visit.waterschurch.org/docs/LAUNCH-CHECKLIST.md

Launch checklist

A. Items that require Waters Church approval before launch

Nothing below was fabricated; each item is either unverified or a legal/policy decision.

Facts to confirm (config/campuses.json → verify)

• Coordinates for every campus (derived from Google Maps links / OpenStreetMap; spot-check each pin).
• North Attleboro service times — campus page says 7:30, 9:30, 11:30 AM; the locations index page shows "11:30p" (assumed typo).
• Parking and arrival notes for each campus (currently empty; generic copy is shown instead).
• Woonsocket and Southcoast phone numbers — the main office number is used because the campus pages list none.
• Orlando — marked launching (launch team only) and excluded from recommendations. Flip status to open and add an SMS number when it opens.
• Central "Text Us" number (NEXT_PUBLIC_CENTRAL_SMS_NUMBER, default +1 508-695-1300) — who answers general texts?
• Norwood uses info@waterschurchnorwood.org and 781-762-3357 per its own page — confirm these are current.

Content placeholders (src/content)

• faqs.ts items flagged confirm: true: service length ("a little over an hour"), parking ("free on-site parking at every location"), accessibility ("step-free entrances").
• kids.ts items flagged placeholder: true: first-time check-in steps, "arrive 15 minutes early", what to bring, special-needs accommodations.
• testimonials.ts is empty → section is hidden. Add real, permissioned quotes or leave hidden.
• Headline and copy tone (copy.ts).

Legal / compliance (not legal advice — route to Waters Church's adviser)

• SMS consent language (consent.ts → sms.detail): TCPA/CTIA disclosures, frequency, "Msg & data rates may apply", STOP/HELP, consent not a condition. Confirm the number is registered (10DLC campaign / toll-free verification) for this use case.
• Email consent language and single vs. double opt-in (MAILCHIMP_DOUBLE_OPTIN).
• Privacy Policy at waterschurch.org/privacy covers this subdomain, SMS, geolocation estimate, analytics and ad pixels. Add a Terms URL (NEXT_PUBLIC_TERMS_URL) if one exists.
• Data retention: set LEAD_RETENTION_DAYS (0 = keep forever). Decide who may run export-leads.php and where exports live.
• Analytics consent mode: implied (default) vs opt-in banner.
• Location estimation wording (consent.ts → locationBlurb).
• Bump consent.version if any consent text changes.

B. Post-deployment verification

Hosting

• https://visit.waterschurch.org/ loads; http:// and www. redirect (301) to https://visit.waterschurch.org/.
• SSL padlock valid (AutoSSL) — check with https://www.ssllabs.com/ssltest/.
• /BUILD.txt shows the expected build; /404.html and a random URL return the branded 404.
• /api/health.php → "ok": true, integration_mode: "live".
• /api/lib/Config.php, /api/config/campuses.json, /api/cron/retry-integrations.php → 403.
• Response headers include Strict-Transport-Security, X-Content-Type-Options, cache headers (immutable on /_next/static, must-revalidate on HTML), Content-Encoding: br|gzip.
• Old Church Center redirect removed.

Location detection

• On a phone off Wi-Fi: a campus is recommended with the "based on your general area" badge.
• Deny "Use my precise location" → friendly message, page still usable.
• ZIP search: 02763 → North Attleboro, 02062 → Norwood, 02895 → Woonsocket, 02878 → Southcoast, 33572 → Apollo Beach, 32789 → Apollo Beach (far away notice), 90210 → far away notice.
• Bad ZIP (abc, 1234) → inline error, no crash.
• Choose a different campus → form step 1 updates to match.

Form, consent and integrations (use your own email/phone)

• Email consent only → Mailchimp contact created with tags; no text sent.
• SMS consent without phone → blocked with an inline error.
• SMS + phone → confirmation text arrives from the campus number within a minute; Mailchimp Visit:SMS Opt-In tag present.
• Neither box → lead stored (export shows it), nothing sent.
• Reply STOP to the text → opt-out confirmed by Sinch; resubscribe afterwards.
• Double-tap "Send" / refresh and resubmit → one lead, one text (duplicate: true in the network response).
• Temporarily set a wrong SINCH_API_SECRET → submit → confirmation still shows, sms_status = retry, cron log shows retry; fix the secret → text arrives on the next cron run.
• Confirmation screen shows campus, times, directions, "Text Us a Question" with the campus number.
• Mailchimp journey/automation fires for the new contact.

Attribution and analytics

• Visit with ?utm_source=facebook&utm_campaign=test&fbclid=abc&v=b, submit → export shows the attribution JSON and variant = b; Mailchimp tags include Visit:Platform Facebook, Visit:Campaign test.
• Visit with no parameters and with malformed ones (?utm_source=<script>) → still works, values sanitised.
• GTM/GA4 debug view shows landing_page_view, campus_recommended, campus_selected, plan_visit_started, plan_visit_step_completed, plan_visit_submitted, plan_visit_success, text_us_clicked, directions_clicked with campus, platform, campaign, device_category, variant.
• Conversion events fire only after plan_visit_success (check Meta Events Manager / Google Ads test conversion).
• No email/phone/name appears in any analytics payload.

Text Us

• iPhone and Android: header, hero, floating button and campus cards open Messages with the pre-filled text, editable, to the right number.
• Desktop: the sms: link degrades gracefully (Messages app on macOS, otherwise no-op) — consider a visible phone number if desktop traffic is significant.

Consent records

• Export a lead: consent_version, consent_at, email_consent, sms_consent, hashed IP present; no raw IP or precise coordinates stored.

Performance & accessibility

• Lighthouse mobile (Chrome DevTools, "Slow 4G"): Performance ≥ 90, Accessibility ≥ 95, no CLS from hero/fonts.
• 320 px, 375 px, 430 px, 768 px, 1280 px widths: no horizontal scroll, tap targets ≥ 44 px.
• Keyboard only: skip link → header → campus cards → FAQ accordions → form steps → submit; focus always visible.
• Screen reader: form errors announced (role="alert"), step heading focused on step change, confirmation announced (role="status").
• prefers-reduced-motion: no animation.

Operations

• Cron job runs every 5 minutes (cron.log grows with retry: lines).
• Someone owns app.log review and the leads export cadence.
• .env backed up somewhere safe (it is not in the repo).