Privacy Policy

Slowly Eating is committed to protecting your personal information. This Privacy Policy explains what data we collect when you use slowlyeating.com, how we use it, and the choices you have. Please read it carefully before creating an account or using our community features.

Information you provide directly

• Account details — your name and email address when you sign up.
• Password — stored as a one-way cryptographic hash; we never store your plain-text password.
• Community posts — text content, optional meal name, chew count, and photos (up to 5 MB) that you choose to share publicly.
• Progress entries — daily logs including chew count, meal name, food eaten, mood, and optional weight (kg) that you record in your private 40-Day Challenge tracker.
• Milestone messages — optional personal notes you attach when sharing a milestone to the community.

Information collected automatically

• Session data — a secure session token stored in an HTTP-only cookie to keep you signed in.
• Analytics — with your consent, we collect anonymised click events through our first-party analytics system (GoDaddy Signals / C2). No data is sent to third-party advertising networks.
• Log data — standard server logs (IP address, browser type, pages visited, timestamps) retained for up to 30 days for security and debugging.

Optional social sign-in

If you choose to sign in with Google or Facebook, we receive your name and email address from that provider. We do not receive your social media password or post on your behalf.

• To create and manage your account and authenticate your sessions.
• To display your community posts and milestones to other members (only what you choose to share).
• To store your private progress entries — visible only to you.
• To detect and display milestone achievements within your tracker.
• To send transactional emails (e.g. password reset) — we do not send marketing emails without your separate consent.
• To improve the platform using aggregated, anonymised analytics data (with your consent).
• To detect and prevent fraud, abuse, or security incidents.

We do not sell your personal data. We do not use your data for targeted advertising.

We use the following cookies and local storage items:

• Session cookie — essential; keeps you signed in. Cannot be declined without losing access to your account.
• Analytics consent — stored in localStorage to remember your Accept/Decline choice for 365 days.
• C2 analytics — first-party click-event tracking, loaded only after you accept the cookie banner.

You can withdraw your analytics consent at any time by clicking "Manage cookies" in the footer, which will re-show the consent banner.

We share your data only in these limited circumstances:

• Infrastructure providers — GoDaddy hosts the application and database. Your data is stored on servers within their infrastructure and subject to their security standards.
• Authentication providers — if you use Google or Facebook sign-in, your name and email are shared with us by that provider under their own privacy policies.
• Legal requirements — we may disclose data if required by law, court order, or to protect the safety of our users.

We do not share your data with advertisers, data brokers, or any other third parties.

• Account data is retained for as long as your account is active.
• Community posts and shared milestones remain visible until you delete them or your account.
• Private progress entries are retained until you delete them or your account.
• Server logs are deleted after 30 days.
• On account deletion, all personal data is permanently removed within 30 days.

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you.
• Correction — ask us to correct inaccurate data.
• Deletion — request deletion of your account and all associated data.
• Portability — request your data in a machine-readable format.
• Withdraw consent — withdraw analytics consent at any time via the cookie banner.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

Slowly Eating is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

We implement industry-standard security measures including HTTPS encryption in transit, bcrypt password hashing, HTTP-only session cookies, and access controls on our database. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security but we take reasonable precautions to protect your data.

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. Continued use of the platform after changes constitutes acceptance of the updated policy. For significant changes, we will notify registered members by email.

If you have any questions about this Privacy Policy or how we handle your data, please contact us at: