Skip to content
The Mosaic Center

Privacy Policy

Last updated November 15, 2026

The Mosaic Project of South Texas (“TMPST”, “we”, “us”) is a 501(c)(3) nonprofit in Corpus Christi, Texas, and runs The Mosaic Center at 1010 S Staples St. This Privacy Policy explains what personal information tmpst.org collects, how we use it, who we share it with, and the choices you have. Our programs that have their own websites, such as Pride Corpus Christi, have their own privacy notices.

The short version

  • We collect what you give us through our forms, plus limited technical information to keep the site secure and to count visits.
  • We use it to run our programs, answer you, process donations and look after the Center.
  • We do not sell personal information. We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes.

What we collect and why

Newsletter sign-up

Your email address and, if you choose, your name, so we can send Mosaic Center updates. We email you a confirmation link first and add you only after you confirm. Unconfirmed sign-ups are deleted after 30 days. Every update includes an unsubscribe link. To limit spam we keep a scrambled (hashed) form of your IP address, not the address itself.

Contact form

Your name, email address, subject and message. They are emailed to our team so we can reply. Google reCAPTCHA protects this form from spam; Google receives information about your visit, including your IP address, under Google’s Privacy Policy.

Booking the Center

The organizer’s name, email address and optional phone number, the group’s name and type, event details, and an optional flyer image. We use them to review, confirm and manage your request. If we approve your event as a public event, its title, description, times, group name and type, and flyer appear on our public events listing and are shared with Pride Corpus Christi’s community calendar and Unity 89.1 FM, which may announce it on air. The organizer’s name, email address and phone number are never published. Requests whose email address is never confirmed are deleted after 48 hours, and flyers for declined or withdrawn requests are deleted. Private bookings are never published.

Donations

Your name, email address, gift amount and fund, and, if you choose, an organization name or a request to be listed as anonymous. Card details are entered directly with our payment processor, Stripe, and never reach our server. We keep a record of each gift, email your tax receipt, and give you a donor account where you can see your giving; you sign in with a one-time link sent to your email. Cloudflare Turnstile checks the donation form for automated abuse. We keep donation records as long as tax and accounting rules require.

Transgender Resource Initiative (TRI)

TRI applications ask for your preferred name, pronouns, email address, phone number, county, gender identity, the items and sizes you need, information about your financial situation, and how the items would help you, plus a mailing address if you choose shipping. We use this only to review applications and provide items. It is seen only by the people who run TRI and is never published. If you pay the shipping fee, Stripe receives your name and email address. When an application is completed or declined, we remove the mailing address and county; we keep the rest as a program record. You can ask us to delete your application at any time.

Accounts and sign-in

Donors and TRI applicants sign in with a one-time link sent by email instead of a password. Cookies keep you signed in.

Security cameras at the Center

The Mosaic Center building has security cameras. Video is recorded and checked for possible people on a computer at the Center; it is not sent to outside AI services. Only the Center’s administrators, and board members or guests they invite, can watch through a private, sign-in-only viewer. For invited viewers we keep their name, email address, which cameras they may view, sign-in codes, their device type (for example “iPhone · Safari”) and a record of what they viewed, which is deleted after 90 days. A log of building-control actions, with a scrambled form of the IP address, is kept for one year. Board members’ access is kept up to date from Pride Corpus Christi’s board roster (names and email addresses). Alert emails to administrators can include a still image from the camera that saw the activity.

Camera text alerts (SMS)

Mosaic Center Camera Alerts are security texts for the Center’s own administrators and board members; they are not offered to the public. Anyone who signs up enters their mobile phone number and checks a consent box on the same form; we record their consent with the time and the exact wording they agreed to. The number and the connection to our text message provider, Twilio, are stored encrypted. Texts are sent through Twilio and contain the camera name, the time and a link to the private camera app. You can stop them at any time by replying STOP or turning alerts off in the settings page. See how sign-up works and the SMS Terms in our Terms & Conditions.

We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent are not shared with any third parties, except the service providers we use to deliver the messages.

Camera email and phone call alerts

Board members and administrators can choose to get camera alerts by email, text message (see above) or automated phone call. Email alerts go to the address on their board invitation. For phone calls, they enter their own mobile number, check a consent box and confirm the number with a setup call that reads them a code; we store the number encrypted and record their consent with the time and the exact wording. Calls are placed through Twilio and say the camera name and the time. Each person can turn their own alerts off at any time, an administrator can turn a board member’s calls off, and alerts stop when board access ends.

Visit statistics

We count visits with our own privacy-friendly tool. It sets no cookies. For each page view it records the page, the referring website, device and browser type, a screen-size range, campaign tags in the link, and the country when available. To count unique visitors without tracking anyone, it uses a daily code made from your IP address and browser, with a secret that is deleted every day, so visits cannot be linked from one day to the next. Raw IP addresses are not stored. Individual visit records are deleted after 35 days; only totals are kept. If your browser sends Do Not Track or Global Privacy Control, your visit is not counted.

Website security

Our web host and security tools (including Wordfence) process IP addresses and request details to block attacks, prevent abuse and keep the site fast.

Spanish translations

To offer pages in Spanish, the public text of our pages is sent to Anthropic’s Claude service for translation. Forms, accounts, donations, bookings, TRI pages and the camera viewer are never sent, and nothing you submit through a form is included.

Videos, radio and images from other sites

YouTube videos load (from youtube-nocookie.com) only when you press play. The Unity 89.1 FM player connects to unity89fm.com only when you press Play. Some images load from Unity 89.1 FM’s and Pride Corpus Christi’s websites. Like any website, those sites receive your IP address when your browser loads them.

Cookies and browser storage

  • Sign-in cookies keep donors, TRI applicants and staff signed in.
  • A donation cookie keeps your gift in progress; it ends when you close your browser.
  • A camera viewer cookie keeps invited viewers signed in (8 hours for guests, 30 days for board members).
  • Browser storage remembers small choices, such as dismissing the Spanish-language banner, and settings in the camera app on administrators’ devices.
  • On the donation page, Stripe and Cloudflare Turnstile may set their own cookies; on the contact page, Google reCAPTCHA may.

We do not use advertising cookies.

Who we share information with

  • Service providers that help us run the site and our programs, only for that purpose: Stripe (payments), Twilio (text messages and phone calls), our email delivery service, our web host, Cloudflare (bot checks), Google (reCAPTCHA), Apple, Google and Mozilla’s push services (encrypted notifications to administrators’ devices), and Anthropic (public page text only).
  • Pride Corpus Christi and Unity 89.1 FM receive the public details of approved public events, never organizers’ contact details.
  • When the law requires it, or to protect someone’s safety.

We do not sell personal information or share it for anyone else’s marketing.

How long we keep it

We keep information only as long as we need it for the purpose above, or as long as the law requires (for example, donation records for tax purposes). Specific limits are listed in each section.

Your choices

  • Unsubscribe from updates with the link in any email.
  • Stop text messages by replying STOP.
  • Ask to see, correct or delete your information by emailing help@tmpst.org. Some records, such as donation receipts, must be kept by law.

Children

This website is not directed to children under 13, and we do not knowingly collect their personal information online.

Security

We use encrypted connections, limit access to the people who need it, and encrypt sensitive settings. No website can be perfectly secure, so please contact us if you think something is wrong.

Changes

We may update this policy and will change the date above when we do.

Contact us

The Mosaic Project of South Texas
P.O. Box 2425, Corpus Christi, TX 78403
help@tmpst.org · 361-816-7708