Privacy Policy

Details you give us directly — full name, phone number, and email address — through the contact form, a Shabbat/holiday meal reservation request, or a newsletter signup.

When donating: the donation amount and an email address for a receipt. Your card details never pass through our servers at any point — they're entered directly with our payment processor, Stripe, and secured under its PCI DSS standard.

Basic technical information (such as IP address and browser type), collected automatically on every visit — some by our hosting provider to operate and secure the site, and some (in hashed, non-identifying form, together with an approximate country/city, the page viewed, and the referring site) for internal visit statistics shown to our admin team only. We never store raw IP addresses, and never share this data with any outside party.

Responding to inquiries and questions submitted through the site

Processing Shabbat/holiday meal reservation requests, including sending a confirmation or update by email

Processing donations and sending a receipt

Sending updates to newsletter subscribers — you can unsubscribe at any time with one click at the bottom of every email

We do not use your information for third-party marketing, and we do not sell or rent it to anyone.

We take reasonable security measures appropriate to the information we hold: an encrypted connection (HTTPS) across the site, access limited to authorized staff through a personal, password-protected account, and payments processed directly by Stripe rather than stored by us.

We retain your personal information for as long as needed for the purposes it was collected, or as required by law. You may request deletion of your information at any time by contacting us.

We do not sell or rent your personal information. We only share information with the service providers needed to run the site, to the minimum extent required:

Stripe — payment and donation processing

Resend — sending emails (confirmations, updates, and the newsletter)

MongoDB — data storage

Vercel — site hosting and operation

MapTiler — the interactive maps on the Contact and Community pages

Each of these providers has its own privacy policy. We may also share information when required by law, or to protect rights, property, or safety.

The site uses one technical cookie, essential to its operation: the admin team's login cookie (encrypted, does not identify regular visitors, and isn't used for tracking or advertising). The site has no advertising, marketing, or analytics-tracking cookies.

Fonts on the site are self-hosted (no requests to Google's servers while browsing), so they don't transmit any information to an outside party.

During checkout, Stripe may set its own cookies for fraud prevention, subject to its own privacy policy.

The right to know what data is collected, the right to access a copy of your information, the right to correct inaccurate data, the right to deletion, and the right to object to certain processing. To exercise these rights, please contact us using the details on this page.

This Chabad house operates out of Boston, Massachusetts, USA, and this policy is tailored to the relevant U.S. and state law requirements, including the Massachusetts data security regulations (201 CMR 17.00). We also follow common privacy-protection principles — such as transparency and not selling personal information — even beyond what's strictly required of us.

The site is not directed at children under 13, and we do not knowingly collect personal information from minors. A parent or guardian who believes their child provided us information is welcome to contact us to have it deleted.

The site may include links to third-party sites (kosher restaurants, hotels, etc.). We are not responsible for the privacy practices of those sites.

We reserve the right to update this policy from time to time. Material changes will be posted on the site with an updated date.