Privacy Policy.

The Sourdough Database ("we," "us," "our") is a sourdough baking reference site located at sourdoughdatabase.com and operated by Kyle Weber. We take privacy seriously. This policy explains what data we collect, why we collect it, who we share it with, and what your rights are.

The short version: we collect only what we need to operate the site and improve it. We don't sell your data. We don't share it with anyone except the service providers listed in this policy. If you signed up for our newsletter, your email is stored with Netlify and used only to send you the letter.

We collect data in two ways: information you give us directly, and information collected automatically when you use the site.

We do not collect names, phone numbers, physical addresses, payment information, or sensitive personal data of any kind at this time. If we add user accounts in the future (via Supabase), this policy will be updated before that feature launches.

We use Google Analytics 4 (GA4) to understand how visitors use sourdoughdatabase.com. GA4 collects data including pages visited, time on page, general device type (desktop/mobile), browser, and approximate geographic location (country and region — not your exact address).

This data is aggregated and anonymized. We use it to understand which pages are most useful, how people navigate the site, and what to build next. We do not use it to identify individual visitors.

Google Analytics data is governed by Google's own privacy policy. To opt out of Google Analytics across all websites, install the Google Analytics Opt-out Browser Add-on.

We use (or intend to use) Google AdSense to display advertisements on this site. AdSense is operated by Google LLC and allows Google to serve ads based on your prior visits to this site and other sites on the internet.

You can opt out of personalized advertising by Google in two ways:

• Visit Google Ad Settings to manage your preferences
• Visit aboutads.info/choices to opt out of interest-based advertising from participating companies
• Visit networkadvertising.org for additional opt-out options

Google's use of advertising cookies is governed by Google's Privacy Policy and Advertising Policies.

We may also include Amazon affiliate links. Clicking an affiliate link and making a purchase may earn us a small commission at no cost to you. Amazon's privacy policy governs data collected through those links.

Cookies are small text files stored in your browser. Sourdoughdatabase.com uses the following cookies:

Most browsers allow you to refuse or delete cookies. Instructions vary by browser — search "[your browser name] how to clear cookies" for specific steps. Note that disabling cookies may affect how Google Analytics and advertising features function.

We use the following third-party services to operate this site. Each has its own privacy policy governing the data they process:

We do not sell, rent, or share your personal data with any third parties for their own marketing purposes.

We retain data only as long as necessary for the purpose it was collected:

• Newsletter emails: Retained as long as you're subscribed. Deleted within 30 days of an unsubscribe request.
• Google Analytics data: Retained for 26 months in GA4, then automatically deleted.
• Netlify form submissions: Retained in Netlify's dashboard indefinitely unless manually deleted. You can request deletion at any time by contacting us.

If you are located in the European Economic Area (EEA) or United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR):

• Right to access: You can request a copy of any personal data we hold about you.
• Right to rectification: You can ask us to correct inaccurate data.
• Right to erasure ("right to be forgotten"): You can request that we delete your personal data.
• Right to restrict processing: You can ask us to limit how we use your data.
• Right to data portability: You can request your data in a portable format.
• Right to object: You can object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on consent (e.g. newsletter signup), you can withdraw at any time.

The legal basis for processing your email address is consent — you provided it voluntarily when signing up for our newsletter. You can withdraw this consent at any time by unsubscribing (a link is included in every letter) or by contacting us directly.

To exercise any of these rights, contact us at the address in the Contact section below. We will respond within 30 days.

If you believe we have not handled your data properly, you have the right to lodge a complaint with your local data protection supervisory authority.

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you additional rights regarding your personal information:

• Right to know: You can request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to delete: You can request deletion of personal information we have collected about you, subject to certain exceptions.
• Right to opt out of sale: We do not sell personal information. You do not need to opt out.
• Right to non-discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise your CCPA rights, contact us at the address in the Contact section below. We will respond within 45 days.

The Sourdough Database is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13 without parental consent, we will take steps to delete that information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at the address below.

We may update this privacy policy from time to time. When we do, we'll update the "Last updated" date at the top of this page. If the changes are significant, we'll notify newsletter subscribers by email.

Continued use of the site after changes are posted constitutes acceptance of the updated policy. If you don't agree with the changes, please stop using the site and unsubscribe from the newsletter.

For any privacy-related questions, requests, or concerns, contact us:

We aim to respond to all privacy requests within 30 days. For newsletter unsubscribes specifically, use the unsubscribe link at the bottom of any email — it's faster.