Privacy Policy
This describes what this site actually collects and where it actually goes. It was written against the source code rather than from a template, so the list of third parties below is the real one.
Last updated 27 August 2026
Plain summary. Most of this site collects nothing. Three places collect something: the contact form, the daily email signup, and the Catechism question box. This site sets no cookies of its own. There is no advertising and no tracking pixel, and nothing here is sold or shared for advertising.
What is collected, and only where
The contact form
If you submit the "Schedule a call" form, it stores what you type: first name, last name, email address, phone number, company, how you heard about the site, and your message. A copy is emailed to me so I can reply.
The daily Orthodoxy email
Signing up stores your email address and which page you signed up from. It uses double opt in: nothing is sent until you click the confirmation link, and an address that never confirms is never emailed again. Every email carries a one click unsubscribe link.
The Catechism question box
When you ask the Catechism "Librarian" a question, your question text is sent to Anthropic to rank which existing answers are most relevant. The question is not stored on this site. The model chooses among answers that already exist; it does not write them.
To stop that feature being abused, requests are counted per address. Your IP address is hashed with a secret salt before it is counted, and the raw address is never stored. Those counters are deleted after seven days.
The family area
/kids has a private section for my own children, reachable only with an account I create. There is no public sign up. The public kids pages collect nothing at all: no form, no analytics, no cookies, no storage.
Third parties that receive data
These are every service that can see something about you, and what each one gets.
| Service | What it receives | When |
|---|---|---|
| Vercel | Standard web server logs, including your IP address and the page requested. Vercel hosts this site. | Every visit |
| Supabase | Stores contact form submissions, email subscribers, and the family area data. | Only when you submit something |
| Resend | Your email address, to deliver the confirmation and the daily email, and to send me your contact message. | Contact form and email signup |
| Google reCAPTCHA | Signals used to tell humans from bots, which may include your IP and interaction data. Google may set its own cookies. | Contact form and email signup pages |
| Anthropic | The text of a question you type into the Catechism question box. | Only when you use that box |
| Google Gemini | Prompts for the nightly bedtime stories, which include my own children's first names. No visitor data is sent. | Never triggered by a visitor |
| Sentry | Error reports when something breaks. Configured not to attach personal data. | On errors |
| Google Fonts | Your IP address, when a page loads a web font. The /kids pages self host their fonts and do not do this. | Most pages |
| jsDelivr and esm.sh | Your IP address, when a page loads a script library from them. | Home page and family sign in |
| api.coptic.io | Nothing about you. This site asks it for the Church calendar from the server, so your browser never contacts it. | Never directly |
Cookies
This site sets no cookies of its own. If you sign in to the family area, your session is kept in your browser's local storage, not a cookie, and it never leaves your device except to authenticate. Google reCAPTCHA may set its own cookies on the two pages that use it.
How long things are kept
- Rate limit counters: deleted automatically after seven days.
- Email subscribers: kept until you unsubscribe.
- Contact form submissions: kept until you ask for removal.
- Server logs: kept by Vercel under their own retention policy, not mine.
Your choices
To unsubscribe, use the link in any email. It works in one click and takes effect immediately.
To see what is held about you, or to have it deleted, email hello@andrewassad.com. There is no self service button for this yet, so it is handled by hand.
Children
This site is not directed at children and does not knowingly collect anything from anyone under 13. The /kids section exists for my own family: its public pages collect nothing, and its private area has no public sign up.
Changes
If this policy changes, the date at the top changes with it.