Privacy
Fasting Index collects an email address if you ask for the free guide or set a fast-end reminder, and nothing else. There are no advertising trackers on this site, no data is sold or shared for marketing, and you can have everything deleted by replying to any email we send you.
Who is responsible
Fasting Index is run by Tristan Grech, who is the data controller for the purposes of the UK GDPR and the EU GDPR.
What is collected
| Data | Why | Legal basis |
|---|---|---|
| Email address (free guide) | To send you the guide you asked for, and — only if you tick the box — occasional emails about the site. | Consent |
| Email address (fast-end reminder) | To email you when the fast you set is due to end. | Consent |
| Fast end time and timezone | To send the reminder at the right moment in your local time. Stored with the reminder and discarded with it. | Consent |
| Purchase email and payment record | To deliver a paid download and to meet tax and accounting obligations. Card details are handled by Stripe and never reach this site. | Contract, and legal obligation for the records |
| Server logs | Standard request logs kept by the hosting provider for security and debugging. Not used to build a profile of you. | Legitimate interests |
Consent is granular and separate
Asking for a reminder does not sign you up to anything else. The reminder and any marketing email are two separate consents, recorded separately with the version of the wording you agreed to, and you can withdraw either without affecting the other. Reminder emails are sent because you asked for that specific reminder; they stop when the fast ends.
How long it is kept
Corrected on 15 August 2026, and it was wrong in our favour
- Your email address is kept indefinitely. Nothing deletes it on a timer, because no such timer exists.
- Unsubscribing stops all email to you immediately and marks your record as unsubscribed. It does not erase your address — the record is retained with an unsubscribed flag on it.
- Reminder records are marked as sent once the email goes out. They are not deleted afterwards.
- An address that never confirms is retained too. It simply never receives anything beyond the reminder it was given.
- Purchase records are held by Stripe under their retention terms, and we keep what tax law requires — currently six years in the UK.
Who else sees it
Processors only, and only to do the thing you asked for: the hosting provider that serves this site, the server that stores subscriptions and sends email, and Stripe for payments. Your data is not sold, rented, or shared with advertisers or data brokers, and it is not used to train machine-learning models.
Cookies
This site sets no advertising or analytics cookies, which is why you have not been shown a cookie banner. The fasting tracker stores your current fast in your own browser’s local storage so it survives a page reload; that stays on your device and is never sent to us. Clearing your browser data clears it.
Your rights
Under the UK and EU GDPR you can ask for a copy of your data, ask for it to be corrected or deleted, withdraw consent at any time, and object to processing.
What works today is the unsubscribe link, and it stops email rather than erasing you. Every email we send carries a one-click unsubscribe link. It is a web link rather than an email reply, so it does not depend on us being reachable, and it works immediately: all email to you stops, and your record is marked as unsubscribed. Being precise about the limit of that — it does not delete your address. The record is retained with a flag on it.
We currently have no working inbox
Put together with the retention position above, that leaves a real gap and we are not going to paper over it: there is currently no automated erasure and no working way to request it. You still have the right; we do not yet have a functioning route for you to use it. Both halves have been escalated to the person who can fix them. In the meantime you can complain to your national data protection authority — in the UK, the Information Commissioner’s Office — and that route does not depend on us being reachable.
Health data, specifically
This site deliberately does not ask for health information. There is no account, no profile, no symptom log and no questionnaire. What you read here is not recorded against your email address, and the entries you look at are not used to segment or target you. For a site about a health topic that is a design decision worth stating: the less of this that exists, the less there is to lose.
Last updated 15 August 2026. Changes are recorded in the changelog.