Your information.

The Lunch Lady operates footballlunchlady.com. This notice describes the public website, The Lunch Line and the contact form. Last updated September 19, 2026.

The Lunch Line.

When you enter your email and choose Join The Lunch Line, you agree to receive the newsletter. New eligible signups subscribe without an email confirmation. We keep your subscription status, the consent wording version and signup and opt-out records. Earlier signups used confirmation links, and those records remain. A new form submission does not override an existing unsubscribe or delivery suppression. The newsletter includes kitchen stories, food ideas and sponsor features, with one issue every two weeks.

You can unsubscribe through the link in our emails without an account. We keep the minimum records needed to honor opt-outs, delivery complaints and suppressed addresses. An inquiry does not sign you up for the newsletter. We do not sell your email address or give sponsors our subscriber list.

Contact messages.

The contact form collects your name, email address, inquiry category and message. It is intended for adults. Please do not include student names, private health information or other sensitive details. Messages go to the operator in a daily email summary with a text attachment containing the full messages. We do not send an automatic acknowledgment email.

Spam protection.

We use Cloudflare Turnstile to check form submissions. Cloudflare processes network and device information for that check under its Turnstile Privacy Addendum. Our application uses keyed hashes of network identifiers and email addresses to enforce submission limits. Hosting services may process IP addresses and request information for delivery, security and troubleshooting.

Services we use.

Vercel hosts the website, Supabase stores private subscription and inquiry records, and Resend delivers email and maintains newsletter contacts. These services process information needed to perform those tasks. Contact summaries also pass through the operator's email service. Information may be processed outside your state or country.

We do not install advertising pixels or session replay. We have not enabled email open or click tracking. Necessary security features and external services may process technical information. Sponsor links take you to separate websites with their own privacy practices.

Website traffic and optional detail.

We count views of recognized public food, recipe, story and signup pages without an approval popup. Basic counts use a page name, broad device category, coarse source label and a random identifier for that single page load. The identifier is not saved in browser storage and does not connect visits across pages or identify unique people. We keep a page-specific record to avoid counting the same request twice. Basic counts do not record clicks, scrolling or form contents.

Detailed analytics is optional through Analytics choices at the bottom of the page. If you choose Allow detailed analytics, we also measure recognized link and button clicks and how far down a page you scroll. This uses random browser and session identifiers, stored as keyed versions in our private database. Earlier choices to allow detailed analytics remain in effect until they expire or you change them.

Choose Basic counts only to stop detailed tracking, or Turn off analytics to stop both kinds. We honor existing declines, Global Privacy Control and Do Not Track signals for both. Choices are remembered for up to 180 days. Optional browser identifiers expire after 30 days, and sessions reset after 30 minutes without a new page visit. Withdrawing detail removes those browser identifiers and stops future detailed collection. It cannot remove previously received records or recall requests already sent.

Neither form contents, email addresses, keystrokes, recordings, full referrer URLs nor URL parameters are saved in analytics records. Counts are not linked to newsletter addresses. Our administrator sees aggregate reports, and daily cleanup removes analytics activity older than 30 days. Hosting services still process request information for delivery and security. Keyed network identifiers used to limit abuse are separate from visitor estimates and expire separately. Analytics choices do not affect newsletter consent or Instagram's own privacy practices.

Saved recipes and search.

When you save a recipe, its identifier is kept in this browser so you can find it again. There is no account or cross-device sync, and the saved list is not sent to our server. Remove recipes individually or clear browser data to erase the list. If browser storage is unavailable, saves last only for the current visit. Search terms appear in the page URL so you can refresh or share a search. Our analytics records exclude those terms, though hosting services may process URLs in request logs.

Recipe videos.

Embedded Instagram players can load as you scroll near them, before you press play. Loading a player connects your browser to Instagram (Meta), which can receive your IP address and browser information and use cookies under its Privacy Policy. Videos do not autoplay. Printing excludes the players but does not erase information already sent to Instagram.

How long information stays.

Previously issued confirmation links expire after 24 hours. Daily cleanup removes expired tokens, website copies of inquiries older than 30 days and temporary delivery details older than 30 days. It also removes short-lived abuse records and anonymizes abandoned, unconfirmed addresses after 30 days. Subscribed addresses stay on the list until you leave, and consent and suppression records remain to preserve your choices.

Deleting a website record does not automatically erase an email already delivered to an inbox. Email copies, service logs and backups have separate retention periods. We review privacy requests across the relevant services rather than promising immediate deletion from every copy.

Your choices.

Use the contact form to request access, correction or deletion of your information. We may ask you to verify that the address is yours. You can also reply to a Lunch Line email. Some consent and suppression records may need to remain so we do not contact you again.

Volunteer access.

The volunteer desk at spalunchlady.com is a separate service. This website links to it and does not read or change volunteer records.

Preview versions.

When a page displays the website preview banner, its forms only demonstrate the experience. They do not save submissions or send email. Please use sample information in previews.