prevent checkout fraud on the Platform (PCI-DSS Level 1). Ministrium does not store card data. | __stripe_mid, __stripe_sid (checkout; js.stripe.com) | Up to 1 year / ~30 min (sid) | Payment pages (app.ministrium.com) |
| Google reCAPTCHA | Strictly necessary (security) | Protect Site forms against spam and automated abuse. | _GRECAPTCHA | Up to 6 months | Site forms |
| ipapi.co | Functionality | Detect your country to preselect the phone dial code. No cookies; the browser sends your IP to ipapi.co. | None (HTTPS GET /json) | — | Site forms (with functionality consent) |
| Google Tag Manager | Analytics / Marketing | Manage measurement tags. Container GTM-K4DJJHWB; loads only with analytics consent and without GPC. | Cookies/tags injected by the GTM container (e.g. _ga) | Per each tag in the container | ministrium.com; app.ministrium.com (public routes with consent) |
| Google Analytics | Analytics | Site and public Platform usage statistics, via GTM. | _ga, _ga_*, _gid (typical GA via GTM) | Up to 2 years (per Google configuration) | ministrium.com / app.ministrium.com |
| Meta Pixel | Marketing | Measure ads and conversions (trial/demo/subscription). Never sends church CRM data. On the Site it loads only with analytics consent and without GPC. | fbevents.js; _fbp (Site pixel IDs: 943174551516062, 2456557661525614) | Up to ~90 days (_fbp) | ministrium.com (/demo, /webinar and EN equivalents) |
| Meta Conversions API | Marketing (server-to-server) | Send trial/subscription events from Ministrium's server with hashed email/phone, IP, and browser data, only with marketing consent and without GPC. | No cookie of its own; may use Meta Pixel identifiers when present | — | Ministrium server (app) |
| GoHighLevel / LeadConnector | Functionality / Marketing (chat) | Chat widget on the Site home page (widgets.leadconnectorhq.com). | LeadConnector script (provider cookies not enumerated in our code) | Per provider | ministrium.com (home) |
| Sentry | Strictly necessary (operations) | Error monitoring on the Platform. May receive personal data in error traces (with redaction). | Posts to *.ingest.sentry.io / *.ingest.us.sentry.io (no first-party cookie verified in the client) | Per Sentry retention | app.ministrium.com |
| OpenStreetMap | Functionality | Map tiles on the Platform; the provider receives your IP. | Requests to *.tile.openstreetmap.org (no Ministrium cookie) | — | app.ministrium.com (pages with a map) |
6. Children's data
We do not use analytics or marketing cookies to target children under 13, or in Platform features used by children or their families (for example, kids' check-in / kiosk).
7. Changes
We may update this Policy if the tools we use change. We will post the new version here with its date and, if we add a new category, we will ask for your consent again.
8. Contact
Judah Creative Agency LLC (Ministrium)
275 Interstate North Circle SE, Suite 200 PMB 1017, Atlanta, GA 30339, USA
Email: privacy@ministrium.com
© 2026 Ministrium. See our Privacy Policy for more information.