Privacy Policy

Last updated: 15 October 2026

The short version

SupplementScore does not keep an account of you. The profile feature (your age, sex, current supplements, prescription medications) lives in your browser's local storage. We never receive it. A cookieless counter records that a page was opened. We do not sell data, and we do not run ads or affiliate links. See the transparency page for funding and corrections.

What we collect

• Local-only profile data: if you fill in the profile form, your inputs (age, sex, current supplements, medications, blood-work values, goals) are stored in your browser's localStorage. They never leave your device.
• Inaccuracy reports: when you submit a "Report inaccuracy" form, the form contents (the claim you flagged, your suggested correction, your citation, optionally your email) are sent to our forms processor (Formspree) and forwarded to our editorial inbox.
• Server logs: our hosting provider (GitHub Pages) records standard HTTP request logs (IP address, user agent, requested URL, timestamp). These are retained per GitHub's policy and we do not link them to any other identifier.
• Page counts: Plausible receives a cookieless notice that a page was opened. We use that to see which pages are read. It is not an advertising profile.

What we don't collect

• No account system. No login. No email subscription unless you explicitly sign up.
• No cookies, tracking pixels, or third-party advertising scripts.
• No affiliate links and no advertising networks.
• No payment data — the site is free and does not process payments.

Third-party services

• GitHub Pages — site hosting. GitHub privacy statement.
• Formspree — handles inaccuracy reports and contributor signup forms. Formspree privacy policy.
• Plausible — a cookieless page counter at plausible.io. It records that a page was opened. It does not use advertising cookies and we do not use it to follow you across other sites. Plausible data policy.
• Type — pages use the font already on your device. We do not load type from Google Fonts.

Your rights

If you're in the EU/EEA (GDPR), the UK (UK-GDPR), or California (CCPA), you have the right to:

• Access — request what data we have about you (we can only check our inaccuracy-report inbox; we have no other store).
• Delete — ask us to delete your inaccuracy-report submission. Email the contact below.
• Export — receive your inaccuracy-report submission in a portable format.
• Opt out — clearing your browser's local storage removes the profile we never saw to begin with.

Children

SupplementScore is not directed at children under 13 and we do not knowingly collect any data from anyone under 13. If you believe a child has submitted information through our forms, contact us and we will delete it.

Changes

If this policy changes materially, the "Last updated" date at the top will change and the change will be summarised in our annual transparency report.

Contact

Privacy questions or data-deletion requests: see the contact email in the main site footer.