Consumer health data policy

We are a price tracker, not a clinic. We hold no medical records and we are not a HIPAA covered entity. But Washington’s law defines consumer health data broadly, and it explicitly includes the use and purchase of prescribed medication.

Our alert form asks which GLP-1 you are tracking and how you are paying for it. Tied to an email address, that is an interest in a prescription drug attached to a person, and we would rather name it plainly than argue it does not count.

Only what you type into the alert form, and only if you submit it:

• The medication or molecule you are tracking.
• Whether you are paying cash, using insurance, or on Medicare, and your insurer.
• Whether you have been told it is covered.
• Your state.
• What you currently pay per month.
• Which program page you started from.

We do not ask for and cannot receive a diagnosis, a BMI, a weight, a prescription, lab results, or anything from a healthcare provider. We do not infer health conditions from your browsing.

We collect this only when you submit the form, which is the consent. Nothing is gathered in the background: reading a page about Wegovy tells us nothing about you beyond anonymous analytics.

To withdraw consent, email privacy@pricetrackerglp1.com or use the unsubscribe link in any email from us. Withdrawal stops the emails and deletes the record. You never have to explain why, and we will not ask.

Washington’s law requires separate written authorisation before any sale of consumer health data. We have never sold it and we do not intend to, so we will never ask you for that authorisation. If that ever changed, it would require your explicit signed authorisation first, and we would rather change the business than the promise.

We also do not share it with advertisers, data brokers, or the programs listed on this site. A seller you click through to learns that someone arrived from a particular page on our site. It does not learn your alert answers, and it does not get your email from us.

• Supabase, which hosts the database the subscription is stored in.
• Resend, which delivers the emails.

That is the complete list. Our analytics providers do not receive it, and no advertising platform receives it in any form, including hashed.

• Ask for a list of everything we hold about you, and who we shared it with.
• Have it deleted, including from our processors above.
• Withdraw consent at any time.

One address: privacy@pricetrackerglp1.com. We answer within 30 days, usually much sooner. If we ever refuse a request you can appeal to the same address, and Washington residents may complain to the Washington State Attorney General.

Kept while your alert subscription is active, deleted within 30 days of unsubscribing. Records of a deletion request are kept as required by law, and contain no health data.