At a glance
Useful insight without intrusive tracking.
This is a demonstration operated by Web Pilot. Please use sample details when trying the contact form or accounts. Demo submissions are stored by Web Pilot and are not sent to St Thomas Church. For questions about information held by this demo, email anthony@webpilot.uk.
This application is built as a privacy-conscious church website. It carries no advertising technology, no third-party analytics, and stores no raw IP address in its analytics database.
Even the typefaces are served from this site rather than a font network, so simply reading a page does not hand your IP address to another company.
Optional first-party analytics
Analytics run only after you choose “Allow analytics”. The site then records the page visited, the time, the referring website’s domain, a broad device category, browser, operating system, language, time zone and screen dimensions. A random visitor identifier and a short-lived session identifier help count visits; neither identifies you by name.
Messages you send
The contact form stores your name, email address, subject, message and submission time so an authorised administrator can respond. Those details are used only for that enquiry and are never added to a marketing list.
Member and administrator accounts
Account data covers the email address used to sign in, a password hash, the account creation time and when the account was last active. Passwords are never stored in readable form. Administrator pages require both authentication and an administrator role.
Automatic retention limits
Analytics records older than 180 days and contact enquiries older than two years are deleted automatically. Operational database backups should follow an equivalent retention policy once the application is deployed.
Your choices
You can decline analytics and still use every public feature of this site. Resetting your choice removes the optional analytics identifiers from this browser and asks again on your next page.
Before a real-world launch
The church or site owner should replace this demonstration notice with its legal identity, a privacy contact, lawful bases, the data-subject request process, and hosting and subprocessor details.
Demonstration notice · updated 28 August 2026