Privacy policy
Last updated: October 15, 2026
Who we are
Healthy Man Daily is published by The Healthy Man LLC, 502 W 7th St, Ste 100, Erie, PA 16502. For privacy questions, contact hello@healthymandaily.com.
What we collect
- Account and Google sign-in profile — your account ID, email, and name when supplied by Google. These support sign-in and your account profile. If you add a profile image, we store that separately.
- Email address — collected when you subscribe.
- An anonymous device identifier — a random ID we set in a cookie named
hmd_uidwhen you use features that need it (no account or email required). It lets us recognize the same browser for things like read streaks, Brain Train attempts, saved items, and comment/vote limits. It is not tied to your identity unless you also subscribe or sign in — and if you do sign in, we link your devices’ IDs to your email so streaks and saves follow you across devices. - Reading activity — which issues you read, your read streak, and your Brain Train answer attempts (we log the attempt, never reveal it to anyone).
- Usage data — how you interact with our emails (opens, clicks) and the site, plus how you arrived (referrer / campaign tags).
- Preferences you tell us — if you complete the optional onboarding quiz, your goals, age band, training frequency, and topic interests (stored as tags). Every question is optional and skippable.
- What you write us — comments, feedback board posts, free-text onboarding answers, or replies to an issue. We keep these to help guide what we cover and to respond.
- Referral activity — if you use a referral link (ours or SparkLoop’s recommendation network), we track which link brought a signup so referral rewards can be credited correctly.
- Bot-check signals — on some forms (advertiser checkout, comments) we run Cloudflare Turnstile, a privacy-preserving check that a submission is human. It does not track you across other sites.
- Error logs — if something breaks, our error-tracking tool (Sentry) captures technical details (stack trace, URL, browser) to help us fix it. Sentry’s personal-data collection is turned off; error-replay recordings mask all text and block all media, and we don’t record sessions unless an error occurs.
How we use your information
- To send you the daily newsletter.
- To improve and steer our content based on engagement and the topics readers ask for.
- To communicate important updates.
- To meet legal obligations.
Processors & sharing
We will never sell your email address or personal information.
- Email provider — we use ConvertKit (Kit) to manage the list and send issues.
- Payments — Stripe processes all payments and card details. If you’re an advertiser and choose to reuse a saved payment method for a repeat booking, that card is stored by Stripe, not by us — we keep only a reference ID pointing to your Stripe customer record, never a card number.
- Analytics — we use product analytics (PostHog, proxied through our own domain, with in-memory persistence and Do Not Track respected) to understand how content performs; we do not enable session recording and do not sell your data.
- Error tracking — Sentry receives technical crash/error data as described above.
- Referral network — SparkLoop receives subscriber email and referral information to enrol subscribers and track referrals. Its browser script also handles referral attribution.
- Infrastructure — Supabase stores accounts and site records; Vercel hosts the site and provides analytics and performance monitoring; Resend handles transactional messages. Kit also provides Creator Network recommendations. Cloudflare Turnstile checks forms for bots, and Google handles Google sign-in when you choose it.
- Advertisers — sponsors only ever see aggregate, anonymized audience statistics (e.g. “X% are 35–54”). They never receive your email, your individual answers, or anything you write us.
Cookies & similar tech
The site uses the following cookies, browser storage, and scripts. Third-party script storage can change; we do not claim fixed cookie names or lifetimes that our code does not control.
| Technology | Purpose and storage |
|---|---|
hmd_uid | A signed functional browser ID for activity, saves, and participation limits; expires after one year. It can be linked to your account when you sign in. |
hmd_admin | An HTTP-only administrator session cookie; lasts 30 days. It is set on administrator login, not ordinary reader visits. |
| Supabase auth | Persists reader sign-in sessions in browser local storage so you can stay signed in. |
| PostHog | Site usage analytics using memory persistence; this configuration does not persist analytics IDs in cookies or local storage and respects Do Not Track. |
| SparkLoop | When configured, a referral script loads across the site and may use browser storage or device identifiers for attribution. |
| Kit recommendations | When configured, a Creator Network script loads across the site to show recommendations after signup and may use third-party browser storage. |
| Cloudflare Turnstile | Bot-check scripts on protected forms process browser and interaction signals. |
| Reader preferences | Local storage remembers signup status, onboarding completion, theme, and reader interface preferences. |
Optional health interests
The onboarding quiz can save goals and interests, including testosterone, heart health, and mental health, as tags on your Kit subscriber record. Answers guide coverage and contribute to aggregate audience totals for sponsors. Small segments are suppressed. We do not sell your individual answers. Skip any question or contact us to request access, correction, or deletion.
This is a publishing service, not a healthcare service. Please do not send personal medical details; we cannot provide personal medical advice.
Retention
Subscriber, account, and activity records remain while needed to provide the service and handle your requests. Unsubscribing stops newsletter delivery but does not automatically delete your account or other records. We retain suppression information to honour opt-outs and payment records where needed for accounting or legal obligations. Contact us to request deletion; we will explain any records we need to retain.
Your rights
Unsubscribe using any newsletter's unsubscribe link and manage preferences in your account. Request access, correction, deletion, or a copy of your data at hello@healthymandaily.com. You can also ask to withdraw permission for optional quiz data or object to its use. Rights depend on your location; you may complain to your local data protection authority.
International transfers
Healthy Man Daily uses US-hosted services. Your information may be processed in the United States and in other countries where our service providers operate.
Children
Healthy Man Daily is intended for adults aged 18 or older. If you believe a child has provided personal information, contact us so we can investigate and remove it.
Data security
We use appropriate technical and organizational measures to protect your information. No method of transmission over the internet is fully secure.
Contact
Questions? Email hello@healthymandaily.com.