Privacy notice

Who is responsible for your data

This site is operated by Kevin Mortensen, Norway, who is the data controller for the newsletter and voting data described on this page. Questions or deletion requests: use the contact form at scripturefoods.com/contact.

What we collect, why, and on what legal basis

Email guide and newsletter: your email address, your answer to “do you follow the Old Testament food laws?” (yes, no, or exploring), the page you signed up from, and the date. We use it to send the guide you asked for and the occasional recipe, verse and shopping list, and to keep that content relevant to your stance. Legal basis: your consent, which you can withdraw at any time.

Purchases of The 21-Day Daniel Fast Companion: your email address, the transaction reference, the amount and currency, any promotion code used, and a download token with its usage count. We use this to deliver the file you bought, to honour refunds, and to keep records. Legal basis: performance of our contract with you, and our legal obligation to keep sales records.

Anonymous voting and law-choice signals: a random identifier generated in your browser, stored alongside your votes. It contains no name, email or account, and exists only so each browser counts once. Results are shown as totals only. Your Leviticus 11 Kitchen Test score is stored the same way — the percentage only, against that same anonymous identifier, with none of your individual answers. Legal basis: our legitimate interest in showing aggregate reader signals.

Support messages: if you write to us through the contact form, we keep the message, your email address, the topic you chose and any order reference so we can reply. Legal basis: legitimate interest in answering you.

Browsing ScriptureFoods needs no account. We do not run advertising trackers and do not build advertising profiles.

Purchases

When you buy the Companion, the checkout is operated by Paddle.com as Merchant of Record — Paddle receives your payment details directly, and we never see your card number. Paddle shares with us your email address and the transaction reference, which we store in order to deliver your download, honour the refund promise, and keep required accounting records. We keep purchase records for as long as bookkeeping law requires, and the download link remains tied to your purchase so we can re-send it if you lose it. Paddle's own privacy policy: paddle.com/legal/privacy.

Who else we share data with

Service providers acting on our instructions: our hosting and database provider, and the email service that delivers our messages. Professional advisers (for example accounting or legal) where necessary. Public authorities where the law requires it. We never sell, rent or share your data with advertisers.

Our providers may process data outside Norway and the EEA. Where that happens, transfers rely on adequacy decisions or the EU Standard Contractual Clauses.

How long we keep it

Newsletter data: for as long as you stay subscribed, and up to 12 months after you unsubscribe so we do not email you again by mistake — then deleted.

Purchase records: retained for as long as required by Norwegian bookkeeping law (currently five years after the end of the financial year), then deleted or anonymised.

Anonymous vote identifiers and tallies: kept indefinitely as aggregate statistics; they are not linked to an identifiable person.

Support messages: up to 24 months after the conversation ends.

Security

We use appropriate technical and organisational measures: encryption in transit (HTTPS), encryption at rest for our database, access controls limiting who can read personal data, row-level security on our tables, and paid files stored in a private bucket served only through single-purpose, cryptographically random download tokens. No system is perfectly secure, but we keep the data we hold deliberately minimal.

Cookies and local storage

We use no advertising or analytics cookies. We do store a few values in your browser's local storage so the site behaves sensibly: your Old Testament law preference, your anonymous voting identifier, and flags recording that you have seen or dismissed the guide prompt. These are essential to the features you use and can be cleared at any time in your browser settings.

Your rights

Under the GDPR you can ask us for access to your data, correction of it, erasure, restriction of processing, portability, and you can object to processing based on legitimate interests. Where processing rests on consent you can withdraw it at any time. Send the request through scripturefoods.com/contact and we will respond within one month.

Every email carries an unsubscribe link that stops all future sends immediately. If you are unhappy with how we handle your data you can complain to the Norwegian Data Protection Authority (Datatilsynet) or to the supervisory authority where you live.