Privacy policy

Who we are

This policy applies to https://metabolicledger.com(the “Site”), published by Metabolic Ledger Publishing LLC(the “Publisher,” “we,” or “us”). For privacy questions, contact privacy@metabolicledger.com.

What we collect

Information you give us

When you submit a form (e.g. an email opt-in), we receive the email address you provide and the identifier of the form you submitted (which lead magnet, which page).

Some opt-in forms also ask an optionalquestion about where you are in your GLP-1 journey (researching, recently started, several months in, or tapering off). Answering it is entirely optional and constitutes your consent for us to store that answer. We use it for exactly one purpose: sending you content and product suggestions relevant to your stage instead of a generic sequence. Because a journey stage relates to your health, we treat it as consumer health data under the Washington My Health My Data Act and as sensitive personal information under the CPRA: we never sell it, never share it with advertisers or affiliate partners, never infer it from your behaviour, and will delete it on request — email us or reply to any newsletter with the word “delete”.

Information collected automatically

We collect the following on every page request:

• Server access logs — IP address, user agent, URL requested, timestamp, referring URL. Used for debugging, rate-limiting, and abuse prevention. Retained for ninety days then deleted.
• Affiliate click logs — when you click a /go/… outbound affiliate link, we record the provider, product, timestamp, IP address, user agent, and referring page. Used for revenue attribution and to confirm the affiliate network paid us correctly. Retained for twenty-four months.
• Page analytics via Cloudflare Web Analytics. Cookie-free. Aggregated counts of page views, country, device class, and referrer. See Cloudflare’s description for the technical detail.
• Google Analytics 4. We use Google Analytics to understand which pages are read and how people find us: pages viewed, approximate location (country or region), device and browser, the site that referred you, and on-site actions such as signing up to our emails. It sets first-party cookies to tell a returning browser apart, and it does not store your IP address. We have switched off Google signals and ad personalisation, so this data is not used to build advertising audiences. Google Analytics data is kept for fourteen months. You can opt out with Google’s browser add-on.
• Reddit ad measurement. We advertise on Reddit and use the Reddit Pixel to find out whether those ads work. It loads only on the pages our Reddit ads link to, or when you arrive from one of those ads; it never loads on our drug or health articles. If you sign up to our emails after arriving from a Reddit ad, we tell Reddit that a sign-up happened, together with a one-way scrambled (SHA-256 hashed) version of your email address, so Reddit can match it to the ad click without seeing the address. We do not send Reddit your journey-stage answer or anything else you tell us, we do not report sign-ups from people who did not come from a Reddit ad, and we do not use Reddit to show you ads based on what you read here.

What we don’t collect

We do not collect protected health information (PHI). We do not collect names, addresses, phone numbers, BMI, prescription history, dose information, or any other clinical data, unless you voluntarily include it in an email to us or voluntarily answer the optional journey-stage question described above (which stores only the broad stage you select, never a diagnosis, drug, or dose). We do not run session-replay scripts. The only advertising tool on the Site is the Reddit Pixel described above, used to measure our own Reddit ads. We do not sell or rent personal information.

Cookies

The Site sets these cookies:

• Functional: us-content-acknowledged (you confirmed at the geographic interstitial that the Site is for US audiences; twelve months), email-optin-dismissed (you closed the top-bar email opt-in; thirty days), and ml_ref (the site or campaign that first brought you here, so we can see which sources lead to sign-ups; twenty-four hours).
• Analytics: _ga and _ga_4H8GRNERH0, set by Google Analytics to count returning visitors (up to two years).
• Ad measurement: _rdt_uuid, set by the Reddit Pixel on the pages our Reddit ads link to, to connect a visit to one of our ads.

None of these cookies is used to track you across other websites.

Sharing

We share data only with the providers we use to operate the Site:

• Cloudflare — CDN, DNS, DDoS protection, privacy-respecting analytics.
• Google — Google Analytics 4, for site statistics (Google signals and ad personalisation off).
• Reddit — ad measurement through the Reddit Pixel, and a hashed email address when someone who arrived from one of our Reddit ads signs up.
• Hostinger — VPS host (origin server).
• Supabase — database for affiliate click logs and email opt-ins.
• HighLevel (GoHighLevel) — stores your email address and journey stage if you sign up, and sends the emails you asked for.

We do not share personal information with affiliate partners beyond what is necessary to attribute a referral (i.e. that somebody from our Site arrived at theirs). The affiliate network handles any subsequent sign-up under its own privacy terms.

Your rights under CCPA / CPRA

If you are a California resident, you have the right to know what we hold about you, to have it deleted, to correct it, to opt out of its “sale” or “sharing” (we do neither), and to be free from discrimination for exercising these rights. The rights extend to residents of states with similar laws (Colorado, Virginia, Connecticut, Utah, and others as enacted). To exercise a right, email privacy@metabolicledger.com from the address tied to your request. We verify identity by confirming control of the email address and reply within forty-five days.

Children

The Site is not directed at children under sixteen. We do not knowingly collect data from children. If you believe we have inadvertently received information from a child, please contact us and we will delete it.

Changes

We’ll update this policy when our practices change. The Last updated date at the top of the page is authoritative. Material changes are summarised at the top of the page when they happen, and announced to the email list.

Related

See our terms of use, affiliate disclosure, and disclaimer.