Privacy Policy

This site, and WebMK Content.

WebMK builds and maintains websites for Shluchim and Jewish organizations. This policy covers webmk.co and WebMK Content — the editor at admin.webmk.co where a client updates their own site's content.

WebMK Content is not a public product. It is available only to people invited by name for an organization WebMK works with.

Your email address, and nothing more than that.

There are two ways in, and you choose: Sign in with Google, or a one-time PIN emailed to you. Either way, the only thing that decides whether you get in is your email address, checked against the list of people invited to a given organization's content.

If you use Google, WebMK Content asks Google for the three basic sign-in scopes — openid, email and profile. That means it receives your email address and your basic profile details (your name and profile picture). It uses your email address to identify you and does not use the rest.

It cannot read your Gmail, your Drive, your Calendar or your contacts. It cannot see or change anything else in your Google Account, and it never sees your Google password. You can withdraw its access at any time at myaccount.google.com/permissions.

WebMK Content's use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Two things, both small:

• Your email address, stored against the organization or organizations you are allowed to edit. This is the whole of the permission system.
• Sign-in records, kept by the service that guards the login: the address you signed in with, when, from what IP address and in what browser. They exist so a login that should not have happened can be spotted, and they are not used for anything else.

There is no profile, no behavioural tracking, and no advertising identifier anywhere in this.

This is the part worth reading twice.

Everything saved in WebMK Content — text, dates, prices, images — is published to a public address so that your own website can display it. Anyone who knows or guesses that address can read it. That is the point of the system, and it is the correct arrangement for schedules, menus, class listings and price lists.

It is the wrong place for anything about a person. Do not enter names, phone numbers, home addresses, signups, donations or requests for help. If you need to collect something like that, ask and it will be set up somewhere private instead.

Saved versions are kept, so that a mistaken edit can be undone. Removing an image from a page hides it from view but does not erase every stored copy of it.

Some organizations use WebMK to record their registration forms into a Google Sheet that they own.

When someone fills in such a form, the answers are passed through to that organization's own spreadsheet. WebMK keeps no copy of them. Only the questions the organization has specifically chosen are recorded — the rest of the form is never transmitted, and payment card fields are excluded outright.

The spreadsheet belongs to the organization, and what happens to the registrations in it is governed by that organization's own practices, not this policy.

If you fill in the contact form on the home page, what you type — your name, email address, and any phone number, organization or project description you include — is emailed to WebMK so it can be replied to. It lives in that mailbox, and nowhere else.

The form is protected by an automated check that confirms a submission comes from a person rather than a script.

There are no analytics, no advertising trackers and no third-party cookies on this site. The only cookie WebMK sets anywhere is the session cookie that keeps you signed in to WebMK Content.

As few people and systems as the job allows.

Running any website needs infrastructure — somewhere to store files, something to guard a login, something to deliver email. WebMK uses a small number of established providers for those jobs. Each is bound by its own contract, each handles only what its single job requires, and none of them is given information for any purpose of its own.

Nothing is sold, rented, or handed to anyone for advertising. Nothing is used to train anything. Information is disclosed beyond that only if the law requires it.

Email [email protected] and ask what is held about you, ask for it to be corrected, or ask for your access to be removed. Access is removed the same day it is asked for, and it is removed anyway when someone stops working with an organization.

Content that has been published to an organization's website belongs to that organization, so removing it is their decision to make rather than yours or mine.

If this policy changes, the date at the top of the page changes with it.