Privacy Policy

Who we are

Few Bites is a small independent publisher of food guidance for people on GLP-1 medicines, run by Mohd Absar Bhat, Eidgah, Srinagar, Jammu and Kashmir 190002, India, who is responsible for the data described here. A person reads [email protected], and that is the address for everything on this page.

This page explains what we collect when you use fewbites.com, join the email list or buy a guide, why, where it sits, and how to have it deleted. The short version for the list is on Your health data.

What we collect

When you join the email list

• Your email address. Required. It is how we send the starter kit and the emails you signed up for.
• Where you joined. The page you came from, a short code for the pin or link that brought you (for example w01-03), the kind of visit (Pinterest, search, email, direct or other) and the version of the form. Codes only, never your name.
• Your confirmation. Our email service records when you signed up and when you tapped Confirm. That two-step sign-up is how you consent. The wording you agreed to is kept with a version number, so we can show what you saw.
• What happens with our emails. Whether an email was opened and which links were tapped, as our email service records it. Links in our emails can carry a short mark (fb=) and the email’s code, so the site can hide a sign-up box from someone already on the list. They never carry your address.
• Tags. Plain labels on your list record, such as which guides you bought, whether you asked for “no offers”, and which emails you have already been sent.

Until our email service is connected, new sign-ups are saved through Google Apps Script into a private Google Sheet: your email address, the page you joined from, campaign tags from the link you arrived on, your browser’s user agent (to spot automated sign-ups) and the exact consent wording you saw, with the time. No IP address is stored. When Kit is connected, these records move to Kit and the user-agent column is deleted.

Our email service, Kit, also sees your IP address when you sign up and keeps a rough location from it. We don’t store your IP address ourselves. Kit’s form may use Google reCAPTCHA to stop automated sign-ups.

When you are only reading

• Cloudflare. Every page is delivered through Cloudflare, which necessarily sees your IP address to send the page and to block attacks. Cloudflare Web Analytics counts page views and page speed without cookies.
• Google Tag Manager and Google Analytics. These set cookies and record standard analytics: pages viewed, approximate location, device type, how you arrived, whether a sign-up card came into view, whether you started or sent the sign-up form, and whether an offer was shown or tapped. They never receive your email address.
• Counting taps on our own guides. A tap on a link to one of our guides goes through a short fewbites.com address (/go/) that counts the tap and which page or email it came from, then sends you on to the checkout. It records no address or name and filters out obvious robots.
• Your browser’s storage. A few small values kept in your browser: campaign tags from the link you arrived on, whether you closed the bar at the bottom of the screen, a short note that you signed up (so it can be counted on the next page and then deleted), whether you are on the list, and a test switch we use ourselves. None of these are advertising identifiers.

What we never ask

We never ask about your medication, dose, conditions or weight, and there is nowhere on the site to tell us. If you mention any of it in an email to us, we answer with food ideas and delete the health details once we have. Joining the list does tell us you’re interested in eating on a GLP-1 medicine; Your health data explains how we treat that.

Why we collect it

Four reasons, and no others. To send you the emails you asked for: the starter kit, food emails, short how-tos for anything you buy, and now and then a note about Few Bites’ own paid guides. To stop selling you something you already own. To keep fake sign-ups off the list. And to work out which pins, pages and emails are useful, counted in totals, so we make more of those.

We never sell your data and never use it for ads. There is no advertising pixel on fewbites.com, we don’t run retargeting, and we don’t try to identify you across other websites.

Who handles it for us

These service providers process data on our behalf, each only for its job:

• Kit (kit.com): holds the email list and sends the emails. We keep its features that add your identity to links, its creator network and its newsletter recommendations switched off.
• Cloudflare: delivers the website, counts /go/ taps, and runs the small service that tags a buyer on the list and keeps our sales ledger (below).
• GitHub: runs the scheduled job that tells Kit which email goes to whom. It handles list records only while that job runs and keeps no copy; its logs hold counts, not addresses.
• Google: Tag Manager and Analytics (site visits, never your address), and, until Kit is connected, the Apps Script and private Google Sheet that hold new sign-ups.
• Payhip and PayPal: checkout, if you buy something (next section).

We will disclose information only if we are legally required to by a valid order from a competent authority.

When you buy something

Our guides are sold through Payhip, and payment is taken by PayPal (including cards through PayPal). What you type at checkout goes to them, under their own privacy policies. Payhip’s checkout pages run Payhip’s own analytics and advertising tags, including Google Analytics and Meta’s pixel; we keep the product descriptions there free of health words for that reason.

When a sale happens, Payhip tells our small service at Cloudflare. If the buyer’s address is on our list, we add a “bought” tag so you get the how-to emails and stop getting offers for that guide. If it isn’t on the list, we keep only a one-way scrambled code (a hash) of the address for 30 days, in case you join soon after, then delete it. We never add anyone to the list because they bought something.

Our sales ledger keeps, for each order, a scrambled order code, what was bought, the amounts, any coupon, and the codes for the pin, page and kind of visit that first brought the buyer to the list. It holds no email address and no name, and is kept for 24 months.

How long we keep it

Your list record stays until you unsubscribe or ask us to delete it. When you unsubscribe we keep the bare fact that your address unsubscribed, because that is what stops it being emailed again; ask for deletion if you want even that gone. Detailed analytics data is kept for at most 14 months. The sales ledger is kept for 24 months; Payhip and PayPal keep purchase records as the law requires them to.

Your choices

• Unsubscribe. Every email has an unsubscribe link at the bottom, and it works at once.
• Stop sales emails only. Reply no offers to any email. We stop sending you emails about our paid guides within 10 business days (usually within two), and you keep the food emails.
• Ask for a copy. Email [email protected] and we will send you everything we hold against your address.
• Ask for deletion. Email the same address with the word delete. We remove your record from the list and anything we hold about you within 30 days (45 at most), and confirm when it is done. You don’t need to give a reason. What we can’t delete: purchase and tax records the law makes Payhip, PayPal or us keep.
• Correct something. Reply to any email and tell us what is wrong.
• Turn off analytics. A tracker blocker, or a browser that blocks trackers by default, stops Google Tag Manager loading. The site works normally without it.

If you signed up before 25 October 2026

Earlier sign-up boxes and, from 19 October 2026 until 25 October 2026, a three-question check on costs saved sign-ups to a Google Sheet through Google Apps Script. Those records hold the email address and, for some, a first name, the page joined from, the browser’s user agent, campaign tags, the consent sentence and its time; until 19 October 2026 they also held an IP address and country looked up through ipapi.co. The check’s answers never left your browser. That check and its paid links are switched off.

If you consented then, we may move your address to Kit and send you one email explaining the change, with links to this page and to Your health data, and an unsubscribe link. We move only the address and the codes for where you joined, never a first name or user agent, and we then delete the user-agent, IP and country columns from the Sheet. Before 19 October 2026 our Terms said we did not send other companies’ advertising; that promise stands for everyone, and we no longer send any.

Where in the world this happens

Our service providers (Kit, Cloudflare, GitHub, Google, Payhip and PayPal) may process your information in the United States and in other countries, which may have different data protection rules from where you live. You can have your whole record deleted at any time; see Your choices.

Children

Few Bites is written for adults and is not directed at children. We do not knowingly collect information from anyone under 16. If you believe a child has given us their email address, write to us and we will remove it.

Security, honestly stated

Access to every account that holds your data is protected by strong passwords and two-factor authentication, and data moves over encrypted connections. No small publisher can promise perfect security, and we won’t pretend otherwise. This is one reason we collect as little as we do.

Changes to this policy

If we change how we handle your information, we will update this page and move the effective date at the top. Material changes also go out to the email list.

Contact

Questions, requests, or complaints: [email protected]

If you are in the UK or EU and are unhappy with our response, you have the right to complain to your local data protection authority.