Short version: almost nothing

If you just take the test

Nothing leaves your browser. Every number is computed on your own phone or laptop. The panel is handed from the test to the result page inside the tab itself, and it is gone when you close the tab — which is why the result page tells you to write down anything you want to keep.

Two small preferences are remembered on your device so you don't re-enter them: whether you use inches or centimetres, and the target age you last looked at. Nothing else, and neither is sent anywhere.

There is one exception, and it is Google Analytics. Until 18 September 2026 this page said there were no analytics of any kind. That is no longer true, so the sentence is gone rather than quietly softened.

What that means concretely. Every page loads one script from Google, and Google is told which page you looked at, roughly when, what browser and device you are on, and your approximate location from your IP address. A cookie is set so that a second visit is not counted as a new person. That is ordinary website analytics and it is how we find out whether anybody finishes the test.

What Google is not told: anything you measured. Your results never enter a URL and never leave your browser except on the consent you tick, so there is no path by which a heart rate or a walking speed reaches an analytics request. The pages are the only thing counted, not the numbers on them.

There are still no advertising tags, no tracking pixels, and no fonts or images loaded from anybody else's server.

If you give us your email

You are asked after your results are on screen, never before, and the boxes are separate because they are separate decisions.

• Remind me to retest. Your email address and your results are stored, so the next panel can be shown against this one. Your results are stored against your address — that is what makes the comparison possible, and it means they are not anonymous.
• Send me new writing. Your address only. A few times a year. The same list is reachable from the subscribe box at the foot of the writing pages. Either way you have to click the link in the confirmation email first — an address that never confirms is never sent to.
• Add my results to the reference dataset. Recorded as your answer, but nothing is being written to that dataset yet — it is waiting on a legal determination about whether the table really is de-identified. Your permission is kept for when it is; it is not a licence to start today.

Untick all of them and nothing about you is stored at all.

If you write to me

The form at the foot of the writing pages stores what you typed, your email address, and which page you wrote it from. Nothing else — there is no column for your name, and none for your IP.

It is never published. It is not a comment section, and the table it goes into has no column that would let it become one: nothing marks a note as approved or visible, because nothing renders notes anywhere. Your words go to one person.

Your address is kept so that person can reply, and for nothing else. Writing to me does not subscribe you to anything — those are two separate forms and two separate records.

To have a note deleted, ask. Write again and say so, or reply to any email from us, and it goes. If you also subscribed, the one-click delete link in your confirmation email removes your notes along with your address, in the same action.

What we never store

Your IP address. There is no column for it. The limit that stops a script hammering the signup endpoint counts requests in memory and forgets them on every deploy, specifically so that no address is written down — an IP beside a health result is the field that makes everything else identifiable again.

That is a statement about our database, and it would be misleading on its own now that analytics exist: Google sees your IP address, as it does on most of the web, and uses it to work out roughly where you are. We never receive it and never store it.

Your name, your location, your device, and anything you did not type into a box.

Deleting it

Every email we send carries a one-click delete link, including the first one. It removes your address, your results and any notes you have sent together, in one action, with no sign-in and no reply to a support address. All three go in a single database transaction, so there is no state where one survives the others. A confirmation mail that cannot also delete you is a subscription trap.

You also have to confirm by clicking that first email before anything is sent to you. Ignore it and the address expires unconfirmed.

Selling it

No. Not to advertisers, not to insurers, not to data brokers, not as part of anything. There is no version of this product where your panel is the thing being sold.