Privacy

Effective October 2, 2026 · Last updated October 2, 2026. Some correction and deletion requests require manual review and provider coordination.

Who operates this site

American Supra is a project of First Things Foundation. This page concerns the American Supra public website.

What information we collect

Host requests include your contact details and the gathering information you choose to share. Partner requests include your contact details, operating context and plans. Contact messages include your name, email and message. The Tamada Vineyard wait list asks for your name, email and permission to contact you about the Vineyard and formation opportunities.

Please do not send payment details, passwords, government identifiers or sensitive personal information through these forms.

Why we use it

Host, Partner and Contact information is used to understand and respond to the request. Tamada wait-list permission is limited to Tamada Vineyard and future formation contact. Submitting an inquiry does not subscribe you to unrelated marketing.

Newsletter signup is a separate, optional choice. When available, the email address you submit with consent is sent to Mailchimp so American Supra can send occasional newsletter messages. New signups use Mailchimp’s confirmation process; an address is not treated as subscribed until that process is complete. You may unsubscribe using the link in any newsletter. Newsletter addresses are not stored in this site, its repository or Pages CMS.

Storage and providers

Public inquiries are sent to our intake service hosted by Cloudflare and stored in a private Cloudflare D1 database. The database is separate from website content and is not stored in Pages CMS or the public website repository.

For Host, Partner and Contact inquiries, the site keeps the durable record first and then uses Resend to send an operator notification to authorized American Supra staff. The email is a working copy for follow-up; the stored inquiry remains the authoritative record. Tamada Vineyard interest follows its separate future-contact purpose and does not create the same ordinary operator notification.

Cloudflare also processes ordinary infrastructure information needed to host and secure the service, such as request, deployment and operational data.

Mailchimp is the newsletter provider. Mailchimp holds newsletter addresses and subscription or confirmation status under its service and retention settings. The website does not place newsletter addresses in browser storage, analytics or operational logs.

Giving through Zeffy

The Donate page embeds Zeffy’s form for the American Supra Project campaign under First Things Foundation’s Zeffy account. Gifts are received by First Things Foundation. Payment details are entered into Zeffy’s service and are not submitted through American Supra’s inquiry or newsletter forms. See Zeffy’s privacy policy (opens a new tab) for its data practices.

Cookies, storage and analytics

The American Supra public-site code does not add behavioral analytics, advertising pixels, session replay or browser profiling. The current Public Web code does not use browser local storage, session storage, IndexedDB or first-party cookies. Inquiry answers stay in page memory while you complete the form and are sent only when you submit it.

The embedded Zeffy donation provider operates within its own cross-origin context. Its cookies, storage and transaction behavior are governed by Zeffy and any providers it uses inside that experience.

Retention and requests

Chase Mudd is responsible for privacy requests and the Tamada interest list. For privacy questions, correction or deletion requests, or to withdraw permission for Tamada Vineyard and formation contact, email josephmudd@first-things.org.

The approved starting policy calls for reviewing closed inquiries for deletion 12 months after the last substantive contact, removing stale Tamada interest after 24 months without renewed interest with an annual review, and keeping private exports no longer than 30 days. Required business records and documented exceptions follow their own applicable rules.

Correction, opt-out and deletion handling is currently a manual process. Requests sent to the privacy contact above are reviewed individually before records or working copies are changed. We do not promise immediate erasure from provider recovery copies. Provider recovery copies may persist under their separate retention windows, and an approved deletion or opt-out must be reconciled before restored data is used.

Changes

We may update this notice when our services, providers or practices change. The effective date above shows the current version.