Privacy Policy

Browsing requires no login. There are no current accounts, orders, premium plans, profiles, comments, or newsletter forms. Email provides your address and message, used to reply, investigate a correction or access issue, process rights requests, and retain necessary accountability records.

Hosts and security systems may log IP address, time, URL, referrer, browser, device, operating system, response, and threat signals. These records deliver pages, debug failures, plan capacity, and defend the site. Online identifiers may count as personal information even when they do not name you.

Cookies, pixels, tags, and local storage can remember a browser or choice. No interest-based advertising currently uses them; necessary security or preferences may. Google Analytics is not installed in the active configuration. If added, this policy will describe Google’s role, events, identifiers, retention, and regional consent. Network ads are also not running. Before launch, the actual provider and its cookies, personalization, recipients, retention, and opt-outs will be stated.

Data is used for operation, security, correspondence, editorial records, terms, and legal duties. Email is not silently turned into marketing consent. Hosting, email, backup, security, and maintenance vendors may handle limited information under their roles. Disclosure may follow lawful process, credible threats, or a protected ownership transfer. We do not rent addresses or sell personal data for cash.

GDPR and UK GDPR bases may include legitimate interests, requested steps, consent, and legal obligation. Logs remain for proportionate operational periods; correspondence remains while needed for a request, correction, permission, complaint, or abuse record. Required safeguards should protect restricted international transfers. Reasonable controls cannot guarantee perfect security.

Depending on residence, you may access, copy, correct, delete, restrict, port, object, withdraw consent, appeal, or complain. Covered U.S. residents may know categories, sources, purposes, and recipients and opt out of covered sale, sharing, targeting, or profiling. We do not discriminate and honor binding browser signals where applicable. Email “Privacy request” to hello (at) breakfastonrepeat.com; identity or agent authority may be verified.

The general-audience site is not directed to children under 13 and does not knowingly solicit their data. Guardians may report concerns. Outside links follow their own policies. Changes to features, vendors, or law will produce a revised date and, where appropriate, a prominent notice.

Current systems may handle identifiers such as IP and email address, Internet activity such as URLs and referrers, device information, approximate location inferred by infrastructure, and communication content. The sources are readers, browsers or devices, and operating vendors. Business purposes are delivery, security, troubleshooting, correspondence, correction records, and legal compliance. The site does not currently use these categories for targeted advertising or combine them into customer profiles.

Browser menus usually allow viewing, deleting, or blocking stored site data. A choice is often limited to one browser and device. Content blockers or private mode can provide more control but may affect technical functions. When advertising eventually begins, opting out of personalization may leave ads chosen from page context. Where consent is required, continued browsing alone will not be treated as affirmative permission for nonessential advertising cookies.

Breakfast on Repeat does not request precise location, government identifiers, financial credentials, health files, biometric data, or private information about religious belief, race, ethnicity, or sexual orientation. Please do not email it. Interest in an egg, gluten-free, or meal-prep recipe is not used by the current publication to infer health status. No automated system makes decisions with legal or similarly significant effects about a visitor.

The verification requested will be proportionate to the data involved. If a request cannot be granted, the reply will identify the reason and appeal process required by the controlling law. EEA and UK residents can contact their competent supervisory authority. A minimal log of the request and result may be retained to show compliance, protect against fraud, and prevent properly deleted data from being restored during routine support work.

Sending Claire a breakfast question does not subscribe the sender to marketing. If a newsletter becomes available, the signup will name or link to the email provider’s role, describe the kind of messages requested, and explain any open or click measurement. Every promotional email will contain an unsubscribe control. A minimal suppression record can be kept to respect that choice even after the active subscription data is removed.

A recipe can link to food-safety authorities, manufacturers, retailers, or other publishers. Their websites operate under their own notices. Breakfast on Repeat is not responsible for their collection merely because it provided a link. If a video, social post, or other embedded tool is added and sends data directly to its provider, the publication will disclose that behavior and seek consent first where the law requires it.

The site may use totals or de-identified information that cannot reasonably be tied back to an individual to understand reliability and broad reader demand. It will not intentionally re-identify that information. A future material change will not be justified by assuming that an earlier visit constituted unlimited consent. The updated notice will describe the new purpose, and a new choice will be requested when the legal basis is consent. Conventional Do Not Track signals are handled according to applicable law and actual technical capability.