Privacy Policy

Last updated: July 3, 2026

Spiritual Bread (“we,” “us,” or “our”) respects your privacy. This Privacy Policy explains what information we collect when you visit spiritualbread.com (the “Site”), how we use it, who we share it with, and the choices and rights you have. By using the Site, you agree to the practices described here.

We aim to collect as little personal information as possible. Spiritual Bread is a personal faith blog — not a store — so we do not sell your data, run advertising networks, or build advertising profiles about you.

Who We Are

Spiritual Bread is a Christian devotional blog operated by Joshua. For any privacy question, you can reach us by email at joshuac1237@gmail.com.

Information We Collect

Information you give us

• Newsletter sign-up. If you subscribe, we collect the email address (and optionally the first name) you provide, so we can send you the newsletter.
• Comments. If you leave a comment on a post, we collect the name, email address (if requested), and the comment content you submit. Your name and comment may be displayed publicly with the post; your email address is not published.
• Contact. If you email us or use a contact form, we receive the information you choose to include (such as your name, email address, and message).

Information collected automatically

• Usage and log data. Like most websites, our hosting provider automatically records basic technical data when you visit — such as your IP address, browser type and version, device type, referring page, the pages you view, and the date and time of access. This is used for security, diagnostics, and understanding general traffic.
• Analytics. We may use a privacy-friendly analytics tool to understand which content is popular. Where used, it collects aggregated, non-identifying usage statistics and does not build cross-site profiles of you.

We do not intentionally collect phone numbers, mailing addresses, payment details, or any special categories of sensitive personal data.

Cookies and Similar Technologies

The core Site is a static blog and uses few or no cookies. Where cookies or similar storage (such as your browser’s local storage) are used, it is limited to:

• Essential/functional purposes — for example, remembering that you dismissed a notice or, if the comment feature uses it, remembering your name so you don’t have to re-enter it.
• Embedded content — when you play an embedded YouTube video, YouTube/Google may set their own cookies (we use YouTube’s youtube-nocookie.com privacy-enhanced mode to reduce this).

You can control or delete cookies through your browser settings. Blocking cookies may affect minor conveniences but will not prevent you from reading the Site. We honor browser “Do Not Track” and Global Privacy Control (GPC) signals where technically feasible.

Third-Party Services

We rely on a small number of trusted providers to run the Site. These providers process data only as needed to perform their service:

• Hosting — the Site is hosted on Vercel, which processes server logs (including IP addresses) to deliver and secure the Site.
• Email delivery — if you subscribe to the newsletter, your email address is stored and sent through our email service provider so we can deliver messages and manage subscriptions.
• Comments / database — comments and subscriber records may be stored with a backend provider (such as Supabase) on our behalf.
• Embedded media — posts may embed YouTube videos; playing them involves Google’s services and their privacy policy.
• Fonts — web fonts are self-hosted, so viewing the Site does not send your data to a third-party font network.

We also link to external sites (for example, our Instagram and YouTube pages). We are not responsible for the privacy practices of those third parties; please review their policies.

How We Use Your Information

We use the information we collect to:

• Operate, maintain, secure, and improve the Site;
• Send the newsletter and related updates to people who have subscribed;
• Display and moderate comments;
• Respond to your messages and requests;
• Understand general usage trends so we can create better content;
• Comply with legal obligations and protect the rights and safety of our users and the Site.

We do not sell or rent your personal information, and we do not share it for cross-context behavioral advertising.

Legal Bases for Processing (EEA/UK)

If you are in the European Economic Area or the United Kingdom, we process your personal data on these legal bases: your consent (e.g., subscribing to the newsletter, which you may withdraw at any time), our legitimate interests (e.g., securing and improving the Site), and legal obligations.

Sharing and Disclosure

We share personal information only:

• With service providers (listed above) who process it on our behalf under appropriate confidentiality obligations;
• When required by law — to comply with a legal obligation, valid legal process, or lawful request from public authorities;
• To protect rights and safety — where necessary to protect the Site, our users, or the public, or to prevent wrongdoing.

Data Retention

We keep personal information only as long as needed for the purposes described here. Newsletter data is kept until you unsubscribe or ask us to delete it. Comments remain until you or we remove them. Automatically collected log and analytics data is retained for a limited period for security and statistical purposes, unless we are legally required to keep it longer.

Your Privacy Rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you;
• Correct inaccurate information;
• Delete your information;
• Object to or restrict certain processing;
• Withdraw consent at any time (for example, by unsubscribing);
• Data portability, where applicable.

California residents (CCPA/CPRA): you have the right to know what personal information we collect, to request its deletion, to correct it, and to opt out of any “sale” or “sharing” — noting that we do not sell or share your personal information. We will not discriminate against you for exercising these rights.

To exercise any right, email joshuac1237@gmail.com. You can unsubscribe from the newsletter at any time using the link in any email. We may need to verify your identity before acting on a request, and we may retain certain information where the law allows or requires.

Children’s Privacy

The Site is intended for a general audience and is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us and we will delete it.

International Data Transfers

We are based in the United States, and our providers may process data in the United States and other countries. If you access the Site from outside these regions, your information may be transferred to and processed in a country whose data-protection laws differ from your own. Where required, we take steps to ensure appropriate safeguards for such transfers.

Security

We take reasonable technical and organizational measures to protect your information. However, no method of transmission over the Internet or electronic storage is completely secure, so we cannot guarantee absolute security.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, for significant changes, provide a more prominent notice. Please review this page periodically. Continued use of the Site after changes take effect means you accept the updated policy.

Contact Us

Questions, requests, or concerns about your privacy? Email us at joshuac1237@gmail.com and we’ll be glad to help.