Privacy policy

The site has no accounts, no login and no payment. We collect analytics on how pages are used, a log of clicks on outbound program links, and standard server logs. You only give us your name, email address or health details if you choose to write a patient review, and we publish a review only after a person on our team has read it. You can also leave your name and email at the end of the program quiz, with your quiz answers. We do not sell personal data. We do not share it for targeted advertising.

"Personal data" means information that relates to you and could identify you, alone or combined with other data. An IP address is personal data. We treat a hashed browser signature as personal data too.

The site uses three analytics services: PostHog, Google Analytics and Ahrefs Web Analytics. PostHog records:

• the pages you view and how long you stay on them
• the links and buttons you click
• the words you type into the site search. An email address or phone number typed there is removed before it is sent.
• how fast each page loads and responds
• your browser, operating system, screen size and language
• your IP address, and the approximate location (country and city) derived from it
• a session recording: a replay of the page as you scroll, move the pointer and click. Text typed into a field is masked.
• errors that occur in the page's own code

PostHog stores this data in the United States. Requests go first to /ingest on this site's own domain and are forwarded from there. PostHog stores a random visitor ID in your browser's localStorage and sets no cookies. Session recordings are kept for 30 days.

Google Analytics, from Google LLC, records the pages you view, the page that referred you, outbound link clicks, how far you scroll, searches made with the site search, and your browser, device and approximate location. It sets two first-party cookies, _ga and _ga_SPY759099X, which hold a random visitor ID and last up to two years. Google processes this data in the United States.

Ahrefs Web Analytics, from Ahrefs Pte. Ltd. in Singapore, counts page views, referring pages, browser, device and country. It sets no cookies and stores no visitor ID.

None of the three records your quiz answers. Your answers are never put in the page address, so Google Analytics and Ahrefs see only that the quiz page was opened. In PostHog the quiz is excluded from click capture and blocked from session recordings.

We use analytics to see which pages are read, which links are clicked, and where pages break. We do not use it to build an advertising profile, and it is not connected to any advertising network.

Some links on this site lead to telehealth programs and earn a commission. See the affiliate disclosure. Each of those links passes through a /go/ address on this domain. When you click one, we record:

• a random click ID
• the page the link was on, and its position on that page
• the program the link points to
• a SHA-256 hash of your browser's user-agent string, not the string itself
• the page that referred you, as your browser sent it
• your country as a two-letter code, read from a header set by our CDN

This log does not hold your IP address. The click ID is added to the link the affiliate network receives, so the network can match a later sign-up to this site and pay the commission. The network sees that you arrived from glp1.health. Its own privacy policy applies from that point.

The site runs behind Cloudflare and a reverse proxy on our server. Both keep standard access logs: IP address, requested URL, time and browser string. We use these logs to run and protect the service. Our own code sets no cookies and no other identifier. The only cookies on the site are the two Google Analytics cookies described under Analytics.

You can review a GLP-1 program you used at /patient-reviews/new. Writing one is optional. Everything below applies only if you send one.

What we publish with your review, once it is approved:

• the name you choose to sign it with, and your state
• the program and the medication you name
• your ratings, your title and your review text
• whether you still use the program
• if you give them: the price you paid, whether it matched the advertised price, the side effects you had, and the change in your weight in pounds
• the photos you attach
• a Verified customer badge, if we have checked your proof of purchase

What we keep private and never publish:

• your email address. We use it only to contact you about your review. It is never added to a mailing list.
• your starting and current weight. Only the difference is shown.
• your proof of purchase. Only our team looks at it, to check that you used the program.
• why you stopped, how you found the program, side effects you describe in your own words, and any note about extra charges. We use these to understand programs and do not publish them.
• a SHA-256 hash of your IP address with a secret value, and your browser's user-agent string, which we use to spot repeated or automated submissions. We do not store the IP address itself.

Your browser shrinks each photo before upload, which also removes hidden data such as the location where it was taken. Reviews and their files are stored in our own database on our server host. A person on our team reads each review before it is published, and may decline one that is off-topic, abusive, promotional or that shares someone else’s private details. Programs cannot pay us to publish, change or remove a review.

While you write, the form keeps a draft in your browser’s localStorage so a reload loses nothing. It never reaches us until you submit, and it is cleared once you do.

We keep a review for as long as it is published, and a declined one only as long as we need it to handle abuse. To have your review and everything sent with it deleted, write to contact@glp1.health from the address you used. We delete it and its files.

The quiz at /quiz asks how you want to take a GLP-1 medication, which medication, brand-name or compounded, and whether you have insurance that may cover it. It then shows the program we match to your answers. The answers stay in your browser. They are not sent to us unless you complete the optional form at the end.

The form asks for your first name and your email. You can skip it and still see your match. If you fill it in and tick the consent box, we store:

• your first name, if you give it, and your email address
• your quiz answers and the program we matched to you
• the date and time you gave consent, and the version of the consent text you agreed to

We use this to email you about GLP-1 programs, including the program we matched to you. Some links in those emails may earn us a commission, the same way links on the site do. Every email has an unsubscribe link.

We keep this data with Customer.io, our email provider, in the United States. We keep it until you unsubscribe or ask us to delete it. After you unsubscribe, we keep only your email address and the fact that you unsubscribed, so we never email you again. Write to contact@glp1.health to withdraw consent or have your data deleted at any time.

The only email addresses we collect today come with patient reviews and the program quiz, as described above. Addresses submitted through an earlier form, before 3 September 2026, are held only to honour deletion requests and are not used for mailing. Write to contact@glp1.health to have yours deleted.

Outside the patient review form, no page on the site asks you a question about your health, and we do not ask for your date of birth, health conditions, prescriptions or diagnoses anywhere. The tools on the site (the cost calculator, the dose converter and the weight loss projection) run in your browser. What you enter into them is not sent to us.

The site publishes information about GLP-1 medications. A visit to a page may show an interest in these medications. Some state laws, including Washington's My Health My Data Act, treat that inference as consumer health data. So, to be plain:

• We collect consumer health data only when you write a patient review: the medication you took, the side effects you had and your weight. We collect it only with your consent, which you give with a checkbox before you submit, and we record when you gave it.
• The program quiz form is the one exception. With your consent, it sends us your quiz answers and the program we matched to you, linked to your email. We use them to email you about GLP-1 programs, as described under The program quiz.
• We use it to publish your review and to show what reviews of a program add up to, such as its average rating. We publish only what the list under Patient reviews says we publish.
• We do not use the pages you visit to infer your health status.
• We do not sell consumer health data, and we do not use it for advertising.
• We do not share it with anyone, except by publishing an approved review, with the providers that host our server and database so they can run them for us, and with Customer.io, our email provider, which holds the quiz form data for us.
• We do not use geofencing.
• We use analytics and click data for the purposes named on this page and for nothing else.

You can ask what data we hold about you, ask us to delete it, and withdraw your consent at any time. If you withdraw it, we take down your review and delete it. Email contact@glp1.health. We answer within 45 days. If we refuse a request, you can appeal by replying to our answer. If we deny your appeal, you can complain to your state's Attorney General.

• PostHog Inc., an analytics processor, in the United States
• Google LLC, for Google Analytics, in the United States
• Ahrefs Pte. Ltd., for Ahrefs Web Analytics, in Singapore
• Customer.io, our email provider, in the United States, for the program quiz form
• Cloudflare, the CDN in front of the site
• our server host, which keeps the access logs and runs the database that stores patient reviews
• the affiliate network behind a /go/ link, which receives the click ID

We share data with them only so they can provide their service to us. We do not sell personal data, and we do not share it for cross-context behavioural advertising.

Depending on your state, you may have the right to:

• know what personal data we hold about you and receive a copy
• have it corrected
• have it deleted
• opt out of the sale or sharing of personal data. We do not sell or share it, so there is nothing to opt out of.
• equal service whether or not you use these rights

To make a request, email contact@glp1.health. For a patient review, write from the address you used and tell us the program you reviewed. For the program quiz, write from the email you gave. For anything else, tell us the browser you used and the approximate date of your visit, because we hold no name or account to search by. We may ask for information to verify the request. You may authorise another person to make a request for you. We answer within the time the law allows.

The site is for adults. It is not directed to anyone under 18, and we do not knowingly collect data from anyone under 18.

We change this page when the site's practices change. The effective date at the top moves with each change.

contact@glp1.health