The short version
We do not require an account, we do not sell data, and we do not run advertising. You can read every page on this site without giving us anything. Three things do leave your browser when you use the site: anonymous analytics, your question if you use the Q&A box, and your email address if you choose to subscribe.
Analytics
We use Google Analytics 4 to count visits and see which articles people read. It sets cookies and records your approximate location (derived from IP address, not stored by us), device and browser type, pages viewed, and referring site. We use a network-wide property plus one property per site. We do not use Analytics to build advertising audiences, and we have not enabled Google Signals or ad personalization.
Google processes this data as our provider under its own terms. If you would rather not be counted, Google publishes a browser opt-out add-on, and browser tracking protection or an ad blocker will also prevent it.
The Q&A feature
The “Ask a Question” box sends the text you type to a Cloudflare Worker we operate at md-qa.md-health.workers.dev, which passes it to a third-party AI model provider to generate an answer. Your question and the answer are returned to your browser. A random session identifier is stored in your browser's local storage so a follow-up question has the context of the previous one; it is not tied to your name or email, and clearing site data removes it.
Please do not type anything into the Q&A box that identifies you or another person. Health questions are sensitive by nature, and the safest assumption is that anything you send to any AI system may be retained by that provider under its own policy.
The newsletter
If you enter your email address in a subscribe form, we store that address and the site you subscribed from in a Google Sheet via a Google Apps Script endpoint. We use it to send occasional health updates. We do not sell or rent the list, and we do not share it with advertisers. Every email includes an unsubscribe link, and you can also email hello@thrive.md to be removed.
Hosting and fonts
These sites are static pages hosted on GitHub Pages. GitHub receives standard web server request data, including your IP address, in the course of serving the page. Typefaces are loaded from Google Fonts, which means Google's font servers also see a request from your browser.
What we do not collect
- We do not ask you to create an account, and there is no login
- We do not process payments and never ask for payment details
- We do not run advertising or third-party ad trackers
- We do not sell, rent, or trade any information about you
- We do not attempt to identify individual readers from analytics data
- We do not knowingly collect information from children under 13
Your choices
You can block analytics with browser settings or an extension, decline the newsletter, and simply not use the Q&A box. To ask what we hold about you, to have your email address deleted, or to exercise a right under the GDPR or a US state privacy law, email hello@thrive.md. Because we do not maintain accounts, the only record we are likely to hold is a newsletter subscription.
Changes
If we change how any of this works, we will update this page and the date below. Material changes to how we handle email addresses will also be announced to subscribers.
Contact
Questions about privacy: hello@thrive.md