— Updated 2026-09-20

Privacy Policy

Plain English. What we collect, why, what we don't, and how to be removed. We are a Catholic men's formation brand, not a data broker. We treat your information the way we'd want ours treated.

Who we are

1765 Sanctum Co. is a brand operated under 1765 Apparel Co LLC, a Georgia-registered limited liability company. We publish a Catholic-formation YouTube channel, a weekly newsletter (The Sanctum Dispatch), and a collection of free Catholic tools. Contact: Editorial Standards · [email protected].

What we collect — and why

1. Email address (when you subscribe to the Dispatch)

Voluntary. You give us an email address so we can deliver the weekly Sunday Dispatch newsletter + the free Daily Examen card we promised. Email service handled by Beehiiv on our behalf. We do not sell, rent, lease, or otherwise share your email with third parties. You can unsubscribe from any Dispatch with the link at the bottom of every email — your address is then deleted from our list within 7 days.

2. Anonymous browsing analytics

We use the Meta Pixel (Pixel ID 1381971794028114) and Conversions API to measure ad performance — specifically, whether someone who clicked one of our ads actually subscribed to the Dispatch. This lets us optimize ad spend rather than guess.

With Automatic Advanced Matching enabled, the Meta Pixel hashes contact information you voluntarily provide on this site (email if you subscribe) before sending it to Meta for ad-attribution matching. Hashing is one-way — Meta receives a fingerprint, not the underlying value. We chose Advanced Matching because it cuts our ad cost-per-result by approximately 17.8% (Meta's published figure); that's wasted money saved when our budget is small.

We count page views on our public website with Metricool, the same service we use to schedule our social posts. Its counter uses no cookies, stores nothing on your device, and gives you no identifier; your browser connects to Metricool's server, which sees your IP address for the length of that connection (as any web server does) and, by Metricool's own account, does not store it. What we see is a tally: visits, pages viewed, and country. This paragraph was missing from this policy until 2026-09-20; the counter was running before then, and it should have been named here.

We also keep one tally of our own: how many times each tool is opened, per month. It is a number per tool — no name, no account, no cookie.

We also use Cloudflare as our website host and CDN, which produces standard server logs (IP address, request path, user agent, timestamp). Cloudflare logs are retained per their privacy policy and are not used by us for marketing. Cloudflare also adds its Web Analytics beacon to our public pages to measure page loads and speed; by Cloudflare's account it uses no cookies or local storage and does not fingerprint visitors by IP address or user agent. Like Metricool's counter, it is refused inside the app and on the sacred tools (see section 4).

3. Anonymous local-storage state on interactive tools

Some tools (the Examination of Conscience, the Visual Rosary) store your progress in your browser's local storage so the tool remembers where you are between sessions. If you are not signed in, this data never leaves your browser. If you are signed in, the tool's progress markers sync to your member record with our host (Cloudflare) so they follow you across devices: for the Examination of Conscience, the dates you examined, your streak, and the date you last went to confession; for the Visual Rosary, the dates you prayed it. The sins you tap in the Examination are never among them. They are held in memory for that sitting only, never written to your browser and never sent to us. Clearing your browser's site data deletes the local copy; Delete Your Data removes the synced one.

4. The Sanctum app — your account and Family Altar

The Sanctum app (the Brotherhood Pass companion and the free tools inside it) is where we hold the most about you — always because you typed it in to make the app serve your family, never to sell or share.

Your account. To sign in you give us an email address and we send a one-time sign-in link; you may also set an optional password for faster sign-in next time. Link delivery is handled by Resend on our behalf. We store your email, your sign-in sessions, an optional password (kept only as a salted hash — never in plain text), and — if you hold a Brotherhood Pass — your membership status.

Signing in with a 6-digit code. Instead of a link, we can email you a 6-digit code to type in. We never store the code itself: what we keep is a one-way hash of it, salted with your own email address, for 10 minutes, after which it is gone whether you used it or not. A wrong guess is counted and the code is burned after a few of them. The hash is worthless to anyone who reads it — it cannot be turned back into the code, and salting it with your address means it cannot be reused against any other account.

Deleting your account yourself. You can erase your account without asking us, in the app (Profile → Delete account) or on your account page. We email a 6-digit deletion code to your own address — the same 10-minute window, the same hashing — and nothing is deleted until you enter it. When the deletion runs we keep exactly one record of it: a marker filed under a one-way hash of your email address, holding the date it happened, that it came through the self-service door, and a count of the records removed. It cannot be turned back into your email. It is kept for two reasons only: a device still holding a session is refused from that moment, and we can show the deletion was carried out. Everything the deletion destroys and everything that outlives it is listed on Delete Your Data.

Your Family Altar. If you choose to set it up, the app stores the household details you enter so it can speak to your family by name: your wife's first name; each child's first name, age, and baptismal saint; the dates of your children's sacraments (Baptism, First Reconciliation, First Communion, Confirmation); and, in the Three-Generation Map, a fault you choose to name and break, a daily discipline against it, and the patron saints of your father, yourself, and your sons. This lives on your member record with our host (Cloudflare), so it follows you across devices when you sign in. We never sell it, share it, or use it for advertising. You can change or clear any of it in the app, or email us to delete your whole record.

The Confession Vault is different — it never reaches us. Anything you write in the Confession Vault is encrypted on your own device (AES-GCM, under a PIN only you know) and is never transmitted to us or to anyone else. We cannot read it, recover it, or be compelled to hand it over, because we never receive it. If you clear the app's data or forget your PIN, those notes are gone — by design. When you mark that you have been to confession, the notes are wiped. When you prepare for confession, the Examination of Conscience can lay those notes on your confession card: they are decrypted on your own device, for that sitting only, and the card keeps no copy. The one related thing kept outside the vault is the date of your last confession. Since 2026-09-20 it is one date, shared by the Confession Vault, the Examination of Conscience and Fight Club, so marking it in one place corrects the others. If you are not signed in, it stays in your browser. If you are signed in, the date syncs to your member record so every tool, on every device you use, can tell you it has been a month. (Before that day the Vault's copy of the date never left the device.) The date only. Never what you confessed.

Your tools and your night examen. The tools inside the app — the night examen, the Rule of Life, the Scriptorium, the Rosary, the consecrations, Souls, Fight Club, The Watch, The Hearth, The Campaign, The Catechist, The Muster, Priest of the Home — remember what you enter: the days you kept, your streaks, your dates, the names you pray for, and the lines you write (in the night examen, a grace, a fault and a resolve). That lives on your device and, when you are signed in, on your member record with our host, so a lost phone does not cost you a year of work. We do not read it for any purpose but running the tool for you; it is never sold, shared, or used for advertising; and Delete Your Data removes it. If there is something you want to write down that must never leave your phone, the Confession Vault is the place for it.

Payments. Brotherhood Pass billing is handled by Stripe. We never see or store your card number — Stripe does, under its own terms.

No tracking inside the app. The app does not run the Meta Pixel, Metricool, or any other outside analytics or advertising script. That includes the website tools the app opens inside itself: for those pages our server tells your device to refuse every script that is not our own. The analytics described above apply to our public website, not to the app.

No tracking on the sacred tools. We do not load the Meta Pixel, Metricool, or any other outside analytics or advertising script on the pages where a man examines his conscience, sits at a deathbed, walks an annulment, or fights for chastity — the Examination of Conscience, Vigil, Navigating Annulments, and Fight Club. Some things are between a man and God; we will not meter them for an ad platform.

5. What we don't collect

We do not collect: card or bank numbers (Stripe handles payment data, not us), government identifiers, health information, biometric or facial data, location beyond what's inferred from a normal IP-address request, or anything in voluntary correspondence beyond what you choose to write to us.

Children's privacy

1765 Sanctum is written for and aimed at adult Catholic men, and the app is meant to be used by a father, not by a child. We do not knowingly let anyone under 13 create an account or subscribe.

The app does let a father record details about his own children — their first names, ages, baptismal saints, and sacrament dates — so it can remind him of the milestones ahead and help him lead his family in prayer. This information is provided by the parent, is used only to personalize that father's own experience, is never used to contact or profile a child, is never sold or shared, and can be deleted at any time in the app. If you are a parent and want your child's details — or your whole account — removed, email [email protected] and we'll delete it within 7 days.

Your rights

• Access — email us and we'll tell you everything we have on you: your email, subscribe date, and — if you use the app — your account and any Family Altar details you saved. (Your Confession Vault we can't show you, because we never have it.)
• Deletion — if you can sign in, delete the account yourself and we are not involved: in the app under Profile → Delete account, or on your account page. If you cannot sign in, email us and we'll delete it within 7 days. Or click "unsubscribe" on any Dispatch email to come off the newsletter list. See the exact steps, what's deleted, and what's kept.
• Correction — email us if anything's wrong; we'll fix it.
• Opt-out of ad tracking — use a browser like Brave that blocks the Meta Pixel by default, or install a tracker blocker (uBlock Origin, Privacy Badger). We won't try to circumvent your choice.

Where we operate

1765 Sanctum Co. is a US-based brand serving a US-targeted audience. We do not target users in the EU, UK, or California for advertising purposes. If you visit from those regions, the Meta Pixel may still fire by default — you can decline by adjusting your browser settings or using a tracker blocker. We don't currently offer a region-specific consent banner because we don't market in those regions; if our operating reach expands we'll add one.

Changes

We'll update this page when our data practices change. Material changes will be announced in the Dispatch. The "Updated" date at the top is the source of truth.

Contact

Questions, requests, complaints: [email protected].

Altar. Arms. Allegiance.