Privacy

This is a small site for a small business. It has no accounts, no logins, no tracking and no advertising, and most of what a privacy policy usually has to explain simply does not happen here.

What follows is a description of what the site actually does, written from its own source code. It is not legal advice and it has not been reviewed by a lawyer.

No cookies, and no third-party code

This site sets no cookies. It loads no analytics, no advertising tags, no social widgets, no embedded video and no fonts, maps or scripts from anybody else. Every image, stylesheet, font and script is served from this site's own address.

That is enforced rather than intended. The site ships a Content Security Policy that permits it to load from its own origin only, and the build fails if any page, or the policy itself, ever reaches another one.

Your cart stays in your browser

Adding something to the cart writes it to your own browser's local storage, under the name mms.cart.v2. It is not sent anywhere, it is not readable by us, and it never leaves your device unless you choose to send an order.

Clearing your browser's site data removes it completely. If you use the site with JavaScript turned off there is no cart and nothing is stored at all.

What happens when you send a message or an order

The contact form and the order form both post to FormSubmit, a form-relay service, which forwards the submission to nick@mmspice.com. The order form carries whatever you type into it, which is your name, your email address, your shipping address, the contents of your order and a gift message if you write one.

This site has no server and no database. Nothing you submit is stored here, and there is no order history, no customer record and no account to look anything up against.

Your submission does pass through FormSubmit on its way to that inbox, so what they keep and for how long is governed by their own privacy policy rather than by this one. If you would rather not use a form at all, email nick@mmspice.com directly and nothing but your mail provider sits in between.

Nothing is charged on this site. It cannot take payment, so no card details are ever asked for, entered or handled here.

Recipes, and Instagram

The recipe section is the owner's own Instagram posts, republished here with his permission as the person who posted them. Nothing on it is an embed. Each photograph is downloaded, re-encoded and served from this site, and each caption is his own text rendered as ordinary words on the page.

That means reading a recipe here sends no request to Instagram or Meta, loads none of their code, and cannot be used to recognise you. It also means this site holds a copy of that material. The copy is refreshed on a schedule from the account, and a post deleted on Instagram is removed from this site the next time that runs.

The mailing list

There is no mailing list yet. The signup is built but switched off, and while it is off no form is shown, nothing is collected and nothing is sent to any provider. If it is ever turned on, this page will say who runs it before it takes a single address.

Hosting

The site is served as static files from Azure Static Web Apps. Like any web host, its infrastructure handles the ordinary request information a browser sends in order to deliver a page. We do not receive that, analyse it or connect it to anything.

Questions, and removing your information

If you would like to know what was sent, or want an email or an order removed from the inbox, write to nick@mmspice.com and say so. Because nothing is stored here, that is a matter of deleting a message rather than a record.

If anything on this page turns out not to match what the site does, the site is the thing that is right and this page is the thing that needs fixing. Say so and it will be corrected.