Effective date: May 1, 2026
Last updated: May 1, 2026
PastaPeak (the “Site”) is operated by Marlow Bendrose. This Privacy Policy explains what information we collect when you visit the Site, how we use it, who we share it with, and the choices you have.
If anything in this policy is unclear, head to our contact page and ask. We will answer.
Who we are
- Site: pastapeak.com
- Operator: PastaPeak (sole proprietorship, Marlow Bendrose)
- Audience: primarily readers in the United States; the Site is accessible globally
- Contact for privacy questions: via the contact page
What we collect
We collect two kinds of information.
1. Information you give us directly
- Newsletter sign-up: your email address, plus the date of consent and the originating page. We do not collect your name unless you provide it.
- Comments: if comments are enabled on a post, your name (or pseudonym), email, optional website, and the comment text. The email is not displayed publicly; it is used to surface a Gravatar avatar if you have one.
- Contact form: the fields you fill in (typically name, email, message). Submissions are reviewed and may be retained for follow-up.
2. Information collected automatically
- Server logs: IP address (anonymized after intake), browser type, referring URL, pages viewed, and timestamps. Used for security, abuse prevention, and aggregate analytics.
- Cookies: small text files placed by your browser. See Cookies below.
- Analytics: if Google Analytics or a privacy-respecting equivalent is loaded, it captures pseudonymous usage data (page views, sessions, geographic region at country level). IP anonymization is enabled where the analytics provider supports it.
We do not knowingly collect information from anyone under 13. If you believe a child has submitted personal information through the Site, contact us and we will remove it.
How we use what we collect
- To deliver the requested service (send the newsletter you opted in to, post your comment, respond to your message).
- To keep the Site secure (rate-limit abuse, block malicious traffic, audit suspicious activity).
- To improve the Site (understand which articles are read, which calculators are used, which pages confuse readers).
- To comply with legal obligations (responding to lawful requests, enforcing our Terms of Use).
We do not sell your personal information. We do not rent it. We do not trade it.
Who we share with
We share data only with the third parties that help us run the Site. Each provider receives only the data needed to do its job.
- Hosting provider: stores the Site files and database (server logs, comments, newsletter list).
- Email service provider: sends the newsletter and any transactional emails.
- Analytics provider: receives pseudonymous usage data if loaded.
- Affiliate networks: when you click an affiliate link, the destination merchant may set its own cookies and track your visit per its own policy. See the Affiliate Disclosure for the full list.
If law enforcement or a court orders disclosure under valid legal process, we comply.
Cookies
We use cookies for three purposes:
- Essential: keep the Site working (session state, comment author memory, security tokens). These cannot be disabled without breaking core functionality.
- Analytics: measure aggregate traffic and content performance. Pseudonymous; no individual profiling.
- Affiliate attribution: when you click an outbound affiliate link, that merchant may set a cookie to credit a referral. We do not place these ourselves.
Most browsers let you block or delete cookies through their settings. Doing so will not break the Site, but it may sign you out of comment threads and reset analytics opt-outs.
Your choices and rights
Wherever you live, you can:
- Unsubscribe from the newsletter at any time using the link at the bottom of every email.
- Ask us what personal information we have on you. Send the request via the contact page.
- Ask us to correct or delete that information. We will comply within 30 days unless we have a legal reason to keep it.
- Withdraw consent for analytics by enabling your browser’s Do Not Track signal or using a content blocker. We honor it.
If you live in California
The California Consumer Privacy Act (CCPA / CPRA) gives you the right to know, delete, and opt out of “sale” of personal information. We do not sell personal information, so the opt-out is automatic. The other rights apply; reach out via the contact page and we will process your request.
If you live in the European Union, the United Kingdom, or another GDPR-aligned region
You have the right to access, correct, delete, restrict, port, and object. The lawful basis we rely on is consent (newsletter, comments, contact form) and legitimate interest (security, analytics). To exercise any right, write to us through the contact page.
Data retention
- Newsletter list: kept until you unsubscribe.
- Comments: kept indefinitely unless you ask us to delete them.
- Contact form messages: kept for up to 24 months for follow-up, then purged.
- Server logs: rotated within 90 days.
Security
We use HTTPS site-wide, content-security-policy headers, server-side rate limiting, and regular software updates. No system is impenetrable; if a breach affects your data, we will notify you and the relevant authorities as required by law.
Changes to this policy
If we update this policy, the “Last updated” date at the top will change. Material changes (new third party, new data category) will be flagged in the newsletter.
Contact
Questions, requests, complaints, all go to the contact page.