Cross+CovenantUntil All Have Heard
Shop

Legal

Privacy Policy

“The Lord is a refuge for the oppressed, a stronghold in times of trouble.”Psalm 9:9

Last updated: October 11, 2026

Cross + Covenant (“we,” “our,” “us”) operates crossandcovenant.co. This policy explains what information we collect, how we use it, and the choices you have. We treat your information the way we would want ours treated. Stewardship over surveillance.

1. Information we collect

When you place an order or sign up for our list, we collect what is necessary to fulfill it and stay in touch:

  • Name, email, shipping and billing address, phone number
  • Payment information (processed by Shopify Payments and Stripe; we never store full card numbers)
  • Order history and the products you view
  • Device, browser, IP address, and traffic source via cookies and analytics

2. How we use it

  • To process orders, ship products, and provide customer support
  • To send order confirmations, shipping notifications, and care emails
  • To send marketing emails and SMS only when you opt in (you can unsubscribe anytime)
  • To improve the site, fix bugs, and detect fraud or abuse
  • To comply with legal obligations

3. Cookies and tracking

Essential cookies keep the shop working: your cart, your session, and a first-party referral cookie if you arrive through an ambassador link. These are always on.

Analytics and advertising cookies stay off until you accept them. We use Vercel Analytics, which is cookieless. If you choose “Accept all” in the cookie banner, we may also use Google Analytics, the Meta Pixel, the Pinterest tag, and the TikTok pixel to understand what works and reach more people with the Gospel. You can change your choice anytime through the “Cookie preferences” link in the footer.

Do Not Sell or Share. Choosing “Essential only” keeps all analytics and advertising trackers off (EU/UK GDPR) and opts you out of any sale or sharing of personal information for targeted advertising (California CPRA). You can also email us to make the request directly.

4. How we share information

We share information only with service providers who help us run the business: Shopify (commerce platform), Printify (production and fulfillment), Stripe (payments), Vercel (hosting), Klaviyo (email when enabled), and shipping carriers. We do not sell your personal information.

5. Your rights

You can request access to, correction of, or deletion of your personal information at any time. California residents have additional rights under the CCPA. EU and UK residents have rights under the GDPR. To exercise any right, email hi@crossandcovenant.co.

6. Data retention and security

We keep order and account information as long as needed to provide service and comply with tax, accounting, and legal requirements. We use industry-standard safeguards including TLS encryption in transit and tokenized payment processing.

7. Children

Our site is not directed to children under 13. We do not knowingly collect information from children under 13. If you believe we have, contact us and we will delete it.

8. Bible connector for AI assistants

The Cross + Covenant Bible connector at https://crossandcovenant.co/api/mcp/bible lets AI assistants such as Claude read scripture, reading plans, and our devotional. It is operated by Modern Mustard Seed LLC, which runs Cross + Covenant. How it works is described on the connector page.

  • What it receives: only what the assistant sends with each request: the tool name and its inputs (a Bible reference, search words, a plan and day, or a date). It does not receive your name, email, account, or the rest of your conversation, and it never asks for them.
  • What we keep: for each call, a log line with the tool name, how long it took, and whether it succeeded. We do not log the inputs, so we never store what you read or searched. To enforce fair-use limits we keep counters of calls per minute and per day with no identifying information; they expire within two days. Log lines are kept for at most 30 days.
  • Who else touches it: Vercel hosts the connector and processes each request (including the network address of the service calling it) to deliver it, under its own privacy policy. The assistant you use is governed by its provider’s terms. The connector calls no other service and shares nothing with anyone.
  • No cookies, no tracking, no sale. The connector sets no cookies, runs no analytics or advertising, and never sells or shares information.
  • Questions: hi@crossandcovenant.co.

9. Church Year connector for AI assistants

The Church Year connector at https://crossandcovenant.co/api/mcp/church-year lets AI assistants such as Claude look up the church calendar, feast days, and Sunday readings. It is operated by Modern Mustard Seed LLC and handled exactly like the Bible connector above:

  • What it receives: the tool name and its inputs (a date, a lectionary occasion and year, a number of weeks). Never your name, email, account, or conversation.
  • What we keep: a log line per call with the tool name, how long it took, and whether it succeeded, kept at most 30 days. Inputs are not logged. Fair-use counters carry no identifying information and expire within two days.
  • Who else touches it: Vercel hosts it. It calls no other service, sets no cookies, runs no analytics, and shares nothing with anyone.
  • Questions: hi@crossandcovenant.co. How it works is on the connector page.

10. Changes to this policy

We may update this policy as we grow. We will post the updated date above and notify you of material changes by email if you have an account.

11. Contact

Questions, requests, or concerns: hi@crossandcovenant.co.