Privacy

• There are no ads on this site, and no ad trackers or third-party cookies on any page.
• The only personal thing we ever ask for is an email address, and only if you sign in or want the weekly digest.
• We don't run analytics: no script on any page reports what you read.
• You can delete everything we hold about you with one email.

• Your email address, if you give it to us. We use it to send you a sign-in link when you ask for one, and to send the weekly digest if you've subscribed and confirmed. Subscribing takes a confirmation click in your inbox, so nobody can sign you up without your say-so. We don't use your address for anything else, and we never share it.
• A session cookie, if you sign in. It's a single cookie named session that keeps you signed in for 30 days. It's set only by this site, can't be read by scripts, and isn't used for tracking. Signing out deletes it.
• What you submit. Challenges, suggested changes, product and recipe ratings and reviews, recipes you share, product claims from makers, topic requests, and the topics you watch are stored so we can act on them and show them back to you. Our team reads reviews and recipes before anything is published. Challenges and reviews appear on the page they're about with your display name (reviews show your first name and last initial), never your email; a recipe you share is credited the way you ask on the form; and accepted suggestions are listed publicly. The name you type when you sign in to leave a review becomes your display name. A product claim (company, role, website and message) is seen only by our team.
• Donations, if you give. Stripe takes the payment on its own page and holds your name, email and card details under its own privacy policy; your card never touches our servers. We keep only a ledger: the amount, one-time or monthly, the status, Stripe's reference numbers and a one-way hash of your email, so we can count repeat donors without storing the address.
• A hashed IP address when you request a sign-in link, subscribe to the digest, or request a topic. We keep a one-way hash, not the address itself, so we can stop those forms being abused.
• Server logs. Like any website, our host (Microsoft Azure) and Cloudflare, which sits in front of the site, keep standard request logs for a limited time for security and debugging: IP address, time, page requested, browser. We don't use them to profile anyone.

Your reader settings (colour, text size, font) and your recipe shopping list are saved in your browser's local storage. They never leave your device. Search runs in your browser too: what you type into the search box doesn't reach our server. A small service worker caches fonts and page assets so the site loads quickly and works offline.

No advertising. No ad-tech. No tracking pixels, social-media tags or third-party cookies. We don't sell, rent or share personal information with anyone, we don't buy data about you from anyone, and we don't follow you around the web. Our funding policy rules all of that out for good.

• Microsoft Azure hosts the site and its database in the United States, and delivers our email through Azure Communication Services.
• Cloudflare provides DNS and protection against attacks.
• Stripe processes donations.
• GitHub hosts our code and content.
• Anthropic, when the Ask page is available: the question you type there is sent to Anthropic's AI model to generate an answer. Your email address and account details are not sent with it.

Each of them processes data only to provide that service to us.

• Sign-in links expire after 15 minutes. Sessions expire after 30 days.
• Your digest subscription lasts until you unsubscribe. When you do, we mark the address as unsubscribed and stop writing; if you'd rather we erased it completely, just ask.
• Account data stays until you ask us to delete it.
• Server logs are kept for a short period, typically 30 days.

• Every digest email has an unsubscribe link. One click and you're off the list.
• Sign out to end your session on a device.
• To delete your account and everything attached to it, email hello@whatshealthyandwhy.com from the address on the account. We'll confirm and delete within 30 days, usually much sooner. You can also ask us what we hold about you, or to correct it.

This site is written for adults. We don't knowingly collect information from anyone under 16. If you think a child has given us an email address, tell us and we'll remove it.

If we change this policy, we'll update the date at the top and mention anything meaningful in the weekly digest. Questions about privacy go to hello@whatshealthyandwhy.com, or see the contact page.