Privacy policy

The short version

• We do not sell or rent your personal information. To anyone. Ever.
• We do not run behavioral advertising or third-party ad trackers.
• We never share which pages you read with a provider, retreat, clinic or advertiser.
• You can leave our email list in one click, and we delete you on request.

What we collect

If you subscribe: your email address, and nothing else unless you volunteer it. We use it to send you the workbook you asked for and a periodic digest.

If you email us: your message and address, kept so we can reply and handle corrections.

If you just read: aggregate analytics — page views, referrer, country, device type, and Core Web Vitals performance data. This is collected in a form that does not identify you individually and is not used to build a profile.

We use Google Analytics for this, and we have turned off the two settings that would otherwise make it a problem on a site like ours. Google Signals is disabled, so your visits are not fed into Google’s cross-device advertising graph, and ad personalization is disabled, so nothing you read here can be used to target advertising at you. IP addresses are anonymized. We do this because the pages you read here — a page about treatment-resistant depression, say — would otherwise become an advertising signal attached to a person, and that is precisely what we tell you we do not do.

What we don’t collect

We do not ask for health information and we do not want it. If you write to us about your own situation, that message sits in an inbox — please do not send us medical records, diagnoses or anything you would not want in an email. Nothing you tell us is a substitute for a clinician, and nothing you tell us becomes a health record we maintain.

Who processes data for us

• Vercel — hosting and performance measurement.
• Google Analytics — aggregate traffic measurement, with Google Signals and ad personalization switched off.
• Cloudflare — DNS and email routing.
• Resend — sending email to subscribers.

Each processes data only to provide that service. We do not permit them to use it for their own advertising purposes.

Affiliate links

Some outbound links are affiliate or referral links, and clicking one may pass a referral identifier to that partner so they can attribute the referral. That identifier tells them a visitor came from us. It does not tell them what else you read here, and we do not send them your email address. Our advertising disclosure explains the commercial relationships in full.

Your rights

Wherever you live, you can ask us what we hold about you, ask us to correct it, or ask us to delete it — write to [email protected] and we will action it. Under the GDPR, UK GDPR, CCPA/CPRA and similar laws you may have additional rights including data portability and the right to object to processing. We honor those requests regardless of where you are, because maintaining two standards is more work than maintaining one.

We do not sell or share personal information as those terms are defined under the CCPA, so there is no opt-out to offer — the answer is already no.

Retention

Subscriber addresses are kept until you unsubscribe or ask for deletion. Correspondence is kept while it is useful for handling corrections, then deleted. Aggregate analytics are retained in non-identifying form.

Children

This site is not directed at children and we do not knowingly collect information from anyone under 16.

Changes

If we change this policy materially we will say so here with a new date, and tell subscribers by email rather than changing it quietly.

Contact

Questions about any of this go to [email protected].