Privacy Policy

GLP Watchdog ("we," "us," or "our") is an independently operated US website. The operator can be reached at the email address at the end of this page, and that is the contact point for every right described below. This policy sets out what is collected when you visit, what it is used for, who else receives it, and what you can require us to do about it.

1. Information We Collect

The following list covers everything the Site collects.

• Information you provide directly. If you email us or use the contact form, we hold your address and whatever you wrote for as long as it takes to deal with it. We hold no other email addresses, and we do not operate a mailing list.
• Automatically collected information. Google Analytics 4 records a truncated IP address, the approximate location it implies, your browser and operating system, and which pages you opened and in what order. Our host, Vercel, keeps request logs for its own operations. Bot detection runs on one form endpoint and nowhere else on the site.
• Cookies and similar technologies. Analytics cookies from Google, one localStorage key holding your cookie choice, and whatever tracking the affiliate network sets when you click through to a seller. No advertising pixels, no retargeting, no data broker, nothing sold to anyone.
• Click and conversion data. Clicking through to a seller sends you via a redirect on this domain, which hands you to the affiliate network. The network, not us, sets the tracking that tells them the click came from here. We see counts. We never receive your name, your medical answers, or anything else you tell the seller.

We do not ask for, collect, or store sensitive health information such as diagnoses, prescriptions, lab results, body weight, or insurance member IDs. Any calculators on the Site (for example, the Savings Calculator) run in your browser, and the values you enter are not transmitted to us or stored on our servers unless we explicitly say so.

2. How We Use Your Information

We use the information we collect to:

• Operate, maintain, and secure the Site;
• Reply to questions you send us;
• Understand which pages, reviews, and tools are useful to readers so we can improve the Site;
• Attribute outbound affiliate clicks and report aggregate traffic to our partners;
• Prevent fraud, abuse, and security incidents and enforce our Terms of Service; and
• Comply with applicable legal obligations.

3. Cookies, Tracking Technologies, and Your Consent Choices

Your cookie preferences are under your control. This is a US site, and analytics here work the way US privacy law contemplates: on an opt-out basis. Google Analytics starts measuring on your first visit, and you can turn it off whenever you like. On that first visit you will see a notice at the bottom of the page with two buttons: Got it (dismisses the notice and changes nothing) or Opt out (stops analytics). Choosing Opt out takes effect immediately, on the page you are reading — we tell Google Analytics to stop using storage, and we delete the analytics cookies already on your device. Your choice is stored in your browser's local storage and is honored on every later visit from that browser. To reverse it, clear your browser's site data for glpwatchdog.org and the notice will reappear.

The Site uses a small number of cookies and tracking technologies:

• Analytics cookies (on by default, opt-out). Unless you have opted out, we load Google Analytics 4 (GA4) to measure traffic and understand reader behavior in aggregate, and GA4 sets first-party cookies (named _ga and _ga_…) to tell repeat visits apart. GA4 automatically anonymizes IP addresses at collection and does not allow us to identify individual visitors. If you opt out, we delete those cookies and GA4 stops setting or reading them: later page views are still counted, but they are counted anonymously and without cookies, and nothing is stored that would let us or Google recognize you as the same reader on a later visit. Google Analytics never runs on our admin pages. Data Google does process is governed by Google's Privacy Policy. You can also opt out of Google Analytics across all sites using Google's browser add-on.
• Affiliate tracking pixels. When you click an outbound affiliate link and leave our Site, the destination partner (and its affiliate network) may set its own tracking cookies to attribute the conversion. These are first-party cookies of the destination site, not ours, and are governed by that partner's privacy policy. We do not set affiliate pixels on the GLP Watchdog domain itself.
• Internal click attribution (no personal data). When you click an outbound affiliate link, we record the click on our own servers so we can count which reviews help readers most and report aggregate traffic to partners. This internal tracking does not store your IP address, user agent, or any personally identifying data. For daily-unique-visitor counting we compute a daily-rotating salted hash of your IP address and user agent; the hash is rotated every day and the raw values are never written to our database. This internal click analytics runs whether or not you accept GA cookies — it is a necessary functional system for our affiliate reporting and cannot be disabled.
• Functional storage. We use your browser's local storage to remember your cookie consent choice, any comparison filters you applied, and similar preferences. These do not leave your device and are not transmitted to our servers. We use Vercel KV on the server side to store the deduplicated outbound-click counts described above.

You can disable cookies in your browser settings, but parts of the Site may not work as intended.

4. Third Parties We Share Data With

We do not sell your personal information. We share limited data only with service providers who help us operate the Site:

• Analytics (Google Analytics 4). Unless you have opted out, pseudonymous traffic data is processed by Google Analytics 4 (GA4) to help us understand site usage. GA4 anonymizes IP addresses by default at the point of collection. Google acts as a processor on our behalf and is bound by its own published terms. See Google's Privacy Policy for Google's own disclosures.
• Hosting and infrastructure (Vercel). Our site is hosted on Vercel, which processes server logs and stores some operational data on our behalf.
• Affiliate networks and partners. When you click an outbound affiliate link, the destination partner and its tracking network will receive referral data (the page you came from, the timestamp, and a non-identifying sub-tracking ID we generate to attribute the click). The networks and direct partners we work with include Katalys (Katalys LLC), Impact, ShareASale, CJ Affiliate, PartnerStack, Refersion, and direct partnerships with telehealth providers we cover. Each network operates under its own privacy policy and is responsible for the data it collects after the click hands off. None of these partners receive any information you provided directly to us (e.g., the email address you gave to the answers you typed into our calculators). See our Affiliate Disclosure for the editorial framework that governs which providers we cover and how commercial relationships factor in.
• Legal and safety. We may share information when legally required (for example, in response to a valid subpoena) or when necessary to protect the rights, property, or safety of our readers or the public.

5. Your Rights and How to Exercise Them

Regardless of where you live, you may contact us at privacy@glpwatchdog.org to ask what personal information we hold about you, request that we correct or delete it, or opt out of analytics. We aim to respond to verifiable requests within 30 days. If we need to verify your identity before acting on a request, we will ask you for the minimum information needed to match your request against records we already hold.

The fastest way to opt out of analytics is the Opt out button on the notice at the bottom of the page. It works on the spot: Google Analytics stops using cookies, and the ones already on your device are deleted. If you have already dismissed the notice, clear your browser's site data for glpwatchdog.org and it will reappear on your next visit.

6. California Residents (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act and California Privacy Rights Act give you the right to:

• Know what personal information we have collected about you and how we use it;
• Request deletion of your personal information;
• Correct inaccurate personal information we maintain about you;
• Opt out of the "sale" or "sharing" of your personal information;
• Exercise these rights without being discriminated against for doing so.

We do not sell personal information as that term is defined under the CCPA, and we do not knowingly share personal information of minors under 16 for cross-context behavioral advertising. To exercise any of the above rights, email privacy@glpwatchdog.org with "California Privacy Request" in the subject line.

7. EU / UK Residents (GDPR)

Jurisdictional scope. GLP Watchdog is a United States publication operated by a Delaware-registered company. The GLP-1 telehealth providers, compounding pharmacies, and insurance products we review are available only to patients located in the United States and, in most cases, only to patients with a valid US prescription issued by a US-licensed healthcare provider. We do not market the Site to residents of the European Economic Area, the United Kingdom, or Switzerland, and the product information on the Site should not be construed as an offer of telehealth services or prescription medication to EU, UK, or Swiss residents. If you are located outside the United States, the reviews and tools on this Site are unlikely to be relevant to you, and you may not be able to access any of the telehealth or compounding-pharmacy services we review.

That said, if you are located in the European Economic Area, the United Kingdom, or Switzerland and you do visit the Site, the General Data Protection Regulation (GDPR) and the UK GDPR still give you the rights of access, rectification, erasure (“right to be forgotten”), restriction of processing, data portability, and objection with respect to any data we process about you. You also have the right to withdraw any consent you previously gave and to object to analytics at any time (the Opt out button on our notice stops cookie-based Google Analytics immediately and deletes its cookies), and the right to lodge a complaint with your local data protection authority (for EU residents, this is typically your national DPA; for UK residents, the Information Commissioner's Office). We honor these rights regardless of whether you can actually use the products we review.

Our GDPR Article 6 lawful bases for processing. We rely on the following lawful bases under GDPR Article 6(1):

• Art. 6(1)(a) — Consent. Analytics is the only processing for which consent is relevant. The Site is operated for a US audience and runs Google Analytics on the opt-out basis US privacy law contemplates, so a visitor from a jurisdiction that requires prior opt-in consent should use the Opt out button on the notice at the bottom of the page, which stops cookie-based analytics immediately and deletes the associated cookies. That choice is remembered on every later visit from the same browser. Opting out does not affect processing that already occurred before it.
• Art. 6(1)(b) — Contract. When you email us with a question or submit a provider correction, we process your message to respond to your request. This is processing necessary to take steps at your request.
• Art. 6(1)(f) — Legitimate interests. We rely on our legitimate interests in running a secure, high-quality comparison site for the following: (i) operating and securing the Site, including server logs and abuse prevention; (ii) the internal click-attribution system described in Section 3, which does not store personal data but does track outbound click counts; and (iii) replying to partner-relationship correspondence. We balance these interests against your rights and freedoms, and you can object to processing on this basis by contacting us at privacy@glpwatchdog.org.
• Art. 6(1)(c) — Legal obligation. We process data where required by applicable law — for example, in response to a valid legal request from a competent authority.

We do not process special categories of personal data (health data, biometric data, etc.) under GDPR Article 9. We do not ask for and do not store any patient health information; our calculators run in your browser and the values you enter are not transmitted to our servers unless we explicitly say so.

Automated decision-making. We do not make any decisions about you that are based solely on automated processing (including profiling) that produce legal or similarly significant effects, within the meaning of GDPR Article 22.

8. Children's Privacy

The Site is intended for adults and is not directed to children under 13. In line with the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

9. Data Retention

We retain personal data only for as long as needed for the purposes described in this policy. Google Analytics data is retained for up to 26 months. Server logs are typically rotated within 30 to 90 days. Correspondence sent to our contact addresses is retained as long as reasonably necessary to respond and for a reasonable period afterward for reference.

10. Security

We use industry-standard technical and organizational safeguards — including HTTPS encryption in transit, access controls, and reputable hosting providers — to protect the information we collect. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security. Please use strong passwords and keep your devices up to date.

11. International Data Transfers

We are based in the United States, and the service providers we use may process data in the United States and other countries. Where required by law, we rely on appropriate safeguards such as standard contractual clauses for international data transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective date" at the top of the page. For material changes, we will take reasonable steps to notify users by posting a notice on the Site. Your continued use of it after the changes become effective constitutes acceptance of the updated policy.

13. Contact

For privacy questions, requests, or complaints, please email privacy@glpwatchdog.org using the address below. See also our Terms of Service.