Privacy Policy
This describes what this site actually collects and where it actually goes. It was written against the source code rather than from a template, so the list of third parties below is the real one.
Last updated 9 October 2026
Plain summary. Most of this site collects nothing. Three places collect something: the contact form, the daily email signup, and the Catechism question box. This site sets no cookies of its own. There is no advertising and no tracking pixel, and nothing here is sold or shared for advertising.
What is collected, and only where
The contact form
If you submit the "Schedule a call" form, it stores what you type: first name, last name, email address, phone number, company, how you heard about the site, and your message. A copy is emailed to me so I can reply.
The daily Orthodoxy email
Signing up stores your email address and which page you signed up from. It uses double opt in: nothing is sent until you click the confirmation link, and an address that never confirms is never emailed again. Every email carries a one click unsubscribe link.
The Catechism question box
When you ask the Catechism "Librarian" a question, your question text is sent to Anthropic to rank which existing answers are most relevant. The question is not stored on this site. The model chooses among answers that already exist; it does not write them.
To stop that feature being abused, requests are counted per address. Your IP address is hashed with a secret salt before it is counted, and the raw address is never stored. Those counters are deleted after seven days.
The family area
/kids has a private section for my own children, reachable only with an account I create. There is no public sign up. The public kids pages collect nothing at all: no form, no analytics, no cookies, no storage.
Third parties that receive data
These are every service that can see something about you, and what each one gets.
| Service | What it receives | When |
|---|---|---|
| Vercel | Standard web server logs, including your IP address and the page requested. Vercel hosts this site. | Every visit |
| Supabase | Stores contact form submissions, email subscribers, and the family area data. | Only when you submit something |
| Resend | Your email address, to deliver the confirmation and the daily email, and to send me your contact message. | Contact form and email signup |
| Google reCAPTCHA | Signals used to tell humans from bots, which may include your IP and interaction data. Google may set its own cookies. | Every page with a form: the contact form, the email signup, and the two “notify me” forms on the home page and the demos page |
| Anthropic | The text of a question you type into the Catechism question box. | Only when you use that box |
| Google Gemini | Prompts for the nightly bedtime stories, which include my own children's first names. No visitor data is sent. | Never triggered by a visitor |
| Sentry | Error reports when something breaks. Configured not to attach personal data. | On errors |
| Google Fonts | Your IP address, when a page loads a web font. The /kids pages self host their fonts and do not do this. | Most pages |
| Substack | Your IP address and browser details when the subscribe box loads, and your email address if you subscribe through it. Substack may set its own cookies. | Only on the About page, where the subscribe box is embedded |
| api.coptic.io | Nothing about you. This site asks it for the Church calendar from the server, so your browser never contacts it. | Never directly |
| Healthchecks.io | Nothing about you. The server sends it a bare "the nightly stories ran" signal, so I am alerted when they do not. | Never directly |
Cookies
This site sets no cookies of its own. If you sign in to the family area, your session is kept in your browser's local storage, not a cookie, and it never leaves your device except to authenticate. Google reCAPTCHA may set its own cookies on the pages that carry a form, and Substack may set its own on the About page, where its subscribe box is embedded.
How long things are kept
- Rate limit counters: deleted automatically after seven days.
- Email subscribers: unsubscribing stops the email and keeps your address on file, marked inactive, so that nobody can quietly sign you up again. If you would rather it were gone, the same link offers to erase it, which deletes the record outright and leaves nothing behind.
- Contact form submissions: kept until you ask for removal.
- Server logs: kept by Vercel under their own retention policy, not mine.
Your choices
To unsubscribe, use the link in any email. It works in one click and takes effect immediately.
To erase your address completely, use the same link and choose to erase rather than unsubscribe. That deletes the record immediately and needs no email to me.
If you are on the email list, everything held about you is on this page already: your email address, which list you are on, which page you signed up from, the dates you confirmed and last received an email, and whether you are active. There is nothing further to export, and no profile, history or behaviour is built from it.
For anything else, including contact form submissions, email hello@andrewassad.com to see what is held or to have it removed. That is handled by hand.
Children
This site is not directed at children and does not knowingly collect anything from anyone under 13. The /kids section exists for my own family: its public pages collect nothing, and its private area has no public sign up.
Changes
If this policy changes, the date at the top changes with it.
Contact
See also the Terms of Use.
Back to andrewassad.com