Privacy Policy
Effective November 1, 2026. LobbyLoop collects only what it needs to run church lobby screens, never sells it, and never shows ads.
Who we are
LobbyLoop is a digital signage service for churches, available at getlobbyloop.com, app.getlobbyloop.com and play.getlobbyloop.com. In this policy, "LobbyLoop," "we" and "us" mean the LobbyLoop service and the team that runs it.
This policy covers the LobbyLoop website, the dashboard and designer, and the LobbyLoop player that runs on TVs. It applies to church staff and volunteers who use LobbyLoop, people who request beta access, and visitors to our website.
Information we collect
| What | Examples | Where it comes from |
|---|---|---|
| Account details | Email address, name, role (Owner, Admin, Editor), which walls you can edit, whether you want screen alerts | You, or the church admin who adds you |
| Church details | Church name, time zone, settings such as how long sign-ins last | The church's owner or admins |
| Content | Photos, videos, layouts, schedules and text the church puts on its screens | The church's team |
| Screen details | Screen names, which wall and TV each is on, when it was last online, output settings | The church's team and the player |
| Planning Center data | Rooms, room bookings, event names, times, locations, tags, descriptions and cover images | Planning Center, only after a church connects its account |
| Google Drive files | Photos and videos in a folder the church shares with a link | Google Drive, only for folders the church adds |
| Weather location | The church's address or coordinates | The church's team |
| Beta requests | Church name, contact name, email, city, number of screens, whether you use Planning Center, your message | You, on our website |
| Sign-in and security records | One-time sign-in links, signed-in sessions, the browser type, a scrambled (hashed) version of the network address used to request access | Created when you sign in or request access |
| Technical logs | Request times, errors and network addresses in server logs | Our hosting provider, automatically |
We don't ask for passwords, payment details or information about church attendees. Content a church chooses to put on its screens is up to the church.
How we use information
We use information only to provide and improve LobbyLoop:
- Show each church's content on its own screens, on schedule
- Sign people in and keep accounts secure
- Sync room signs, events and weather the church has turned on
- Send emails you need: sign-in links, team invites, screen offline alerts you opt into, and beta updates
- Answer support questions and fix problems
- Prevent abuse, such as limiting how many sign-in emails can be requested
We do not sell or rent personal information. We do not use it for advertising, and we don't put ads on screens. We don't use third-party analytics or tracking on our website or dashboard.
Planning Center data is used only to show that church's events and room signs. Screens only receive events that are published to Church Center or that the church has pinned, never events the church has hidden.
Who we share it with
We share information only with the services that run LobbyLoop, and only what each needs:
| Service | What it does for LobbyLoop | What it receives |
|---|---|---|
| Cloudflare | Hosting, database, file storage, email sending | Everything stored in LobbyLoop, kept on Cloudflare's servers |
| Planning Center | Room bookings and events, if a church connects it | Sign-in through Planning Center; we read data, never change it |
| Google Drive | Folders a church adds | The folder link; we copy its files into LobbyLoop |
| Google Fonts | Letter styles on our pages | Your network address when a page loads fonts |
| US National Weather Service and US Census geocoder | Forecasts, and turning an address into coordinates | The church's address or coordinates |
People on a church's team can see that church's content, screens and team list, based on their role. Anyone in a lobby can see what's on the screens.
We may disclose information if the law requires it, to protect people from harm, or if LobbyLoop is sold or transferred. If that happens, this policy still applies to information collected under it.
Cookies and sign-in
LobbyLoop uses a few cookies, all needed for the service to work. None are for advertising or tracking.
- Sign-in cookie (
ll_session, on app.getlobbyloop.com): keeps you signed in for as long as your church allows, up to 90 days. Signing out deletes it. - Release cookie (
ll_group, on play.getlobbyloop.com): tells a TV which version of the player to load. - Browser storage: the dashboard and designer save drafts and preferences in your browser. TVs save their pairing and last content so they keep working offline.
Sign-in works by email: we send a one-time link that expires in 15 minutes. We store only scrambled (hashed) versions of sign-in links and sessions, so they can't be read back.
How long we keep it
| Information | How long |
|---|---|
| Church content, layouts, screens and team | Until the church deletes it or closes its account |
| Sign-in links | Deleted within a day |
| Sign-in sessions | Until you sign out or the church's sign-in time runs out, 90 days at most |
| Planning Center events and covers | Refreshed as they change; cleared when a church disconnects Planning Center |
| Google Drive copies | Removed when files leave the folder, or 7 days after no layout uses the folder |
| Beta requests | Kept as a record of the request |
| Server logs | Kept by Cloudflare for a limited time under its own policies |
When a church account is deleted, we delete its content, media files, screens, schedules, Planning Center connection, sign-in sessions and team list. Its screens go back to showing a pairing code. Removing someone from a church's team signs them out right away.
Security
- All connections use HTTPS.
- Planning Center sign-in tokens are encrypted before they're stored.
- Sign-in links and sessions are stored only as one-way hashes. Each TV's access key is stored the same way.
- Sign-in cookies can't be read by page scripts and are only sent over HTTPS.
- Each church only sees its own data, and team roles limit who can change what.
- Sign-in email requests are rate limited.
No system is perfectly secure. If we learn of a breach that affects your information, we'll tell the affected churches promptly.
Your choices and rights
- See or correct your information: your name and email are on your church's Team page. Ask your church's LobbyLoop admin, or email us.
- Delete your information: ask your church to remove you from its team, or email us. A church owner can ask us to delete the church's whole account.
- Emails: sign-in and invite emails are sent only when someone asks for them. Screen alerts are off unless you turn them on.
- Disconnect services: a church can disconnect Planning Center, remove a Google Drive folder or remove its weather location at any time in Settings.
The church decides what goes on its screens and who's on its team. If you're asking about content a church posted, we may refer you to that church. We'll answer privacy requests within 30 days.
Photos and videos are served from long, unguessable web addresses so screens can load them. Anyone who has one of those addresses can view that file, so churches shouldn't upload anything they wouldn't show in a lobby.
Children
LobbyLoop accounts are for church staff and volunteers who are 18 or older. We don't knowingly collect personal information from children. If you think a child has given us information, email us and we'll delete it.
Changes to this policy
If we change this policy, we'll update the date at the top. For significant changes, we'll email church owners before they take effect.
Contact
Questions or requests: hello@getlobbyloop.com
LobbyLoop, Topeka, Kansas