Privacy Policy

Who this policy covers

This policy applies to vitalitaetsreport.com. The data controller, the company that decides how and why your information is processed, is Aurora Group Platforms LLC, 30 N Gould Street, Sheridan, WY 82801, United States. You can reach us at [email protected]. There is no phone line.

The short version

• You can read every page without giving us anything. There are no accounts, no logins and no payments here.
• If you subscribe to the newsletter, we store your email address, the time you signed up and your IP address, in a file on our own server.
• Microsoft Advertising's measurement tag is present on every page, but advertising consent starts as denied and its cookies are only set if you click Accept on the banner.
• Your cookie choice is saved in your own browser under the name vr_consent, not on our server.
• We do not sell personal information.

Information we collect

What we do not collect

• No accounts, passwords or profiles.
• No payment details. Every purchase happens on Amazon.com, and we never see the order.
• No health information. We do not ask what you take or why, and we do not want to know.
• No precise location, no contacts, no device fingerprinting of our own.
• No other analytics or advertising tools. Microsoft Advertising UET is the only third-party measurement on the site.

The newsletter, exactly as it works

The Monthly Report signup form sends your email address to a script on our own server. The form also contains a hidden field that people do not see; if an automated program fills it in, the submission is silently discarded and nothing is stored.

A valid address is written, with the date and time in UTC and your IP address, to a file named subscribers.csv in a directory on our server that is not linked from the site. If your address is already in the file, nothing new is added. When the request comes through Cloudflare, the IP address recorded is the one Cloudflare reports as yours; otherwise it is the address that connected to our server.

The form does not send a confirmation email. We use the address for one thing: sending The Monthly Report, at most once a month, when new Reports and Briefings are published. We do not sell, rent or share the list, and we do not use it for anything else.

To unsubscribe, or to have your record deleted, email [email protected] from the subscribed address. Every issue we send also says how to unsubscribe. We remove the record promptly and in any case within 30 days.

Cookies, consent and Microsoft Advertising

We use one advertising tool: the Microsoft Advertising Universal Event Tracking (UET) tag, which lets us see whether visits to this site followed an ad we ran on Microsoft's network. We want to be precise about what it does, because "only after consent" is easy to say and easy to get wrong.

The tag's script is loaded on every page, whatever you choose. Immediately after it, the page tells the tag that advertising storage is denied by default. Under Microsoft's published Consent Mode rules, in that state the tag does not read or write first-party cookies, does not write Microsoft's third-party cookies, and reads third-party cookies only for fraud and spam checks. Microsoft states that it still receives anonymized, aggregated data in the denied state. A request to Microsoft's measurement domain therefore happens on every page load; what changes with your choice is what the tag is allowed to store and read.

If you click Accept, the page sends Microsoft a "granted" signal, on that page and on every later page while your choice is stored. Microsoft may then set and read identifiers such as MUID, _uetsid, _uetvid and MSPTC to measure conversions and build remarketing audiences. If you click Decline, the signal stays "denied."

Your choice is stored only in your browser, in a localStorage item named vr_consent, with the value granted or denied. It is not sent to our server. The footer of every page has a Cookie settings button: it clears that item and reloads the page, so the banner appears again and you can choose afresh.

Global Privacy Control. If your browser sends the Global Privacy Control signal and you have not yet made a choice on this device, our script records "denied" for you and does not show the banner. If you had already clicked Accept on this device before turning the signal on, that stored choice stands until you press Cookie settings; after the reload, the signal is honored.

The full list of cookies and storage items, with their purposes, is in our Cookie Policy.

Server logs and Cloudflare

Like every website, our server keeps standard request logs. We use them to keep the site working, to diagnose errors and to block abusive traffic. We do not use them to identify readers or to build profiles. The site is delivered through Cloudflare, which processes connection data as our service provider and may set a technical cookie when its bot-protection is active, as described in the Cookie Policy.

How we use information

• Newsletter: to send The Monthly Report and to manage your subscription.
• Site operation and security: logs and Cloudflare data, to keep the site available and safe.
• Advertising measurement: only after you click Accept, to understand whether our ads on Microsoft's network reach readers.
• Correspondence: to answer you, to correct our pages, and to keep a record of requests we are legally required to honor.

Who else sees information

We do not sell personal information. We rely on a small number of service providers:

• Our hosting provider, whose server stores the site files, the logs and the newsletter file.
• Cloudflare, which delivers and protects the site.
• Microsoft Advertising, only after you click Accept, for the measurement described above. Microsoft is an independent company and processes those identifiers under its own privacy statement.

We may also disclose information if the law requires it, or to protect the rights, property or safety of Aurora Group Platforms LLC, our readers or the public.

Sale and sharing under California law

We do not sell personal information, and we receive no money or other value in exchange for it. If you click Accept, Microsoft may use its advertising identifiers to measure our ads and to build audiences for them; under California's definition, that use of a third-party advertising tool may count as "sharing" for cross-context behavioral advertising. You can opt out of it at any time by clicking Decline, by pressing Cookie settings and choosing Decline, or by turning on Global Privacy Control in your browser, which we treat as an opt-out. We do not knowingly sell or share the personal information of anyone under 16.

When you click through to Amazon

Every Report links to a product listing on Amazon.com through the Amazon Associates program (see our Affiliate Disclosure). Once you are on Amazon, Amazon's own privacy notice applies. Amazon tells us, in aggregate, which items were bought through our links; it does not tell us who bought them.

Where information is kept

Our server and our service providers are located in the United States. If you visit from the European Economic Area, the United Kingdom, Switzerland or elsewhere, your information is transferred to and processed in the United States, where privacy law may differ from your country's. We take the steps described in this policy to protect it wherever it is held.

How long we keep information

• Newsletter records: for as long as you are subscribed; removed within 30 days of an unsubscribe or deletion request.
• Server logs: for a limited period needed for security and troubleshooting. We do not keep a long-term archive of logs.
• Your cookie choice: in your browser until you clear site data or press Cookie settings.
• Microsoft's identifiers: on your device for lifetimes set by Microsoft, or until you clear them or withdraw consent.
• Email correspondence: for as long as needed to handle the matter and to show we handled it.

Security

We take reasonable technical and organizational measures: the site is served over HTTPS behind Cloudflare, the newsletter file is kept in a directory that no page links to, and access to the server is restricted. No method of storage or transmission is perfectly secure, and we cannot promise that information will never be exposed by events outside our control.

Children

This site is written for adults and is not directed at children. We do not knowingly collect personal information from anyone under 13. If you believe a child has given us information, for example through the newsletter form, email us and we will delete it.

Your rights and choices

Cookie choice. Press the Cookie settings button in the footer of any page to make or change your choice, or send a Global Privacy Control signal from a supporting browser.

Newsletter. Email us from the subscribed address to unsubscribe or to have your record deleted.

California residents (CCPA/CPRA). You have the right to know what personal information we collect and how we use it, to request a copy of it, to request deletion, to request correction, to opt out of the sale or sharing of personal information, to limit the use of sensitive personal information (we collect none), and not to be discriminated against for exercising these rights. Send requests to the email address below. We respond within 45 days, and tell you if we need up to 45 more; opt-out requests are honored as soon as feasible and within 15 business days. We may ask you to confirm the request from the email address on record. You may use an authorized agent if you give the agent written permission.

Residents of other US states with comparable privacy laws have similar rights to access, correct, delete and opt out, and may appeal a decision by replying to our response; we will explain how in each answer.

Visitors in the EEA, the UK and Switzerland. Where the GDPR or UK GDPR applies, our lawful bases are your consent (newsletter, advertising cookies) and our legitimate interest in running a secure site (logs, Cloudflare). You have the right to access, correct or erase your data, to restrict or object to processing, to receive your data in a portable format, and to withdraw consent at any time without affecting earlier processing. We answer within one month. You also have the right to complain to your local supervisory authority; we would welcome the chance to resolve the matter first.

How to make a request

Write "Privacy request" in the subject line and tell us what you would like: a copy, a correction, a deletion, or an opt-out. We will not ask for more information than we need to find your record and confirm it is yours.

Changes to this policy

We will update this page when our tools, practices or the law change, and move the "Last updated" date at the top. For a material change we will also say what changed, here on this page.

Sources

• Microsoft Advertising, "Setting up UET for consent mode" (what ad_storage granted and denied permit; the tag loads with consent denied by default in Advanced Consent Mode; anonymized data in the denied state). learn.microsoft.com/en-us/advertising/msa-help/hlp_ba_conc_uet_consent
• Microsoft Advertising, "FAQ - UET and user consent" (the cookies subject to consent: MUID, _uetvid, _uetsid, _uetsid_exp, _uetvid_exp, MSPTC). learn.microsoft.com/en-us/advertising/msa-help/hlp_ba_conc_uet_consentfaq
• Microsoft Privacy Statement (how Microsoft uses advertising identifiers and how to opt out of personalized ads from Microsoft). microsoft.com/en-us/privacy/privacystatement
• Cloudflare, "Cloudflare cookies" (the technical cookies Cloudflare may set). developers.cloudflare.com/fundamentals/reference/policies-compliances/cloudflare-cookies
• California Department of Justice, "California Consumer Privacy Act (CCPA)" (consumer rights and response timelines). oag.ca.gov/privacy/ccpa
• Global Privacy Control, project site (what the signal is and its status under California law). globalprivacycontrol.org