Skip to content
Fasting Index

Privacy

Fasting Index collects an email address if you ask for the free guide or set a fast-end reminder, and nothing else. There are no advertising trackers on this site, no data is sold or shared for marketing, and you can have everything deleted by replying to any email we send you.

Who is responsible

Fasting Index is run by Tristan Grech, who is the data controller for the purposes of the UK GDPR and the EU GDPR.

What is collected

DataWhyLegal basis
Email address (free guide)To send you the guide you asked for, and — only if you tick the box — occasional emails about the site.Consent
Email address (fast-end reminder)To email you when the fast you set is due to end.Consent
Fast end time and timezoneTo send the reminder at the right moment in your local time. Stored with the reminder and discarded with it.Consent
Purchase email and payment recordTo deliver a paid download and to meet tax and accounting obligations. Card details are handled by Stripe and never reach this site.Contract, and legal obligation for the records
Server logsStandard request logs kept by the hosting provider for security and debugging. Not used to build a profile of you.Legitimate interests

Consent is granular and separate

Asking for a reminder does not sign you up to anything else. The reminder and any marketing email are two separate consents, recorded separately with the version of the wording you agreed to, and you can withdraw either without affecting the other. Reminder emails are sent because you asked for that specific reminder; they stop when the fast ends.

How long it is kept

Corrected on 15 August 2026, and it was wrong in our favour

This section previously said that reminder details and unconfirmed addresses were deleted automatically after 30 days, and that unsubscribing deleted your address. We checked those statements against the code that actually runs, and none of them were true. There is no automatic deletion anywhere in this system. What follows is what the software really does.

Who else sees it

Processors only, and only to do the thing you asked for: the hosting provider that serves this site, the server that stores subscriptions and sends email, and Stripe for payments. Your data is not sold, rented, or shared with advertisers or data brokers, and it is not used to train machine-learning models.

Cookies

This site sets no advertising or analytics cookies, which is why you have not been shown a cookie banner. The fasting tracker stores your current fast in your own browser’s local storage so it survives a page reload; that stays on your device and is never sent to us. Clearing your browser data clears it.

Your rights

Under the UK and EU GDPR you can ask for a copy of your data, ask for it to be corrected or deleted, withdraw consent at any time, and object to processing.

What works today is the unsubscribe link, and it stops email rather than erasing you. Every email we send carries a one-click unsubscribe link. It is a web link rather than an email reply, so it does not depend on us being reachable, and it works immediately: all email to you stops, and your record is marked as unsubscribed. Being precise about the limit of that — it does not delete your address. The record is retained with a flag on it.

We currently have no working inbox

For anything the unsubscribe link cannot do, we have to be straight with you: this domain sends email but cannot receive it. There is no mailbox, and a reply to an email we sent you does not reach a person. We would rather say that than print an address that fails silently. A working address is being arranged, and it will appear here and in the changelog the day it exists.

Put together with the retention position above, that leaves a real gap and we are not going to paper over it: there is currently no automated erasure and no working way to request it. You still have the right; we do not yet have a functioning route for you to use it. Both halves have been escalated to the person who can fix them. In the meantime you can complain to your national data protection authority — in the UK, the Information Commissioner’s Office — and that route does not depend on us being reachable.

Health data, specifically

This site deliberately does not ask for health information. There is no account, no profile, no symptom log and no questionnaire. What you read here is not recorded against your email address, and the entries you look at are not used to segment or target you. For a site about a health topic that is a design decision worth stating: the less of this that exists, the less there is to lose.

Last updated 15 August 2026. Changes are recorded in the changelog.