Privacy Policy
Last updated: July 3, 2026
This site exists for a quiet purpose — to wrestle with one of Jesus’ most-told parables, and especially with the brother nobody throws a feast for. I want you to feel welcome here, and I want you to know exactly what happens with your information when you visit. The short answer is: very little. Here’s the long answer.
Who runs this site
I’m Keith Brown. I run prodigalsonparable.com as a personal project. The Contact page sends a message straight to my inbox — how that works, and who touches it along the way, is described below.
What information this site collects
When you just read
When you visit any page on this site, I use Cloudflare Web Analytics to understand how the site is being used in aggregate — how many people visit, which pages they spend time on, roughly what country they’re visiting from, what kind of device they’re on, and how the site is performing technically.
Cloudflare Web Analytics is designed to be privacy-friendly. It does not use cookies. It does not track you across other websites. It does not build a profile about you as an individual. It collects anonymous, aggregate data only — I can see that “127 people from the United States read the homepage today,” but I can never see that you specifically were one of them.
The legal basis for this collection is legitimate interest under Article 6(1)(f) of the GDPR. The reason this works without a cookie banner is that the data is fully anonymous from the moment it’s collected — there is no identifier that could ever be tied back to you as a person. The European Data Protection Board has recognized that anonymous aggregate analytics like this do not require consent.
If you’d like to read Cloudflare’s own statement on how Web Analytics handles privacy, their privacy policy is at cloudflare.com/privacypolicy.
When you reach out
The Contact page has a simple form. When you send it, two things happen. First, Cloudflare Turnstile quietly checks that you’re a person and not a bot — it looks at technical signals from your browser to make that call, doesn’t show you puzzles, and doesn’t build a profile of you. Second, your message is delivered to my email inbox through Resend, an email delivery service. Resend processes your message and email address for the purpose of delivering it to me — nothing else. Their privacy policy is at resend.com/legal/privacy-policy.
Your message isn’t stored in any database of mine — it lives in my email inbox like any other personal correspondence. I never share it with anyone, and I don’t add you to any mailing list. There is no mailing list. If you’d like me to delete a message you sent me, just ask.
What information this site does NOT collect
To be clear about what’s not happening here: this site doesn’t set cookies for tracking, and Cloudflare Web Analytics doesn’t use cookies either. The one exception worth naming is embedded video — see the next section. There are no tracking pixels — no Facebook Pixel, no Google Analytics, no advertising network beacons. There is no fingerprinting or attempt to identify you across visits. There is no third-party advertising, no advertising networks, and no ads served on this site. There is no newsletter or email list, no accounts to create, and no comments section. The site collects nothing about you as an individual.
Embedded videos
The Resources page embeds a few YouTube videos. I use YouTube’s privacy-enhanced mode (youtube-nocookie.com), which means YouTube doesn’t set tracking cookies just because the page loaded. If you press play, though, you’re interacting with YouTube, and Google may collect data about that playback under Google’s privacy policy. If you’d rather not interact with YouTube at all, don’t press play — every video on that page also has a written transcript right below it.
What this site hosts
This site is hosted on Cloudflare Pages, which means Cloudflare delivers the pages to your browser. As part of serving any website, Cloudflare’s infrastructure handles standard internet traffic information (IP addresses, timestamps) for security and operational reasons. This is the same way every website on the internet works at a network level. Cloudflare’s handling of this data is governed by their privacy policy linked above.
The site’s domain registrar is Cloudflare. The site’s source files live on my personal computer and are deployed to Cloudflare Pages from there.
Your rights
Even though I collect almost nothing, you have rights under data protection law, especially if you’re in the European Union, the United Kingdom, or California.
You have the right to know what’s collected — that’s what this page is for. If anything here is unclear, write to me using the Contact page. You have the right to access correspondence you’ve sent me — if you’ve written to me and want a copy of what I have, just ask. You also have the right to deletion — if you’ve written to me and want me to delete the correspondence, just ask.
You have the right to object to how this site uses Cloudflare Web Analytics. You can contact me about your concerns, or you can use a browser or browser extension that blocks the Cloudflare analytics beacon. The site will work normally either way.
You also have the right to lodge a complaint. If you believe I’m handling your data improperly, you have the right to complain to your local data protection authority. In the EU, you can find your supervisory authority at edpb.europa.eu/about-edpb/about-edpb/members_en. In the UK, that’s the ICO at ico.org.uk.
I’ll respond to any reasonable request within 30 days.
For visitors in the EU and UK
A word on legal basis and where your data travels. The contact form’s bot check (Turnstile) and the delivery of your message to my inbox rest on legitimate interest under Article 6(1)(f) — keeping the site secure and being able to reply when you write to me. Nothing here involves profiling, advertising, or selling data. This site is served from Cloudflare’s global network, and my email arrives in the United States; Cloudflare participates in the EU-US Data Privacy Framework. If you’d rather not use the form at all, everything on this site can be read without sending me anything.
A note on the future
Right now this site is a contemplative space — no ads, no monetization, no monetary involvement at all. If that ever changes — if I add a newsletter, if I add an ad network, if I ever collect anything beyond what’s described above — I’ll update this page first, and I’ll mark clearly what’s new. You’ll be able to see exactly what changed and when.
Children’s privacy
This site is written for adults wrestling with theological questions. It’s not directed at children under 13. I don’t knowingly collect any information from anyone under 13. If you believe a child has sent me a message, please write and I’ll delete it.
Changes to this policy
If this policy changes, I’ll update the “Last updated” date at the top of this page. For meaningful changes (anything beyond fixing a typo), I’ll note what changed in a brief paragraph here so you can see the difference.
July 3, 2026 — updated the contact section: the site now uses a contact form (with Cloudflare Turnstile for bot protection and Resend for email delivery) instead of a plain email link. Added a section on embedded YouTube videos, and a section for EU/UK visitors on legal basis and data transfers.
Thank you for visiting. The fact that you read this far probably means you care about how people are treated on the internet. I care about that too. That’s why this page is short.