Privacy Policy

Last updated: July 3, 2026

Spiritual Bread (“we,” “us,” or “our”) respects your privacy. This Privacy Policy explains what information we collect when you visit spiritualbread.com (the “Site”), how we use it, who we share it with, and the choices and rights you have. By using the Site, you agree to the practices described here.

We aim to collect as little personal information as possible. Spiritual Bread is a personal faith blog — not a store — so we do not sell your data, run advertising networks, or build advertising profiles about you.

Who We Are

Spiritual Bread is a Christian devotional blog operated by Joshua. For any privacy question, you can reach us by email at joshuac1237@gmail.com.

Information We Collect

Information you give us

• Newsletter sign-up. If you subscribe, we collect the email address (and optionally your first name) so we can send you the newsletter.
• Account & sign-in. To leave a comment, you sign in with Google or an email magic link. Our authentication provider (Supabase) stores your email address and a display name; your email is never shown publicly.
• Comments, testimonies & prayer requests. When you post a comment, share a testimony, or submit a prayer request, we store the name and content you provide (and, if you’re signed in, a link to your account). These may be shown publicly with the name you choose — except private prayer requests, which only we see. Email addresses are never published.
• Contact. If you email me, I receive whatever you choose to include (such as your name, email address, and message).

Information collected automatically

• Usage and log data. Like most websites, our hosting provider automatically records basic technical data when you visit — such as your IP address, browser type and version, device type, referring page, the pages you view, and the date and time of access. This is used for security, diagnostics, and understanding general traffic.
• Analytics & advertising. We do not currently use third-party analytics, advertising trackers, or cross-site profiling. If we ever add a privacy-friendly analytics tool, we’ll update this policy first.

We do not intentionally collect phone numbers, mailing addresses, payment details, or any special categories of sensitive personal data.

Cookies and Similar Technologies

The Site is a static blog and sets no advertising or tracking cookies. The limited browser storage we use is strictly functional:

• Sign-in session. If you sign in to comment, our authentication provider (Supabase) keeps your login session in your browser’s local storage so you don’t have to sign in on every page. Signing out clears it.
• Embedded videos. Some posts embed YouTube videos using YouTube’s privacy-enhanced youtube-nocookie.com mode. If you press play, Google may still set its own cookies under its policy — nothing is loaded from Google until you choose to play.

You can clear this storage anytime through your browser settings; doing so only means you’d need to sign in again. We honor browser “Do Not Track” and Global Privacy Control (GPC) signals where technically feasible.

Third-Party Services

We rely on a small number of trusted providers to run the Site. Each processes data only as needed to perform its service, under its own privacy policy:

• Hosting — Vercel. The Site runs on Vercel, which processes server logs (including IP addresses) to deliver and secure it.
• Database & accounts — Supabase. Comments, testimonies, prayer requests, and newsletter subscriptions are stored with Supabase, which also handles sign-in (Google and email magic-link authentication) and your account email.
• Email delivery — Resend. The newsletter and comment-reply notifications are sent through Resend, which processes the recipient email address in order to deliver them.
• Sign-in & embeds — Google. If you choose “Continue with Google,” Google handles that sign-in. Some posts also embed YouTube (a Google service) videos, loaded only when you play them.
• Fonts — self-hosted. Web fonts are served from our own site, so viewing pages does not send your data to a third-party font network.

We also link to external sites (for example, our Instagram and YouTube pages). We are not responsible for the privacy practices of those third parties; please review their policies.

How We Use Your Information

We use the information we collect to:

• Operate, maintain, secure, and improve the Site;
• Send the newsletter and related updates to people who have subscribed;
• Display and moderate comments;
• Respond to your messages and requests;
• Understand general usage trends so we can create better content;
• Comply with legal obligations and protect the rights and safety of our users and the Site.

We do not sell or rent your personal information, and we do not share it for cross-context behavioral advertising.

Legal Bases for Processing (EEA/UK)

If you are in the European Economic Area or the United Kingdom, we process your personal data on these legal bases: your consent (e.g., subscribing to the newsletter, which you may withdraw at any time), our legitimate interests (e.g., securing and improving the Site), and legal obligations.

Sharing and Disclosure

We share personal information only:

• With service providers (listed above) who process it on our behalf under appropriate confidentiality obligations;
• When required by law — to comply with a legal obligation, valid legal process, or lawful request from public authorities;
• To protect rights and safety — where necessary to protect the Site, our users, or the public, or to prevent wrongdoing.

Data Retention

We keep personal information only as long as needed for the purposes described here. Newsletter data is kept until you unsubscribe or ask us to delete it. Comments, testimonies, and prayer requests remain until you or we remove them; your sign-in account remains until you ask us to delete it. Server log data is retained for a limited period for security, unless we are legally required to keep it longer.

Your Privacy Rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you;
• Correct inaccurate information;
• Delete your information;
• Object to or restrict certain processing;
• Withdraw consent at any time (for example, by unsubscribing);
• Data portability, where applicable.

California residents (CCPA/CPRA): you have the right to know what personal information we collect, to request its deletion, to correct it, and to opt out of any “sale” or “sharing” — noting that we do not sell or share your personal information. We will not discriminate against you for exercising these rights.

To exercise any right, email joshuac1237@gmail.com. You can unsubscribe from the newsletter at any time using the link in any email. We may need to verify your identity before acting on a request, and we may retain certain information where the law allows or requires.

Children’s Privacy

The Site is intended for a general audience and is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us and we will delete it.

International Data Transfers

We are based in the United States, and our providers may process data in the United States and other countries. If you access the Site from outside these regions, your information may be transferred to and processed in a country whose data-protection laws differ from your own. Where required, we take steps to ensure appropriate safeguards for such transfers.

Security

We take reasonable technical and organizational measures to protect your information. However, no method of transmission over the Internet or electronic storage is completely secure, so we cannot guarantee absolute security.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, for significant changes, provide a more prominent notice. Please review this page periodically. Continued use of the Site after changes take effect means you accept the updated policy.

Contact Us

Questions, requests, or concerns about your privacy? Email us at joshuac1237@gmail.com and we’ll be glad to help.