Last updated: October 2026
Shul Screen is the notice-board display of Bais HaChasidim Imrei Menachem. This website is operated by the synagogue's administrator and is used only by the people who manage that screen. This policy explains what information the site handles and how.
When you sign in with Google, we receive your Google account's email address and basic profile (name). It is used only to match you against the list of people the administrator has invited; nobody can get in unless their email is on that list.
Through Sign in with Google: your email address and basic profile (name). Through the optional Gmail connection
(the gmail.send permission, granted only by an administrator who may invite helpers): the ability to send
email from that administrator's Gmail account, and the account's email address. The site never reads, searches, lists,
deletes or modifies anything in the mailbox, and requests no other Google data.
The email address and name identify you against the list of invited people (nothing else). The Gmail send permission is used for exactly three things, each started by the administrator in the Users tab: sending a login invitation to a helper they add, sending a password-reset link to a helper, and sending a test message to an address they type. No other email is ever sent, no email is sent automatically or in bulk, and no Google data is used for advertising, analytics, profiling, or to train or improve any AI or machine-learning model.
Google user data is not sold, rented, or transferred to any third party, data broker, advertiser or AI service. It is not shared with the synagogue's display computer either — that computer receives only the screen content. The only party that processes it is the hosting provider that runs the server (Railway), as a processor on our behalf.
All traffic to the site is encrypted (HTTPS). The Gmail credential Google issues (a refresh token) is stored only in the server's private data file on the hosting provider's persistent disk, is never sent to any browser, is never included in the data the display computer mirrors, and is never written to logs. Passwords are stored as salted scrypt hashes. Access to the admin panel requires a login; the administrator can revoke any login at once, and wrong-password attempts are rate limited. Only the synagogue's administrator has access to the server and its data.
The Gmail credential is kept only while the connection is in use. It is deleted immediately when the administrator presses Disconnect in the Users tab, when their login is deleted, or when they remove "Shul Screen" at myaccount.google.com/permissions (the site then holds a dead key, which Disconnect clears). A login's email and name are removed when the administrator deletes that user. Screen content stays as long as it is shown. To have your information removed, ask the administrator (contact below); requests are handled within 30 days.
Shul Screen's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Nothing is sold, shared with third parties, or used for advertising. Data lives on the hosting server and on the synagogue's own display computer, which mirrors the screen content (never the Google keys).
The synagogue's administrator — the email address shown on the Google sign-in screen for this app.