Privacy

What we collect

If you read the site without an account, we collect nothing that identifies you. The calendar and the day’s rule are readable signed out; the recipes need a free account, which is the only thing an account is for.

If you create an account, we store your email address, your username, and a scrambled form of your password called a hash. We never store the password itself, and we cannot read it — not even to help you. That is why a forgotten password is reset rather than looked up.

While you are signed in we also record, against each sign-in, your IP address and the description your browser sends of itself. This is for security: it is how a suspicious sign-in can be recognised and how you can end a session on a device you no longer have.

If you fill in the optional profile, we store whatever you put there: first and last name, saint name, parish, and your favourite fasting meal, feast meal and food for breaking the fast. Every one of those is optional, every one can be left blank, and emptying a box and saving deletes what was there.

If you sign up for launch news, we store your email address and the date you gave it, and nothing more.

If you write to us through the contact form, we store the name, email address and message you send, so we can read it and reply.

What other people can see

Your username, and nothing else. It is the public identity on this site, and it is the only field we will ever put in front of another person.

Your email address is never displayed to anyone. Neither is your name, your saint name, your parish, or anything else you put in the profile. Those are for you.

Today no page on the site shows any user’s username to anyone else, because there is nothing here yet that would. If that changes, it changes here first.

A word about the parish field

A parish name is not like the other things on the profile. It names a specific building that a specific person attends at a predictable hour every week, and put beside a first name it can be enough to find someone in the real world.

So it is private, and it stays private. It is never shown to another user, never included in anything public, and never used to group or list people. If we ever wanted to change that we would ask you first, and you would have to agree — it would not happen by our updating this page.

You do not have to fill it in. Nothing on the site works differently if you leave it blank.

Signing in with Google

If you choose Google, Google tells us your email address, your name as Google holds it, and whether Google has confirmed the address. It does not give us your Google password, your contacts, your calendar, or anything from your Google account beyond those three things.

Google will know that you signed in to Fast & Feast. That is unavoidable and it is worth knowing before you choose it — an email address and a password work just as well here.

Google cannot supply a username, so after signing in that way we ask you to choose one. It is the only thing we ask for.

Cookies

Signing in sets one cookie. It holds a random session identifier — no personal information — and it is what keeps you signed in from one page to the next. Signing out deletes it.

There are no advertising cookies, no tracking pixels, and nothing from a third party following you off this site.

Email we send you

Two kinds, and they are treated differently. Emails about your account — confirming your address, resetting your password, and a single welcome message once your address is confirmed — are sent because you asked for something and cannot be turned off while the account exists. There is no unsubscribe on them, because unsubscribing from a password reset would lock you out of your own account.

You do not have to confirm your address before using the site. An unconfirmed account can read every recipe; what it cannot do is change its password or its email address, because either of those would move the account to someone who has not proved they hold the address. We will keep asking you to confirm until you do.

Recipe emails are the other kind, and they are entirely optional. We have not sent a recipe newsletter to anybody yet. Every marketing message we send carries an unsubscribe link, and using it has no effect at all on your account — you can still sign in, and mail about your account keeps working.

Why we collect it

Your email address identifies your account, lets you reset a password, and — only if you asked — sends you recipes. Your username gives you a name here that is not your email address. Your sign-in records keep the account secure. Your message is used to answer you.

The profile is not used for anything at all yet. It exists because people asked to be able to say who they are and what they cook, and one day it may shape what the site suggests to you. It will never be used to advertise to you, and it is never sold or shared.

That is all any of it is used for.

We never sell or share it

Your address is never sold, rented, traded, or handed to advertisers. It is not shared with other organisations, parishes or ministries. There is no exception to this that we are quietly not mentioning.

The only companies that can technically see the data are the ones that run the site for us: Vercel, which hosts it; Neon, which hosts the database; Resend, which delivers our email; and Google, if and only if you choose to sign in that way. They handle it on our behalf and may not use it for anything of their own.

Visitor statistics

We use Vercel Web Analytics to count visits, so we can tell whether people are finding the site. It records things like which pages were viewed, which site linked here, the country, and whether the visitor was on a phone or a computer.

Vercel Web Analytics sets no cookies of its own, builds no profile of you, and does not follow you to any other website. It is not connected to your account, so we cannot tell from it which pages a particular person read.

Deleting your account

Write to hello@fastandfeast.org from the address on the account and ask us to delete it. We will, within thirty days, and normally much sooner.

Deleting the account removes your email address, your username, your password hash, everything in your profile, and your sign-in records. Anything you sent us through the contact form is deleted alongside it if you ask for that too.

You can also ask what we hold about you and we will tell you, or ask to have something corrected and we will correct it. You do not have to give a reason for any of it.

Getting off the recipe list is a separate and much smaller thing: use the unsubscribe link in any recipe email, or ask us. If you have an account it is untouched — only the recipe emails stop. If you joined the list without an account, your address is deleted from it outright.

Children

Accounts on Fast & Feast are for people aged 13 and over. We do not ask for anyone’s date of birth, and we do not knowingly create an account for a child under 13.

The calendar and the day’s fasting rule are readable without an account, so a child can find out what today permits without giving us anything at all. The recipes themselves now need one.

If you believe a child under 13 has created an account, write to us and we will delete it and everything attached to it promptly.

How long we keep it

Your account, and anything in your profile, for as long as you have an account. Sign-in records expire on their own within thirty days. Contact messages are kept while they are still worth answering and then deleted.

Changes to this page

If what we collect changes, this page changes first. The date at the top tells you when it was last revised.

Questions

Write to hello@fastandfeast.org. A person reads it.