Trust, Privacy & Security

What we collect

We collect only what we need to run pop-ups and tour dates: your name and email if you RSVP to an event, the email you submit to join the Black Book, and basic technical logs from your browser. We don't sell, rent, or trade your information.

How we use it

• RSVP details are used only to manage attendance at the specific event you signed up for.
• Black Book emails receive occasional updates about new bakes, tour dates, and editorial drops. You can unsubscribe at any time using the link in any message.
• We do not use your information for advertising or third-party profiling.

How we secure it

• All traffic is served over HTTPS.
• Data is stored in a managed Postgres database with row-level security policies that restrict access to authorized roles.
• Administrative actions are gated behind authenticated, role-checked endpoints; service credentials never reach the browser.
• Outbound URLs accepted into our system are restricted to http/https schemes.

Your choices

You can request a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it. To unsubscribe from the Black Book, use the link at the bottom of any email or contact us directly.

Reporting a security issue

If you believe you've found a security vulnerability, please email matt@gallowshumorbake.xyz with details. We'll acknowledge your report and work to resolve valid issues promptly.