Interaction checker selections
Medication and supplement selections are sent to the website to process a check. The website does not save your list to your account or browser storage and does not log the submitted list. It is not sent to an external medical or AI service.
The checker submits selections in the request body rather than in a shareable URL. Results are marked private and are not cached by the website. Hosting services process request metadata under their own policies.
Reading and searching
Public reference pages do not require registration. Searches are used to return matching pages. We do not use session replay or send search queries to behavioral analytics.
The hosting service processes technical request information needed to deliver and protect the site, such as IP addresses and browser information. Abuse controls use short-lived request counters; raw health searches are not sent to a general analytics service.
Optional website analytics
With your permission, Google Analytics 4 uses cookies to measure visits to public pages, sessions, engagement time, reading depth, and navigation between site sections. This helps us understand which information readers use. Google receives the public page address and technical device information; page addresses can reveal the supplement topic you read.
Google Analytics does not load before you allow analytics. You can decline or withdraw permission through Analytics Preferences in the footer of public pages. We remember your choice for 180 days. Browser Global Privacy Control and Do Not Track preferences disable analytics.
Search pages, the interaction checker and its results, accounts, administrator pages, contact forms, and protected citations are excluded. We do not send search terms, selected medications or supplements, names, email addresses, form contents, URL query strings, or fragments to Google Analytics. We do not use session replay, Google Signals, or advertising personalization through analytics. Analytics consent is separate from advertising consent.
Reports include consenting visitors only. Google processes analytics data under its own privacy policy, available at policies.google.com/privacy. You can contact us with questions through the Privacy request option on the Contact page.
Website accounts
For a SupplementSafety.org account, we store your name, email address, a securely hashed password, and session information. Account cookies keep you signed in.
You can change your password or delete your website account from Your account. Deleting the account does not delete an independently submitted contact message; contact us for that request.
When you contact us
If you submit a contact form, we receive the name and email address you choose to provide, your message, its topic, and an optional page link. We use these details to handle the request.
Do not include medical records, a personal medication list, or other sensitive health details. Use the Contact form to request deletion of information you submitted.
Verification and cookies
Full-citation access uses a verification cookie lasting 30 minutes and request information to limit automated collection. Cloudflare Turnstile processes information required for that check when configured. Its verification script loads only when opening the full-citation check, not on articles, directories, or search pages. These controls are used for security, not advertising.
Advertising
Advertisements are labeled and separate from our reference content. We reserve advertising positions on public articles, product profiles, company pages, and directories. The homepage, interaction checker, search results, account pages, forms, and full-citation pages do not run advertising scripts.
Live Google AdSense ads remain disabled until site approval and advertising privacy setup are complete. When enabled, Google’s consent message may load before any ad request. Google can receive your IP address, device information, and the address of the public page you visit; the page address may reveal a supplement or medication topic. We do not send Google your searches, checker selections, account details, or form contents.
Google ads use the applicable consent and privacy choices. Nonpersonalized ads can still use cookies and require consent where applicable. When advertising is enabled, use Ad Privacy Settings in the footer to manage available choices. Browser Global Privacy Control or Do Not Track disables Google advertising on this site. Analytics Preferences controls Google Analytics separately.
Google explains its data practices at policies.google.com/technologies/partner-sites. Own image-and-text campaigns use aggregate impression and click counts identified by campaign, placement, and day. Custom advertising scripts require separate authorization through the consent platform. Advertising scripts are disabled in the private preview.
Other services
External websites have their own privacy practices. A private review version hosted through Sites may require the owner’s platform sign-in before the website opens. This access control is separate from a SupplementSafety.org website account.
Contact
SupplementSafety.org is published by Evidbase Inc. For privacy questions or requests, use the Contact form and select Privacy request.