Privacy Policy

This policy explains how FIH LLC ("we", "us") handles personal data on neils.com (the "site"), a private personal site of recipes, notes and journal entries. The site has no shop, no newsletter, no comments and no user profiles, so it collects very little. For any question or request, use our contact form.

1. What we collect

• Sign-in. When you sign in, the email address and password you type are sent to the site and checked against the access list. They are not saved to a database. If they match, the site sets an access cookie in your browser.
• Analytics. The site uses Google Analytics 4 on every page, including the sign-in page. It sets cookies and collects information such as pages viewed, referring site, approximate location derived from your IP address, device and browser type, and time on page.
• Server logs. The hosting provider automatically records technical data such as IP address, browser type, the page requested and the time, for security and reliability. Failed sign-in attempts may appear in these logs.
• Embedded playlists.Playlist pages embed Spotify players. When one loads, Spotify receives your IP address and browser data and may set its own cookies, under Spotify's privacy policy.

If you contact us through the contact form, that form is on npb.com and what you send is handled under that site's privacy policy.

2. Cookies and local storage

• Access cookie ("neils-auth"): strictly necessary; it keeps you signed in for up to 30 days. It is HTTP-only and holds no personal details.
• Google Analytics cookies (names beginning with "_ga"): measure visits and usually last up to two years.
• Theme preference: your light or dark mode choice is kept in your browser's local storage and never sent to us.
• Spotify cookies: only on pages with an embedded player, set by Spotify.

You can block or delete cookies in your browser settings. Blocking the access cookie means you cannot stay signed in; the rest of the site works without the others.

3. How we use it, and legal bases

• To control access to the private site: our legitimate interest in keeping it private.
• To understand how the site is used: our legitimate interest, or your consent where the law requires consent for analytics cookies.
• To keep the site secure and investigate misuse: our legitimate interest.
• To meet legal obligations and respond to lawful requests.

We do not use your data for advertising, profiling or automated decisions about you.

4. Who receives it

Only service providers that process data for us:

• website hosting, which serves the site and keeps server logs;
• Google, as the provider of Google Analytics;
• Spotify, when you load a page with an embedded playlist.

We may also disclose information if the law requires it or to protect rights and safety.

We do not sell your personal informationand do not use it for cross-context behavioural advertising. Because Google receives analytics data, some state privacy laws could treat that as "sharing"; you can stop it by blocking cookies for this site or installing Google's Analytics opt-out browser add-on.

5. Retention

Sign-in details are not stored. The access cookie expires after 30 days or when you clear it. Google Analytics data is kept for the retention period set in the analytics account (no more than 14 months for detailed data). Server logs are kept for the short period set by the hosting provider.

6. Security and international transfers

The site is served only over encrypted HTTPS connections, and its private pages require sign-in. No method of transmission or storage is completely secure. We are based in the United States, and our service providers process data in the United States and elsewhere. Where data comes from the EU, UK or Switzerland, transfers rely on safeguards such as Standard Contractual Clauses or the provider's certification under the EU-US Data Privacy Framework.

7. Your rights

Depending on where you live, you may have the right to access, correct or delete your personal data, to receive a copy of it, to object to or restrict its use, to withdraw consent, and to complain to your data protection authority. California residents also have the right to know what is collected, to opt out of sale or sharing, and not to be treated differently for using these rights. To make a request, use our contact form and say what you would like; we may need to confirm your identity, and we will respond within the time the law requires.

8. Children

The site is not directed to children, and we do not knowingly collect personal data from anyone under 16. If you believe we have, let us know and we will delete it.

9. Do Not Track

There is no agreed standard for browser Do Not Track signals, so the site does not respond to them. You can control analytics with the cookie and opt-out choices above.

10. Changes

We may update this policy by posting a new version with a new date at the top. See also the Terms of Use.