Privacy policy

Server logs. Our hosting provider records the IP address, browser type, pages requested and time of each request, and we keep an anonymized request identifier for troubleshooting. Analytics. When enabled, we use Google Analytics 4 to count visits and page views in aggregate; you can block it with a browser setting or extension. Newsletter. If you subscribe, we store your email address and send through Resend; every email has an unsubscribe link and unsubscribing removes you from sends. Forms. Contact and other forms are protected by Cloudflare Turnstile, which processes a signal from your browser to tell people from bots. Feedback widgets. A "was this helpful" click is stored without your identity.

If you create an account to save numbers, we store the lab values, dates and notes you enter, your birth year and sex if you choose to give them, and your email address with a scrambled version of your password, never the password itself. We use this to show each number you saved on its own sourced scale over time and, if you leave alerts on, to email you once when a range behind a number you saved changes. Birth year is stored for the decade-based screening checklist we are building and is not used for anything else today.

We do not sell what you save and we do not share it with a partner or an advertiser. Email is the one thing that leaves our servers: if you leave alerts on, we send through Resend, our email provider, and the subject line names the test the alert is about. A partner offer shown on your dashboard is chosen on our own servers from the band a saved value falls in; the partner learns nothing about you unless you click through to them. If you do click, the network sees the same link the public page for that test uses: our publisher code, the campaign it belongs to, and nothing about you or the value you saved. We keep this data until you delete it: asking us to delete signs you out and deactivates the account at once, and a scheduled job erases the account, every saved value and the audit record of them on the first hourly run after the request is 24 hours old. Encrypted database backups are kept for 7 days and then overwritten; we do not restore a deleted record from them. You can download your whole record as JSON, or your saved values as a CSV spreadsheet, at any time from My numbers, delete the account from your profile, and turn alerts off from your profile or the link in any alert email. The same rights described in Your choices below, including those under state privacy statutes, apply to this data as well.

Some links on this site go through affiliate networks (Impact.com and Katalys, which runs on Everflow). When you click one, the network sets a cookie or records the click so the merchant can attribute a purchase to us; the merchant then applies its own privacy policy. We receive aggregate reports of clicks and sales, not your identity. Links carry a sub-identifier that names us as the publisher, nothing about you.

We may show display advertising served by Google AdSense. Google, as a third-party vendor, uses cookies to serve ads on this site; its use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and other sites on the internet. You may opt out of personalized advertising by visiting Google's Ads Settings, and opt out of many other third-party vendors' use of cookies for personalized advertising at aboutads.info. Google's own description of how it uses data from sites that use its services is at policies.google.com/technologies/partner-sites. Pages that can carry advertising also load Grow, a bookmarking and recommendation tool from Mediavine, which sets its own cookies under Mediavine's privacy policy.

Advertising never changes what a page says. Advertisers do not see pages before publication and cannot buy a rank or a score. The mental health self-tests and the account dashboard carry no advertising at all. Where a page holds an affiliate link instead, the section above applies and the disclosure sits on the page.

We do not sell personal information. We do not share your email with partners.

Block analytics with your browser or an extension; unsubscribe from the newsletter with the link in any email; use the contact form to ask what we hold about your email address or to have it deleted. Residents of states with privacy statutes may exercise the rights those laws provide by the same route.

The effective date at the top changes when this policy does.