Privacy Policy

This Privacy Policy describes how Honey Butter Bread handles information, based on how the Site is actually configured today. It is written to be plain and accurate, and it makes no promise about practices that the Site does not have. It should be read with the Terms of Use and the Disclosure.

Who We Are, Scope and Effective Date

This policy applies to Honey Butter Bread at https://honeybutterbread.com (the “Site”), to messages sent through its contact form, and to emails sent to hello@honeybutterbread.com. In this policy, “we,” “us” and “our” mean the owners and operators of the Site. The Site’s owner has not supplied a legal entity name, postal address or jurisdiction, so we do not publish one here. The address for privacy questions is hello@honeybutterbread.com, and you can also use the Contact page. This policy is effective as of October 6, 2026, and that is also the date it was last updated. The Site is a static informational website about home bread baking, written for home bakers in the United States. This policy covers only the Site and our handling of messages sent to us. It does not cover Cloudflare, GitHub, email systems, linked websites or other third parties that have their own policies, and we do not control how they handle information. The Site is served through third-party providers, and those providers may process some technical information as described below.

Information We Handle

Information you provide

The Site has no user accounts, no newsletter signup, no comments and no public user-content features. The contact form on the Contact page is enabled. It collects the name, email address, subject and message that you type into it, plus a hidden anti-spam field that real visitors are not meant to fill in. The form does not ask for attachments. You can also email hello@honeybutterbread.com directly, in which case we receive what you send, which may include your email address, your name, the content of your message and any attachments. People often include details such as the recipe they used or a description of their baking problem, and we use those details to understand the question. Please avoid sending sensitive personal information or health information, such as medical conditions or allergy details linked to you. We do not need it to answer baking questions, and the Site cannot give medical advice.

Information processed automatically

The Site is delivered through Cloudflare, using a Cloudflare Worker that serves static assets. When you visit, hosting infrastructure may process your IP address and request metadata, such as the page requested, the date and time, browser and device information, and referring page, in order to deliver the Site, protect it from abuse and keep it running. This processing is carried out by the infrastructure provider. We have not configured the Site to build visitor profiles from it, and we do not install analytics tools. How long hosting logs are kept is determined by the provider and is not known to us. On the contact page only, the Site loads the Cloudflare Turnstile script from challenges.cloudflare.com. Turnstile may process browser and device signals to tell humans from bots, and it produces a challenge token when you submit the form. The Site’s server verifies that token with Cloudflare and includes your IP address in that verification request. The signals that Turnstile reads and how long Cloudflare keeps them are governed by Cloudflare and are not documented here.

Information from others

We do not buy or collect personal information from data brokers, social networks or advertising partners, and we have no social accounts. If someone else sends us a message that mentions you, we will have that information as part of the message. Email messages also come with technical header information, such as the sender’s address and routing details, which is handled by email systems.

Cookies and local storage

The Site sets no cookies of its own. It uses one entry in your browser’s local storage, named “theme.” It remembers whether you chose a light or dark display. That entry stays on your own device, is not sent to our servers, and is not used to identify or track you. You can clear it at any time through your browser’s site data settings. If you do, the Site will fall back to its default appearance. We have not configured any cookies for analytics, advertising or personalization. On the contact page, Cloudflare Turnstile may use cookies or browser storage of its own, and that behavior is governed by Cloudflare and is not documented here. Hosting or security infrastructure could also use technical mechanisms of its own to deliver and protect the Site, and we do not control their details.

Why We Process Information

The Site is directed to people in the United States, and we have not performed a jurisdiction-by-jurisdiction analysis of the laws that may apply to every visitor. We do not run consent banners or consent-based tracking because the Site uses no tracking tools of its own that would require them. We handle information in these ways, based on the following reasons:

To deliver the Site and keep it secure, we rely on our legitimate interest in operating a working website, with hosting providers handling technical request data.
To protect the contact form from spam and automated abuse, we rely on our legitimate interest in keeping it usable, and Cloudflare Turnstile performs the check.
To read and respond to messages, we rely on your request, since you contact us by choice, and on our legitimate interest in running the Site and improving it.
To meet legal obligations or protect rights, we handle information where we reasonably believe the law requires it or that it is necessary to protect the Site, our contributors or others.

Where a law requires a specific legal basis and applies to you, these are the grounds on which we rely. We do not claim that you have entered into a contract with us about your personal information, and we do not claim to have collected your consent where we have not asked for it.

How We Use Information

We use the information that you send us through the form or by email for the following purposes:

To read and understand your message.
To respond when appropriate, with no commitment that we will respond to every message.
To check and correct recipes, measurements, nutrition notes and equipment details based on your reports.
To consider topic requests and decide what to write about next.
To investigate abuse, spam, security issues or legal claims.
To keep reasonable records of correspondence.

We do not use your email address or message to send marketing, to build a mailing list, to sell anything or to profile you. We will not add you to a newsletter, because the Site has none. We do not publish your name or message without your permission. We do not use the information from messages for advertising, and we do not use technical hosting data for advertising or profiling. If we want to use your information for a materially different purpose, we will update this policy first and ask for your permission where the law requires it.

Advertising and Tracking

No advertising network is configured on the Site, and no ads appear. No analytics service or tracking script is installed, including no pixels, session replay tools or third-party trackers. The only third-party script that runs in your browser is Cloudflare Turnstile on the contact page, and it is used for spam protection rather than for advertising or analytics. The Site has no affiliate links at present and so has no affiliate tracking. Because no advertising or cross-site tracking technologies are used, there is no ad personalization to turn off. If analytics, advertising, affiliate tracking or similar tools are added in future, we will update this policy, the Disclosure and any required controls before or when they go live.

We do not sell your personal information. We do not share it with third parties for cross-context behavioral advertising, and we do not intend or configure either. We share information only in limited circumstances:

Service providers: Infrastructure, spam-protection and email providers process information on our behalf to deliver the Site, check form submissions and receive our email, as described in the next section.
Legal requirements and protection: We may disclose information if we believe in good faith that the law, a court order, a subpoena or a valid government request requires it, or that disclosure is needed to enforce our terms, to protect our rights, safety or property, or those of others, or to investigate fraud or security problems.
Site transfers: If the Site or its operation is transferred to a new owner, information we hold, such as email correspondence, may be transferred with it, and the new owner would be expected to handle it in line with this policy or to give notice of changes.
With your direction: We may share information if you ask us to or give us permission.

We may use or share information that has been aggregated or de-identified so that it does not reasonably identify you, and we do not attempt to re-identify it. The Site does not currently collect enough information for that to be a common situation.

Third-Party Services We Rely On

The Site relies on a small number of third-party services:

Cloudflare provides hosting through a Cloudflare Worker with static assets, DNS, Turnstile spam protection on the contact page, and email routing and sending for contact messages. It serves pages over HTTPS and may process IP addresses and request metadata to deliver the Site and protect it from abuse. Cloudflare handles that data under its own terms and privacy policy.
Cloudflare Turnstile loads only on the contact page. It may process browser and device signals to tell humans from bots, and the Site verifies the resulting token server-side with Cloudflare.
Cloudflare email services send submitted contact messages as email to the Site’s private contact inbox. We do not publish the forwarding destination. Cloudflare has reported the receiving address as verified and mail routing as enabled, but an end-to-end delivery test has not yet been run.
The provider of the private contact inbox receives and stores the messages delivered there. We do not identify that provider in this policy, and we have not documented its retention or security practices here.
GitHub hosts the Site’s source code in a private repository. It is not visitor-facing, and the Site does not send visitor data to it. The repository holds the Site’s content and code, and we do not intend to store visitors’ personal information there.

We are not aware of other third-party scripts, fonts, widgets, embeds, analytics or advertising services on the Site, and we do not intend to add any without updating this policy. We do not control third-party providers, and their handling of information is subject to their own policies.

Your Choices and Rights

You can use the Site without giving us any information. You can choose whether to use the contact form or email us and what to include in your message. You can clear the “theme” entry through your browser settings, block or delete site data, or use private browsing. If you block the Turnstile script, the contact form may not work, and you can email hello@honeybutterbread.com instead. Because the Site uses no tracking technologies of its own, there is no tracking for browser signals such as Global Privacy Control or “Do Not Track” to switch off. Depending on where you live, you may have rights over personal information we hold about you, which may include rights to know what we have, to access or receive a copy of it, to correct it, to delete it, to limit or object to certain uses, and not to be treated unfairly for exercising a right. Because we hold only messages, we expect that most requests will concern a message that you sent us. To make a request, email hello@honeybutterbread.com and tell us what you want and which name and email address you used. No formal identity-verification process has been defined. To protect your privacy, we may ask for reasonable information to confirm that a request really comes from the address that sent the message, and we may decline a request we cannot reasonably verify. We do not promise a response time, and end-to-end delivery has not been tested, so please keep a copy of your request and try again through the details on the Contact page if you do not hear from us. We may not be able to honor a request in full if the law requires us to keep the information, if it is needed to protect rights or security, or if an exception applies. If we decline, we will explain why where we reasonably can. You may also have the right to complain to a regulator, as described in the contact section below.

Security

The Site is a static website delivered over HTTPS, so the connection between your browser and the Site is encrypted in transit. It has no accounts, no passwords and no databases of visitor information that we have configured, which reduces what could be exposed. The contact form is protected by Cloudflare Turnstile, and the Site verifies the challenge token server-side. The Site’s source code is held in a private GitHub repository. The Site has not had any specific security audit or certification, and we do not claim one. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. In particular, form submissions are forwarded as ordinary email, which may not be encrypted end to end and may pass through several systems, so you should not send sensitive information through the form or by email. If we become aware of a security incident that affects personal information we hold, we will respond as the law requires.

Retention

We have not set a fixed retention period for messages. We do not state a specific number of days or years, because we have not set one. We keep a message for as long as it is reasonably useful for the purposes in this policy, such as answering you, tracking a correction, keeping a record of correspondence, resolving disputes or meeting legal duties. Then we may delete it, though we may not do so on any set schedule. How long the mailbox provider keeps mail, how long Cloudflare keeps request logs and email-routing records, and how long Cloudflare keeps Turnstile data are unknown to us and are controlled by those providers. You can ask us to delete a message that you sent us by following the steps under the rights section above, and we will consider the request subject to the limits described there. Information held in backups or by providers may remain for a period after deletion from our active mailbox. The “theme” entry stays in your browser until you clear it.

Children

The Site is written for home bakers and is not directed to children under 13. We do not knowingly collect personal information from children under 13. The Site has no accounts or comments that would invite it, and its only form is the contact form. If you are a parent or guardian and believe that your child has sent us personal information, please email hello@honeybutterbread.com, and we will review the request and delete the message where we reasonably can. If we learn that we hold personal information from a child under 13 without appropriate permission, we will take reasonable steps to delete it. Young people interested in baking should use the Site with a parent or guardian, particularly given the hot-oven and food-safety risks described in the Terms of Use.

Where Information May Be Processed

The Site’s owner has not told us where it is located, so we cannot state the country in which messages are stored. Cloudflare operates a global network, and a request to the Site or a form submission may be handled by infrastructure in a country other than your own. We do not know where our private inbox provider processes or stores messages. This means that information you send or generate may be processed in the United States or other countries, which may have different data protection laws from yours. We have not put in place any special cross-border transfer mechanism, and we do not claim that any particular safeguard applies. By using the Site or contacting us, you understand that your information may be handled in this way, to the extent the law allows. If you are not comfortable with that, please do not send us personal information.

Other Websites

The Site may link to other websites, including ingredient producers, equipment makers, retailers and reference sources. Those sites are independent and have their own privacy practices, cookies and trackers, which may be quite different from the Site’s. This policy does not apply to them, and we do not control or endorse their content or how they handle information. When you follow a link, you leave the Site, and we encourage you to read the privacy policy of any site you visit.

California Residents

This section provides information that may be relevant if you live in California. We have not determined that California privacy statutes such as the California Consumer Privacy Act apply to the Site, since that depends on factors such as the size and nature of the business that we have not confirmed, and we do not make a blanket statement that they do or do not. In the past 12 months, we have collected only what you send us through the contact form or by email, together with technical request data processed by hosting infrastructure and Cloudflare Turnstile. We do not sell personal information, we do not share it for cross-context behavioral advertising, and we have no actual knowledge that we sell or share personal information of consumers under 16. We do not use or disclose sensitive personal information to infer characteristics about you. If you are a California resident, you may have the right to know, to access, to correct and to delete personal information, and to be free from discrimination for exercising your rights. You can ask by emailing hello@honeybutterbread.com, as described in the rights section above. An authorized agent may make a request for you, and we may ask for reasonable proof of the agent’s authority. The Site does not have any financial incentive program. California’s “Shine the Light” law, where it applies, lets residents ask about disclosures for third parties’ direct marketing, and we do not make such disclosures.

Nevada and Other State Privacy Laws

Nevada law gives its residents a right to opt out of the sale of certain covered information to others for money. We do not sell covered information as that law defines it, and we do not intend to. If you are a Nevada resident and want to ask a question about this, email hello@honeybutterbread.com. Other U.S. states have enacted or are enacting privacy laws that may give residents rights similar to those described above, and some may include rights of appeal if a request is declined. We have not assessed which of these laws apply to the Site, and we do not claim that any particular law does. If you live in a state with such a law and want to exercise a right, send your request to hello@honeybutterbread.com, and we will consider it in good faith under the process described in this policy. If we decline a request and the law gives you a right to appeal, you may reply to us to ask us to reconsider it.

Changes to This Policy

We may update this policy when the Site’s setup, our practices or the law change. The current version is always on this page, and the effective date at the top shows when it was last updated. We have no mailing list or accounts, so we cannot notify visitors individually. If we add analytics, advertising, affiliate tracking, a newsletter, accounts, comments or any other feature that handles information, or change how the contact form works, we will update this page before or when the change goes live. If a change is material, we may also put a visible notice on the Site. Where the law requires a different kind of notice or your consent for a new use, we will do that. Please check this page from time to time.

Contact and Complaints

If you have a question, concern or request about this policy, use the contact form on the Contact page or email hello@honeybutterbread.com. The contact form is enabled and is protected by Cloudflare Turnstile. Submitted messages are sent as email through Cloudflare email services to a private inbox. Cloudflare has reported the receiving address as verified and mail routing as enabled, but we have not yet run an end-to-end delivery test, so we cannot confirm that a form submission or email will reach us. We make no promise of a reply or of any response time. The Contact page has the current details and will reflect any change in availability. If you are not satisfied with our handling of your information, you may have the right to complain to a data protection or consumer protection authority where you live, such as your state attorney general or, in the United States, the Federal Trade Commission. We would appreciate the chance to address a concern first, but you do not have to contact us before you complain to a regulator.