Privacy notice
What we collect (very little), why, and what you can ask us to do about it.
The tools work inside your browser and send nothing. We only see your email address if you ask us to email you something (sent once, not kept) or sign up for the monthly update (kept until you unsubscribe). No analytics, no ad trackers, no tracking cookies.
On this page
Does anything I type in the tools leave my device?
No. The BMI, eligibility, cost and doctor-visit tools work out everything inside your browser.
Your answers aren’t sent to us or anyone else. They aren’t saved, and they don’t go in the page address. Close the tab and they’re gone. The only exception is when you choose to email yourself a result, described next.
“Ask AI about this page” opens ChatGPT or Claude in a new tab with this page’s address and a short starter question. It never includes your answers. What you type there is covered by that service’s own privacy policy, not this one.
What happens when I email myself a sheet or a list?
We send it once, through our email service provider, and keep no copy.
- What is sent
- Your email address and the content as it looks on screen. For the doctor-visit sheet that can include health information: conditions, medicines, measurements and any notes you typed. For a card from a guide (a checklist or a list of questions) it’s the page’s own text.
- Who receives it
- Our email service provider, which delivers the message to you, and nobody else. We will name the provider on this page before the email features go live.
- What we keep
- Nothing. The sheet and your address aren’t saved on our servers. Like every email service, the provider keeps a short delivery record (your address, the time, whether it arrived) under its own retention rules.
- Abuse protection
- So that nobody can use the feature to send email to other people, we count how many sends come from one IP address and go to one email address. The count deletes itself after an hour. A Cloudflare Turnstile check also confirms a person pressed Send.
- Legal basis
- Your explicit consent, given by ticking the box before you send. The box starts unticked and nothing is sent without it. This covers the EU and UK GDPR (Articles 6(1)(a) and 9(2)(a)), Washington’s My Health My Data Act and India’s Digital Personal Data Protection Act.
- Withdrawing consent
- Untick the box, or don’t press Send. Once the email has gone there’s nothing left with us to delete, but you can ask us to have the provider’s delivery record removed (see Contact).
The separate, optional box for the monthly update only starts a sign-up that you confirm by email. It’s explained below.
What do you keep if I sign up for the monthly update?
Your email address and the country you chose, until you unsubscribe.
- Double opt-in. We email you a link first. You’re only added if you click it; if you don’t, nothing else happens.
- What is stored: your email address, the country update you chose (for example India or the US), and when you confirmed. Our email service provider holds this list for us.
- What it’s for: the monthly update for your country, and nothing else. We never sell or share your address, and never use it for ads.
- Unsubscribe at any time with the link at the bottom of every email. It removes you straight away. You can also ask us to delete your address completely.
- Abuse protection: as above, sign-ups are counted per IP address for an hour and per email address for a day.
- Legal basis: your consent, which you can withdraw by unsubscribing.
What happens to an error report?
It’s emailed once to our corrections inbox and isn’t saved on the website.
The form on our corrections page sends the page address, the sentence, what’s wrong, an optional source link and, only if you add it, your email address. We keep the email only as long as we need to check the report, reply to you and record the fix. Your email address is used only to reply. Please don’t include health details about yourself.
Which cookies and browser storage do you use?
One cookie and three small browser-storage items, all for features you use. None of them tracks you or is used for advertising.
| Name | Type | What it does | How long |
|---|---|---|---|
glp_cc | Cookie | Remembers the country version you chose or last read (a two-letter code such as “uk”), so the home address opens it next time. | 1 year |
gx_pop_until | Local storage | After you close the monthly-update pop-up, holds the date until which it stays hidden. | Has an effect for 21 days; stays until you clear it |
gx_sub | Local storage | Notes that you signed up for the update, so the pop-up doesn’t ask again. | Until you clear it |
glpPath | Session storage | Remembers the reading path you picked (for example “I’m already taking one”) while you move between guides. | Until you close the tab |
Local and session storage stay in your browser and are never sent to us. The cookie travels with page requests so our server can send you to your country’s home page; we don’t log or keep it. You can clear all of them in your browser settings and the site still works.
Which other services does my browser contact?
Only those needed to show the page, plus the ones you choose to use.
- Cloudflare hosts the site. Like any host, it processes your IP address and request details to deliver pages and block attacks. When you send a form, its Turnstile check confirms you’re a person.
- Google Fonts: our pages load their fonts from Google’s servers, so Google receives your IP address when a page loads, under Google’s own privacy policy.
- Our email service provider, only when you use an email feature.
- ChatGPT or Claude, only if you click “Ask AI about this page”.
Do you use analytics?
No. We don’t use analytics, advertising pixels, session recording or fingerprinting.
If we ever add analytics, we will update this page and the change log below before it starts, and say exactly what it collects.
Consumer health data privacy policy (US)
This section is our consumer health data privacy policy under Washington’s My Health My Data Act and similar US state laws.
- Health data we collect
- Only what is on a doctor-visit sheet you choose to email to yourself: conditions, medicines, measurements, symptoms and your notes. The tools themselves collect nothing.
- Why
- Only to send you that email, once.
- Where it comes from
- From you, directly.
- Who we share it with
- Our email service provider, which delivers the email on our behalf. Nobody else. We never sell health data.
- How long we keep it
- We don’t keep it. The provider keeps only a short delivery record, as described above.
- Consent
- We collect and share it only after you tick the consent box. You can say no simply by not ticking it.
- Your rights
- You can ask us to confirm whether we hold or have shared your consumer health data, to see it, to get a list of everyone we shared it with, to withdraw your consent and to delete it. We answer within 45 days. If we refuse, you can appeal; if the appeal is refused, you can contact the Washington State Attorney General.
- Geofencing
- We don’t use geofences or location data of any kind.
What are my rights?
Wherever you live, you can ask what we hold about you, have it corrected, or have it deleted.
In practice, the only personal data we can hold about you is your newsletter sign-up and any error report you sent. Some laws give you more rights:
EU and UK (GDPR)
You can ask to see your data, correct it, delete it, limit or object to how we use it, and take a copy with you. You can withdraw consent at any time; that doesn’t make earlier use unlawful. You can complain to your data protection authority, such as the CNIL in France, your state’s data protection authority in Germany, or the ICO in the UK. We answer within one month.
United States (Washington’s My Health My Data Act)
Access, deletion and withdrawing consent, as set out in the consumer health data policy above.
India (Digital Personal Data Protection Act, 2023)
Your consent is for a specific purpose and you can withdraw it as easily as you gave it. You can ask for a summary of your data and who it was shared with, have it corrected, completed or erased, and name someone to act for you. Raise a complaint with us first; if we don’t resolve it, you can go to the Data Protection Board of India.
Everywhere else
Your local law, for example in Canada, Australia, the UAE or Saudi Arabia, may give you similar rights. We answer access, correction and deletion requests from anyone.
How do I contact you about privacy?
Email us. We’re a small independent team, and GLP Guidebook decides how the data on this page is used.
Our address will be [email protected]Coming soon. It isn’t live yet, so please don’t send anything to it today. The email features aren’t live yet either, so we hold no personal data at the moment.
Changes to this notice
We’ll update this page before we change what we collect, and record each change here.
- 12 Oct 2026First version.