Your Privacy Choices

As of the effective date of this page, the Healthy Mango website:

• does not sell personal information,
• does not share personal information for cross-context behavioural advertising,
• does not process personal information for targeted advertising,
• does not run any third-party web-analytics service (no Google Analytics, Plausible, Fathom, Vercel Analytics, or PostHog),
• does not set any advertising or marketing tracking pixel,
• does not set any first-party or third-party cookies through the site, and therefore does not present a cookie consent banner,
• does not embed any third-party media, chat widget, or captcha service,
• stores a small number of preference values in your browser's localStorage on your device (the list of compounds you have marked as favourites, and your preferred library view). These values remain on your device and are not transmitted to HealthyMango by the site, and
• when you submit the newsletter form, stores your email address in Resend, our email-service provider, as a newsletter contact record, and places that contact in either an English-language or Spanish-language mailing segment in Resend based on the language you selected on the form, so that any future newsletter can be sent to you in that language; changing the language on a later submission moves your contact to the segment for the newly selected language. See the Privacy Policy for the full description of this collection and your right to unsubscribe.

Because none of the commercial activities listed above are active, most of the state-law choices that a modern "Privacy Choices" page typically presents — a "Do Not Sell or Share My Personal Information" opt-out, a targeted-advertising opt-out, or a cookie preference centre — would have nothing to switch off on today's site. Presenting them anyway would be misleading. When and if we introduce any of these activities, the corresponding choice will be added to this page.

State privacy laws such as the California Consumer Privacy Act, the Colorado Privacy Act, the Connecticut Data Privacy Act, and the Washington My Health My Data Act require covered businesses to present specific opt-out or authorisation mechanisms for the sale, sharing, or targeted-advertising activities the business actually engages in. They do not require, or invite, a business to present a control that has no effect.

A non-functional "opt-out" would either suggest that an activity we have chosen not to engage in is actually running, or reduce the credibility of a real opt-out we later introduce. This page therefore describes what is available today and what will be added if the situation changes.

HealthyMango reserves the future right, subject to applicable law, to introduce activities that would legally constitute a sale of personal information, a sharing of personal information for cross-context behavioural advertising, the processing of personal information for targeted advertising, or the introduction of tracking cookies or analytics.

Before any such activity begins, HealthyMango will, at a minimum, complete the following five steps:

• update the Privacy Policy to describe the activity in question in specific terms;
• publish a functional "Do Not Sell or Share My Personal Information" (or equivalent) opt-out link from this page and from the site footer;
• implement server-side handling of the Global Privacy Control ("GPC") signal and any other universal opt-out signal recognised by the applicable state law, so that a reader whose browser sends GPC is treated as having opted out of any in-scope activity;
• implement the sensitive-personal-information and consumer-health-data limitations required by the applicable law, including any separate consumer-health-data consent or authorisation required by, for example, the Washington My Health My Data Act; and
• present any notice or obtain any consent required by applicable law at the point of collection or use.

This checklist is a floor, not a ceiling. Where a specific state law imposes a stricter requirement, we will apply the stricter requirement.

The Global Privacy Control is a browser-level signal that a reader can enable to communicate an opt-out preference to every website they visit. GPC is legally recognised in California, Colorado, Connecticut, and other jurisdictions as a valid opt-out signal for activities within its scope.

Because Healthy Mango does not currently engage in any activity within GPC's scope (see "What is happening on the site today"), sending a GPC signal to this site today does not change what the site does — there is no covered activity for it to opt out of. That is a description of the current state, not a refusal to honour GPC. Server-side GPC handling will be implemented before any activity to which GPC could apply begins, as described in step three of the previous section.

The site stores two preference values in your browser's localStorage: the list of compounds you have marked as favourites, and your preferred library view (grid or list). These values are on your device only and are not transmitted to us by the site.

You may clear either value at any time using your browser's site-data controls (typically found under "Settings," "Privacy," or "Clear browsing data"). Clearing site data does not affect anything on our servers because these values are not stored on our servers.

Healthy Mango is an educational site about peptides and research compounds, and some state privacy laws (for example the Washington My Health My Data Act, the Nevada consumer health data law, and analogous laws in other states) define "consumer health data" broadly enough that some ordinary browsing information generated by using a health-focused website could fall within the definition when linked or reasonably linkable to an identified consumer.

The Privacy Policy explains our position on consumer health data in detail: we do not currently use ordinary browsing data to construct individualised health profiles, to infer diagnoses, to share with third-party advertising or data partners, or to sell. Before any feature that would require consumer-health-data consent, authorisation, or a separate notice under applicable law is introduced, we will implement the required notice and consent mechanisms and update the Privacy Policy.

Even though most opt-out choices are not applicable today, you may still exercise the general privacy rights described in the Privacy Policy — access, correction, deletion, portability, restriction of processing, objection to processing, non-discrimination, and appeal — by sending a request to privacy@healthymango.org.

Include enough information for us to verify your identity: the email address you have used to interact with us (for example a newsletter submission), a description of the request, and any information required by the applicable law. We will acknowledge receipt within the time frame required by the applicable law and respond substantively within the time frame required by the applicable law.

We will update this page when the current state described here changes — most importantly, when we introduce any activity that would activate a specific privacy choice (sale, sharing, targeted advertising, cookies, or analytics). The "Last updated" date at the top of the page shows when it last changed.