Privacy Policy

Effective October 21, 2026

This policy explains what information smoke.study (the "site"), run by Smoke & Study ("we", "us"), collects, how we use it, who we share it with, and how you can have it deleted. We are a small Bible study group; we collect as little as we need to run the site, we don't sell your information, and we don't show ads.

Information we collect

When you browse

• Usage statistics. We use Vercel Web Analytics to count page views. It does not use cookies and records only aggregate details such as the page visited, the referring site, your country, and your browser and device type. It does not identify you personally.
• Server logs. Our hosting provider, Vercel, keeps standard logs (such as IP address, browser type, and the page requested) for security and reliability.
• A display preference. If you collapse the sidebar, your browser remembers that choice in its local storage. It stays on your device and is never sent to us.

When you sign in

Sign-in is handled by Auth0, our authentication provider. You can sign in with Facebook, with Google, or with an email address and password.

• Facebook Login. With your permission, we receive your name, email address, and profile picture from Facebook (the "public profile" and "email" permissions). We don't request access to your friends, posts, or any other Facebook data, and we never post to Facebook for you.
• Google sign-in. With your permission, we receive your name, email address, and profile picture from Google.
• Email and password. We receive the email address you sign up with. Your password is stored by Auth0 in hashed form; we never see it.

Auth0 also keeps a record of your sign-ins (such as the time and IP address) for security.

To keep you signed in, we set an encrypted session cookie. It's needed for the site to work, and isn't used for tracking or advertising.

Information you add

• Your profile: a nickname, an "about" description, and a profile photo, if you choose to add them on your Account page.
• Studies and posts you author: if you write studies or posts, your name (or nickname) and profile photo are shown with them.
• Comments and likes: comments you write, and your likes and dislikes on posts, studies, lessons, and comments. Comments are shown with your name (or nickname) and profile photo. Likes and dislikes are shown only as totals; we don't show who voted.

How we use your information

We use your information only to:

• sign you in and keep your account secure;
• show your name, nickname, profile photo, and "about" description to other signed-in members, for example as the author of a study;
• show the author's nickname and profile photo publicly on posts they write;
• run, maintain, and improve the site; and
• respond to you when you contact us.

We don't use information from Facebook or Google for any other purpose, and we don't combine it with information from other sources.

Who can see your information

Posts on the home page are public, so anyone can see them, including the author's name (or nickname) and profile photo. Comments on posts are public too: anyone can read them along with the commenter's name (or nickname), but commenters' photos are shown only to signed-in members. Studies, lessons, their comments, and member profiles are visible only to signed-in members. Your email address is never shown to anyone.

Who we share it with

We don't sell, rent, or trade your information. We share it only with the service providers that run the site for us, and only as needed to do so:

• Auth0 (Okta): sign-in and account storage.
• Vercel: website hosting, analytics, and storage for uploaded images, including profile photos.
• MongoDB Atlas: our database, which stores profiles and study content.

We may also disclose information if the law requires it.

Third-party content

Some pages include content from other services: YouTube videos (shown in YouTube's privacy-enhanced mode), a Google Maps map, and links to other sites such as Logos Bible Software. When you play a video, view the map, or follow a link, that service may collect information under its own privacy policy.

Post, study, and lesson pages load Reftagger from Faithlife (the makers of Logos Bible Software), which turns Bible references into links and shows the verse text when you hover over them. Loading it lets Faithlife see standard request details such as your IP address, browser, and the page you're on, under Faithlife's privacy policy.

How long we keep it

We keep your account and profile information until you delete them or ask us to. Analytics data is aggregate and isn't tied to you. Our providers keep their logs for limited periods under their own policies.

Deleting your data

You can ask us to delete your account and all the personal information we hold about you at any time, whether you signed in with Facebook, Google, or an email address. Step-by-step instructions are also on our Data Deletion page.

1. Email mike@mhutchins.com from the email address on your account, with the subject "Delete my data". If you can't use that address, tell us which sign-in you used and we'll help verify your account another way.
2. We'll delete your account and sign-in records from Auth0, along with your profile, nickname, "about" description, and profile photo, within 30 days. We'll also delete your comments and your likes and dislikes. Where your name or photo appears as the author of a study or post, we'll remove it.
3. We'll email you to confirm once it's done.

If you signed in with Facebook, you can also stop the site from receiving any further information from Facebook: in Facebook, go to Settings & privacy → Settings → Apps and websites, find smoke.study, and select Remove. Removing the app stops future sharing; to delete what we already have, email us as described above.

Your choices and rights

• See or correct your information: your profile is shown on your Account page, where you can edit your nickname, description, and photo at any time.
• Get a copy: email us and we'll send you the personal information we hold about you.
• Delete it: see Deleting your data.

Depending on where you live, you may have additional rights under local law. Contact us to exercise them.

Security

We use HTTPS throughout, store only what we need, keep session cookies encrypted, and limit access to our systems to the people who run the site. No system is perfectly secure, but we work to protect your information.

Children

The site is not directed to children under 13, and we don't knowingly collect personal information from them. If you believe a child has given us information, contact us and we'll delete it.

Changes to this policy

If we change this policy, we'll update it here and change the effective date above. If the changes are significant, we'll let members know.

Contact us

Questions about this policy or your information: mike@mhutchins.com.