Policy

Privacy Policy

What we collect, why we collect it, who we share it with, and how you can control it.

Last updated on publication

This Privacy Policy explains how The Health Almanac ("we", "us", or "the Publication") collects, uses, and shares information when you visit thehealthalmanac.com or interact with our Living Almanac product, newsletters, or SMS editions (collectively, the "Services"). By using the Services you agree to this policy.

Who we are

The Health Almanac is an independent consumer health publication. Editorial, business, and privacy inquiries can be sent to us via the contact page.

Information we collect

Information you give us directly

Assessment answers you enter into the Health Almanac snapshot — age, sex at birth, and lifestyle questions used to generate a personalized edition.
Contact details — phone number, and optionally first name, last name, email, and address — when you subscribe to receive your edition.
Message content you send us (corrections, questions, feedback).

Information we collect automatically

Usage and device data — pages viewed, referring URL, approximate location derived from IP, browser type, device category, and time-on-page.
Cookies and similar technologies — first-party cookies for session state, consent preferences, and share-attribution; and third-party cookies from the vendors listed below.
Consent proof — TrustedForm certificates and phone verification records generated when you subscribe, retained as proof of consent.

How we use information

To produce and deliver your personalized edition and SMS updates.
To operate, secure, and improve the Services.
To measure how our journalism reaches readers (aggregated analytics).
To fulfill legal obligations and prevent abuse or fraud.
To serve advertising and measure its performance, as described below.

Advertising and Google AdSense

The Health Almanac uses Google AdSense to serve advertisements. Google and its partners — as third-party vendors — use cookies (including the DoubleClick DART cookie) to serve ads based on a user's prior visits to this and other websites.

You can opt out of personalized advertising by visiting Google Ads Settings.
You can opt out of third-party vendor use of cookies for personalized advertising by visiting aboutads.info/choices or youronlinechoices.eu.
For a full description of how Google uses information from sites that use its services, see Google's partner-sites policy.

We do not knowingly permit advertising partners to target users based on sensitive categories of health information. Ads shown on the site are selected by Google's ad-serving systems, not hand-placed by us.

Analytics and other third-party services

Google Analytics — measures aggregate traffic and content performance. Opt out.
Google reCAPTCHA — protects our forms from abuse; subject to Google's Privacy Policy and Terms of Service.
TrustedForm (ActiveProspect) — captures independent proof of consent when you subscribe.
SMS delivery providers — used to send your edition and verification codes; message and data rates may apply.
Hosting and infrastructure — the Services are hosted on Cloudflare and Supabase, which process data on our behalf under written agreements.

Cookies and your choices

A first-visit banner lets you accept or decline non-essential cookies, including advertising and analytics cookies. Essential cookies (session, security, and consent-record cookies) are always set because the site cannot function without them. You can change your preference at any time by clearing your browser's cookies for this site.

Sharing information

We share information only in these situations:

With service providers (hosting, analytics, advertising, SMS, consent, anti-abuse) that process data on our behalf under contract.
With advertising partners as described above, in a form that does not identify you personally except as strictly required to serve or measure ads.
When required by law, subpoena, or to protect the rights, property, or safety of readers, the public, or the Publication.
In connection with a business transfer (merger, acquisition, or sale of assets), subject to this policy.

We do not sell your personal information for money. Some sharing with advertising partners may constitute "sale" or "sharing" under California and other US state privacy laws; see "Your privacy rights" below.

Retention

We keep assessment and subscription information for as long as your subscription is active and for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce our agreements. Consent proof is retained for the period required by applicable telemarketing and advertising rules.

Your privacy rights

Depending on where you live, you may have the right to access, correct, delete, port, or restrict processing of your personal information, or to opt out of certain uses (including targeted advertising). To exercise a right, use the contact page and identify the right you are exercising. We respond within the timeframe required by your jurisdiction.

Your choices on this site. You can change cookie categories anytime via the "Cookie Preferences" link in the site footer, or opt out of personalized advertising at Do Not Sell or Share My Personal Information.

EEA, UK, and Switzerland: our legal bases are consent (for advertising cookies, marketing messages), contract (to deliver editions you request), and legitimate interests (to operate and secure the Services and measure our journalism). Readers in these regions see an opt-in consent prompt; no analytics or advertising cookies are set before you accept.

California residents: you have the rights described in the California Consumer Privacy Act, including the right to opt out of "sale" or "sharing" of personal information. Our use of Google AdSense for cross-context behavioral advertising is treated as "sharing" under the CPRA. Use the Do Not Sell or Share page to opt out. An authorized Global Privacy Control browser signal is also honored as an automatic opt-out.

Children

The Services are directed to adults. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.

Security

We use administrative, technical, and physical safeguards designed to protect information we process, including transport encryption (HTTPS), scoped database access, and consent-audit logging. No system is perfectly secure; we cannot guarantee absolute security.

International transfers

Our providers may process information in the United States and other countries. Where required, we use standard contractual clauses or other approved transfer mechanisms.

Changes

We may update this policy from time to time. Material changes will be announced on this page with a revised "last updated" date. Continued use of the Services after a change constitutes acceptance.

Contact

Privacy questions and rights requests: see the contact page.