Dossier · Privacy Doctrine

Privacy Policy.

Effective MMXXVI.IV.XXIV · Last updated April 24, 2026

The short version. Pepper Siege is run by a single founder out of Frederick, Maryland. We collect the minimum information necessary to run the early-access list and respond to inquiries. We do not sell your data. We do not share it with third-party advertisers. When you ask us to delete it, we delete it.

01.Who we are

Pepper Siege LLC is a Maryland limited liability company based in Frederick, Maryland. For the purposes of this policy, "we," "us," and "Pepper Siege" refer to Pepper Siege LLC. "You" refers to any visitor to peppersiege.com or anyone who contacts us directly.

Questions about this policy go to founder@peppersiege.com.

02.What we collect

We collect only what you give us. Specifically:

Early access registrations. When you submit the early access form, we receive your email address, your selected segment (heat seeker, home cook, or chef), and any optional note you include. We also record the submission timestamp, your browser user-agent string, the referring URL, and the page URL — this is standard operational metadata used for spam filtering and service quality.
Direct email. If you email us at founder@peppersiege.com, we receive whatever you send — your email address and the content of your message.
Reserve Ledger consent. If you opt in to appear on the public Reserve Ledger, we will display your initials, your segment, and your registration ordinal (e.g., "DB · HEAT SEEKER · №0001"). We never display your full name, email, or any other personal information on the ledger.

We do not collect passwords, financial information, government ID, health data, or location data from you at this time. There is no account system on this site — not yet.

03.Analytics and third-party services

The site uses a small number of third-party services to operate. Each is named here.

Google Workspace and Google Apps Script — powers the form backend, stores early-access registrations in Google Sheets, and delivers email. Google's own privacy practices govern their handling of this data.
Cloudflare Pages — hosts the static site itself, and Cloudflare's infrastructure processes routine traffic metadata (IP addresses, request logs) as part of normal hosting operations.
Cloudflare Web Analytics — privacy-respecting aggregate analytics that runs without cookies, without persistent identifiers, and without collecting personal information about individual visitors. It records page views and referrer summaries only.
Cloudflare Turnstile — bot protection on form submissions. Turnstile runs a lightweight challenge in the browser and may use cookies or similar mechanisms to distinguish real users from automated traffic.
Microsoft Clarity (if enabled) — session recording and heatmap analytics. Clarity uses cookies and records anonymized sessions (mouse movements, clicks, scroll patterns) to help us understand how visitors interact with the site. Clarity does not record text you type into form fields. If Clarity is active on the site, you can opt out at any time at privacy.microsoft.com. We will add a cookie consent mechanism before enabling Clarity for visitors in jurisdictions that require affirmative consent, including the European Union, the United Kingdom, and California.

We do not run third-party advertising cookies, cross-site tracking pixels, or fingerprinting libraries. We do not sell, rent, or share your data with third-party advertisers.

04.How we use what we collect

To send you the auto-reply confirming your early access registration.
To notify you directly when a product lane, drop, or opportunity relevant to your segment goes live.
To respond to direct inquiries from chefs, collaborators, and press.
To maintain operational records — which segments are registering, how much volume the list is growing, which regions are most active.
To defend against spam, abuse, and fraudulent submissions.

We do not use your data to build advertising profiles. We do not use your data to train machine learning models. We do not sell, rent, or trade your data — now or later. Full stop.

05.Where your data lives

Early access registrations are stored in a Google Sheet under Pepper Siege's Google Workspace account, which is protected by two-factor authentication and restricted to authorized Pepper Siege personnel — which at this time means the founder alone.

Email delivery uses Google Workspace (Gmail). Website hosting uses Cloudflare Pages. Both Google and Cloudflare have their own privacy and security practices, which are publicly available on their respective sites.

06.How long we keep it

Early access data is retained while the list is active — meaning for as long as Pepper Siege is operating an early access program. If you unsubscribe, your data is marked inactive within 7 days and is fully deleted within 30 days, except for any record we are legally required to retain.

Direct email correspondence is retained according to normal business correspondence practices and can be deleted on request.

07.Your rights

You have the right to:

Know what information we hold about you. Email founder@peppersiege.com and we will respond within 30 days.
Correct any information that is inaccurate.
Delete your data. Email founder@peppersiege.com with "deletion request" in the subject line and we will process it within 30 days.
Unsubscribe from future emails at any time, using the link in any email we send you or by writing to us.
Opt out of the Reserve Ledger at any time. The ledger is rebuilt from the active opt-in list, so removing your consent removes your initials from the public display.

If you are a resident of California, the European Union, the United Kingdom, or another jurisdiction with additional privacy rights — such as the right to data portability or the right to object to processing — those rights apply to you, and we will honor them on request.

08.Children

Pepper Siege is not directed at children under 13, and we do not knowingly collect information from children under 13. If you believe a child has submitted information to us, contact founder@peppersiege.com and we will delete it promptly.

09.Security

We use the security controls built into Google Workspace and Cloudflare, including transport-layer encryption (HTTPS), account-level two-factor authentication, and provider-side intrusion detection. No system is perfectly secure — if we ever suffer a breach that affects your data, we will notify affected users directly and promptly.

10.Changes to this policy

When this policy changes materially, we will update the "Last updated" date at the top and — for registered subscribers — send a notification email describing what changed. Continued use of the site after an update constitutes acceptance of the revised policy.

11.Contact

Pepper Siege LLC
Frederick, Maryland, USA
founder@peppersiege.com

In plain language. This policy is meant to be honest rather than theatrical. If something in it is unclear or if you think we should be doing better on any specific point, write to us — we read every message that comes in.