The Baca Project

Privacy

How we look after your data

You can listen to The Baca Project without an account. If you create one, this page explains what we keep, why, and how to delete it. The data controller is The Baca Project.

What we store

Sign-in codes are stored only in scrambled form and expire after 10 minutes.

Your journal is private

Your entries are tied to your account and shown only to you when you are signed in. They are not published, shared, sold or used for the mailing list.

The mailing list

We only email you new songs and reflections if you tick “Send me new songs and reflections by email”. The box is never ticked for you. You can change your mind at any time in My Journal, or by using the unsubscribe link in any email. Your journal works the same whether you join the list or not.

Why we use it

We use your account details and journal to provide the account and journal you asked for. We use your email for the mailing list only with your consent, which you can withdraw at any time.

Who else is involved

The site and its database are run on a cloud hosting service, which may store data outside the UK under appropriate safeguards. If you sign in with Google or Apple, they confirm who you are to us. If you sign in with an emailed code, an email delivery service sends it. We do not sell your data to anyone.

How long we keep it

Until you delete your account. Deleting it removes your account, every journal entry and your mailing-list choice straight away.

Deleting your account

Open My Journal, scroll to “Your account” and choose Delete my account. You can also delete single journal entries there.

Your rights

Under UK data protection law you can ask to see the data we hold about you, have it corrected or deleted, or object to how we use it. If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk.

Last updated 12 November 2026.