A clear record of what we receive.

01 · Scope

The short version.

FormulaSignal does not sell personal information, run ads, or earn commissions from supplement brands. Some pages link to Amazon through the Amazon Associates program. If you follow one, Amazon's own privacy notice applies on amazon.com; FormulaSignal receives aggregate click and earnings reports from Amazon, never who bought what, and records nothing about the click itself. Our own creator referral program can credit a creator for a FormulaSignal subscription; it cannot change our evidence or conclusions. Email hello@formulasignal.com for privacy questions, corrections, or requests about information associated with you.

02 · Information we receive

Different surfaces, different data.

• Ask processes your question to look up stored records. Its server logs record safe outcome categories and resolved product identifiers, not question text or answer prose. No account is required to read the public Record.
• Ask questions are handled in memory for that response. They are not saved to an account, used for training, or used for targeting. Ask uses a URL query, so the question can remain in your browser history. Do not include personal health information in questions, product requests, collection names, or support messages.
• A Locker draft is stored in this browser for up to 30 days and is not sent to FormulaSignal until you choose to save it to an account. Saved Lockers hold product selections, collections, dated label references, and research requests. These remain available after you cancel monitoring; you can export or remove them in your Locker, or delete your account in Settings.
• Monitoring and alerts use an email address, an opaque owner reference, and stated non-health preferences when a person chooses to provide them.
• The FormulaSignal email is a separate list. The signup form offers it with the box unchecked; choose it to join. It covers confirmed formula changes and newly added products, no more than twice a month. Every one carries an unsubscribe link, and Settings lets you request an opt-out too. The list is held with Resend, our email provider, and deleting your account requests its removal from that list.
• Paid customers may provide a name, email, company, role, priorities, and billing details. Full payment-card details are handled by Stripe, not FormulaSignal.
• Google sign-in gives us your verified email address to open your account. We do not request access to Gmail, contacts, or Drive.
• If you enable browser notifications, we store a push endpoint, encryption keys, an optional device label, and its account and session references. Your browser’s push provider carries the encrypted notification. Turn off a device in Settings or browser controls; deleting your account removes its stored endpoints.
• The FormulaSignal iPhone app keeps its device Locker on the iPhone for up to 30 days, as the browser draft does, and sends it only when you choose to save it to an account. Your sign-in credential is kept in the iOS Keychain, and a copy of your account Locker is cached on the phone for offline reading; signing out, or a session ending, removes that copy. App questions to Ask are sent in the request body, not a URL.
• If you turn on device alerts in the app, we store that iPhone’s Apple push token with its account and session references, and Apple Push Notification service delivers the alert. Lock-screen alerts do not name the product unless you choose that in Settings.
• App Store subscriptions are processed by Apple. We receive Apple’s signed transaction details, such as the product, purchase and expiry dates, renewal status, and an original transaction identifier, and link them to your account to provide access. We do not receive your Apple Account details or payment card.
• When you email support, we receive the message and the contact details included in it so we can reply.

03 · Use

Why we use it.

We use information to provide customer access, deliver alerts and editions, process billing, answer support requests, investigate corrections, protect the service, and decide what the Record should research next.

We do not use health information for training, targeting, advertising, or account personalization. Storing a health preference would require a separate, specific, revocable opt-in.

Cookies and your choices.

Essential cookies keep you signed in and protect sign-in requests. Your requested Locker draft and unsaved additions use browser storage for up to 30 days; they are not advertising profiles.

When a guest requests a source recheck, an essential cookie remembers that browser’s request history for up to one year. We use a hashed connection identifier to enforce the monthly guest allowance. Signed-in recheck requests belong to your account and are removed when you delete it.

Optional attribution cookies remember an acquisition channel (fs_channel) or a creator referral (fs_creator_visit) for up to 30 days. They are off until you allow them. When allowed, a creator visit can be recorded and linked to a later account or subscription to credit that referral.

The fs_cookie_choice cookie remembers your allow or essential-only choice for 30 days. Change cookie preferences below at any time. Choosing Essential only removes the optional cookies and stops future browser attribution. It does not delete existing billing records or undo creator commissions already recorded. Your free Locker and sign-in continue to work.

We record product events on our server, such as account creation, first saved collection, account visits, monitoring activity, and delivery outcomes. These may be linked to your account ID and are not anonymous. We do not install advertising pixels or record anonymous device drafts as server activity.

We do not load browser analytics, session replay, advertising pixels, or third-party JavaScript on our pages. Cloudflare still processes connection information to host and protect the service. Worker request logs redact URL query strings.

Monitoring alerts and monthly reports contain a first-party image that records an email open, and links that record a click, using an opaque delivery identifier linked to your account. Email software can load images automatically, so an open is not proof that you read the message. Email preferences are separate from cookie permission.

We do not track you across other websites. A browser Do Not Track signal does not change essential sign-in or security processing. Optional first-party attribution follows the cookie choice above.

Saved reorder dates are private reminders, not purchase records. Reorder emails are off by default and require a separate choice in Settings. Cookie permission does not subscribe you to email.

04 · Service providers

Who helps operate FormulaSignal.

Current providers include Cloudflare for hosting and the customer database, Stripe for billing and payment processing, Resend for transactional and opted-in marketing email, Google for optional sign-in, browser push providers for enabled notifications, and Hostinger for incoming support mail, and Apple for App Store purchases and iPhone notifications. They receive information only as needed to provide their service.

Our JavaScript and Geist and IBM Plex Mono fonts are self-hosted. Stripe checkout and billing, Google sign-in, and external source links open their own services, where their privacy notices apply. Some evidence images load from source publishers; those publishers receive the connection information needed to serve the image.

05 · Retention and security

Keep the record, limit the rest.

Evidence records remain part of the historical Record. Research requests may be retained to guide coverage. Questions identified as personal health inputs are not written to our research, customer, or demand records. Deleting your account removes its saved Locker and unlinks its product events. Billing and historical commercial records may remain for billing obligations and existing agreements.

Customer access uses expiring magic links and secure sessions rather than a password database. Stripe handles card data, and no online system can promise perfect security.

06 · Your choices

Ask us to review your information.

Email hello@formulasignal.com if you want to ask about access, correction, deletion, or withdrawal of a non-health preference. Include enough detail for us to identify the relevant account or message, but do not send passwords or full payment-card details.

Adults and children’s information.

Accounts and monitoring are intended for adults 18 and older, and the service is not directed to children under 13. We do not ask for dates of birth. If you believe a child under 13 has provided personal information, contact hello@formulasignal.com. We will investigate, stop further collection associated with the identified account, and arrange deletion after verifying the requester’s authority.

07 · Changes

This page can change as the service does.

If the way FormulaSignal handles information materially changes, this page will be updated with a new date.