Privacy
Bag count is stored in your browser’s localStorage only. Newsletter, contact, checkout, and page-view events go to our own /api endpoints first. The browser also loads PostHog to measure anonymous clicks, heatmaps, scroll depth, and privacy-masked session recordings. Form fields are masked. We do not send IP addresses, emails, or card numbers to PostHog. Cards stay on Stripe Checkout. Superwall is not used.
If you arrive from a social post or ad, we remember the campaign tags and Meta’s click id (fbclid) in your browser’s localStorage so your order can be credited to that campaign. When ad measurement is switched on, the same anonymous funnel events (page view, add to bag, checkout start, purchase) are sent server-side to Meta’s Conversions API with only the click id and a hashed visitor id — never your email, phone, name, card, or IP address. Clearing your site data removes the stored tags.
Cards are collected only on Stripe Checkout (checkout.stripe.com). We never see or store card numbers. Stripe is named as the payment processor when STRIPE_SECRET_KEY is set. Contact and list emails are sent through Resend when RESEND_API_KEY is set. We do not sell personal information.
Your rights
You can ask to access, correct, or delete your personal information, and you can opt out of marketing email at any time. Email support@innerhealthresearch.com and we handle it — no verification maze.
If you are in California, this covers your CCPA and CPRA rights. If you are in the EU or UK, it covers your GDPR rights. Same inbox, same answer.
How long we keep records
Order and email records are kept only as long as needed to serve your account and meet tax law. After that, they are deleted.
Questions: support@innerhealthresearch.com.
Last updated October 10, 2026.
