Privacy policy
On this page
What we collect
We do not ask you to create an account, and we do not ask for your name, email address, date of birth, or any health information. There is no form on this site that collects personal data.
Analytics and tags
This site loads one analytics vendor: Google Analytics 4, operated by Google LLC. It is loaded from googletagmanager.com on every page and reports to google-analytics.com. It tells us which pages are read, how readers arrive, and roughly where in the world they are.
We also measure when a review link is visible and when it is clicked. The additional fields record the source page, review page and link placement; they contain no query strings or personal details. There is no Google Tag Manager container, no Google Ads tag, no Meta pixel, no Microsoft/Bing UET tag, no third-party session-recording or A/B testing vendor. Typefaces are served from this site.
Google Analytics is configured with advertising features switched off — Google Consent Mode is set to deny ad_storage, ad_user_data and ad_personalization on every page load. Nothing measured here is used to build an advertising audience or to target you anywhere else.
Testing affiliate widgets
After you save an analytics-enabled choice, we may randomly assign this browser to a widget wording test. The group is stored in this browser until the test ends, currently January 22, 2027. We measure when a widget is visible and clicked, alongside its provider, page and placement. The assignment does not contain your name or medical information.
Opting out removes the assignment and stops experiment events. Browsers sending Global Privacy Control are not enrolled. Affiliate links may carry a nonidentifying test-group label so reported partner outcomes can be compared; visitor and exposure identifiers are not sent to partners.
Turning analytics off
Analytics is on by default and starts when the page loads. This is a US-audience site and we treat it as an opt-out, not an opt-in: a notice tells you it is running and you can switch it off in one click, here or from the notice.
Checking your current analytics setting…
We also honor Global Privacy Control. If your browser or an extension sends that signal, analytics is switched off for you automatically and you do not have to click anything. Your choice is stored in this browser only, so clearing site data resets it, and a different browser or device is a separate decision.
Server logs
Our hosting provider records ordinary web-server information when a page is requested — IP address, user agent, the URL requested, and a timestamp. This is used to keep the site running and to detect abuse.
We also write one line of our own when somebody clicks a link to a seller, so that we can count clicks even when an ad blocker has removed the analytics that would otherwise count them. That line records the seller, whether that seller pays us, which page and position the click came from, and the time. It does not record your IP address, your user agent, a cookie, or anything else that could connect one click to another or to you — every field in it is a fact about the page, not about the reader. If the referring page was somewhere other than this site, it is recorded as “external” and the site is not named.
Affiliate links
When you click a paid link, you leave through a redirect on this domain that appends parameters identifying which seller you clicked and which part of which page the click came from. Those parameters describe the page, not you: no name, no email address, no identifier we hold about you is added. Once you land on the seller’s site, that seller’s privacy policy governs, not ours. See our disclosure page.
Cookies
Google Analytics sets two cookies in your browser — _ga and _ga_<stream> — which hold a random identifier for the browser, not for you. They are the only cookies this site sets. Your analytics choice itself is kept in this browser’s local storage under cookie-consent, which is not a cookie and is never sent to us.
If you switch analytics off, we tell Google Analytics to stop and delete those two cookies from this device in the same click. Sellers you click through to may set their own cookies, under their own policies.
Children
This site is not directed to children under 13 and we do not knowingly collect information from them.
How long anything is kept
We keep no database of readers, so there is no record here with your name on it to age out. What has a retention period belongs to the two systems described above:
- Analytics. Google Analytics holds event-level data under the retention window set on the property, after which it is deleted on Google’s side; the aggregate reports built from it remain. Switching analytics off stops this site’s custom interaction events and tells Google Analytics not to store analytics cookies. Google’s tag may still send cookieless measurement or consent pings.
- Server and CDN logs. Our host keeps request logs for a short operational window — days, not years — for delivery, debugging and abuse handling, and then discards them.
- Outbound click records. The record written when you leave through a seller link carries the page, the placement and the seller, and nothing that identifies the person who clicked. It is kept as long as it is useful for attribution.
- Email you send us. If you write to the address at the foot of this page we keep the message for as long as we need it to answer you and to keep a record of any correction it caused.
Why we are allowed to do it
For readers in the United States, the basis is consent for analytics — the control below is a real off switch and it also deletes the cookies already set — and our own legitimate interest in running, securing and being paid for the site for everything else.
If you are reading from a jurisdiction that asks for a legal basis in those words: analytics and any similar technology rest on your consent; server logs and abuse handling rest on legitimate interests in operating a secure service; and answering an email you sent rests on the steps needed to respond to your own request. We do not sell personal information and we do not share it for cross-context behavioral advertising, as those terms are used in US state privacy laws.
Who else is involved
Three categories of third party touch this site, and no others:
- The analytics vendor named above, which receives the events described there once you have not switched it off.
- Our hosting and delivery provider, which necessarily sees the requests it serves.
- The affiliate network that routes an outbound seller click and attributes it. It sees the click; it does not receive anything about you from us, because we have nothing about you to send.
Once you arrive at a seller’s own site you are on their property and under their policy, which is theirs to write and ours to have no part in.
Your rights, wherever you are reading from
Residents of California, Colorado, Connecticut, Utah, Virginia, Texas, Oregon, Montana and the other states with a comprehensive privacy law have the right to know what is collected, to get a copy of it, to have it corrected, to have it deleted, to opt out of sale or of targeted advertising, and not to be treated worse for asking. Residents of the EU and the UK have the equivalent rights under the GDPR, plus the right to object and the right to complain to a supervisory authority.
How to exercise them here: write to the address at the foot of this page and say what you want. We will answer within the period the applicable law allows and we will not charge you for it. Because we hold no account and no contact record about readers, the honest answer to a “what do you have on me” request is usually “nothing”, and we will say so rather than invent a file to close the ticket. If you send us enough to identify a specific record and you want it gone, we will delete it.
We do not sell personal information and we do not engage in targeted advertising, so there is no opt-out link to provide for either; the analytics switch below is the one control that changes what leaves this site about your visit.
Keeping it safe
The site is served over HTTPS, it holds no reader database and it runs no login, which removes most of what there is to protect. Publishing access is limited to the people who write the site. No method of transmission or storage is perfectly secure, and we do not claim otherwise.
Where the data goes
We are based in the United States and the site is served from infrastructure operated by providers who process data in the United States and, for delivery, at edge locations elsewhere. If you read this from outside the US, the request and anything described above may be processed in the US under those providers’ own transfer arrangements.
Your choices
We hold no account, no email address and no health information about you, so there is generally nothing for us to access, correct or delete. What exists is the anonymous, browser-level analytics described above, and you can switch that off at any time using the control under Turning analytics off. If you believe we hold information about you and want it removed, write to us and we will act on it.
Changes
Changes to this policy are posted here with a new date. Material changes are also noted on our corrections page.