Privacy

Short version: the site collects nothing. The detail below says exactly what that means, what an advertising space does, and what the host can still see.

Analytics

This site runs no analytics of any kind. No page view is counted and no visitor is identified. There are two small programs on the site and no others: the search on the front page and the date calculator on food pages. Both are written into the page itself, run entirely in your browser, and send nothing anywhere.

Advertising

This site has advertising space on food pages, on the list and ranking pages and on the front page — not on this page, the terms, the contact page or the error page. Today every one of those spaces is filled with a link to another page of this site. No advertising network is connected yet, so nothing in an advertising space reaches any other company. On the day one is connected, this paragraph is rewritten by the same switch that turns the network on, and the build refuses to publish if the two disagree.

What your browser loads

No third-party script loads on any page: everything a page needs is written into that page. Every release is scanned for the 35 kinds of address-carrying construct an HTML page can hold — every address-bearing attribute, every url() and @import in a stylesheet, and any script that would fetch or navigate while you read — and the scan reads every file in the release, in all 9 file formats it knows, not the pages alone. Not one of them points at another company, and a release where one did would not publish. Open the network panel in your browser and you will see one request — the page itself.

Every page also carries a Content Security Policy. It names that page's own script and stylesheet by their exact fingerprints, allows the icon drawn into the page itself, and forbids everything else outright — every image, font, frame, connection and script from anywhere at all, including from this site. It is there for the part we cannot check ourselves: a host can add a script to a page after we have built it, and once the page has left us the policy is the only instruction your browser still has from us.

Cookies and storage

This site sets no cookies and uses no local storage.

What the host sees

The site is served by Cloudflare Pages. Like any web host, it processes the request itself — your IP address, the page requested, your browser string — to deliver the page and to block abuse. We do not receive those logs as a report and do not use them to build any profile.

A host can also add things to a page after we have built it. Cloudflare's email obfuscation and script rewriting both do exactly that. We turn both off for this domain, and if a host adds something regardless, the content policy above is what stops your browser from running it: the policy is built from a hash of the exact code we shipped, so anything else fails it. A promise about privacy is a promise about what your browser loads, not about what we wrote.

Contact and email

If you write to hello@keepsuntil.com, we keep the message and your address for as long as it takes to answer, and delete it afterwards. Ask us to erase it sooner and we will.

Changes

This page is generated from the same switches that build the pages, so it cannot drift from what they actually load. Last changed 16 September 2026.

KeepsUntil is an independent reference built on public USDA data. It is not affiliated with, endorsed by, or connected to the U.S. Department of Agriculture or the Food and Drug Administration. Whether a given window is a safety limit or a quality window is stated on the page that prints it.