Privacy Policy

Introduction

RethinkTHC (“we”, “us”, “our”) operates rethinkthc.com (the “Site”). This Privacy Policy explains what information we collect, how we use it, and your choices and rights regarding that information. We are committed to protecting your privacy and being transparent about our data practices.

What We Collect

RethinkTHC does not require user accounts and does not collect personal information such as your name, email address, or phone number through normal use of the Site.

Anonymous analytics data

We collect anonymous analytics information to understand how visitors use our Site and to improve our content. This may include:

• Pages visited and time spent on pages
• Referring website or search terms
• General geographic location (country/region level only)
• Browser type and device information
• Screen resolution and viewport size

This data is collected in aggregate and cannot be used to identify you personally.

Interactive tool data

Some pages on RethinkTHC include interactive tools such as a spending calculator, self-assessment, or timeline tool. Any data you enter into these tools is stored ONLY in your browser's localStorage. This data is never transmitted to our servers, never shared with third parties, and remains entirely under your control. You can clear this data at any time through your browser settings.

Cookies

We use cookies in the following categories:

• Essential cookies. Required for basic site functionality such as page navigation and cookie consent preferences. These cannot be disabled.
• Analytics cookies. Used by Google Analytics to understand site traffic and usage patterns. These are loaded only after you provide consent.

We do not use advertising cookies, retargeting cookies, or tracking cookies from ad networks. You can disable cookies through your browser settings at any time, though this may affect some site functionality.

Cookie Consent

We provide a cookie consent mechanism on your first visit. Analytics cookies are loaded only after you provide consent. If you decline, no analytics data is collected during your session. You can update your cookie preferences at any time through the cookie settings available on the Site.

Google Analytics

We use Google Analytics 4 (GA4) to collect anonymized usage data. Our GA4 configuration includes the following privacy-focused settings:

• IP anonymization is enabled
• No advertising features or remarketing are activated
• No Google Signals data collection
• No user-level data export

Google Analytics processes data according to Google's Privacy Policy. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

Third-Party Services

We use the following third-party services in connection with operating this Site:

• Google Analytics — anonymous usage analytics (see above)
• Vercel — web hosting and content delivery. Vercel processes server logs according to their privacy policy.

Our Site links to external resources including PubMed, government agency websites, and academic journals. These third-party sites are governed by their own privacy policies, and we encourage you to review them independently.

We Do Not Sell Your Data

We do not sell, rent, trade, lease, or otherwise share your personal information with third parties for commercial purposes. Period. We have never sold user data and have no plans to do so.

Your Rights Under GDPR (EU/EEA Users)

If you are located in the European Union or European Economic Area, you have the following rights under the General Data Protection Regulation (GDPR):

• Right to access — request a copy of any personal data we hold about you
• Right to rectification — request correction of inaccurate personal data
• Right to erasure — request deletion of your personal data (“right to be forgotten”)
• Right to restriction — request restriction of processing your personal data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing of your personal data

To exercise any of these rights, contact us at hello@rethinkthc.com. Because we collect minimal data and do not require accounts, in most cases there is no personal data to access, modify, or delete.

Your Rights Under CCPA (California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to know — request disclosure of what personal information we collect and how we use it
• Right to delete — request deletion of personal information we have collected
• Right to opt-out of sale — direct us not to sell your personal information
• Right to non-discrimination — we will not discriminate against you for exercising your rights

We do not sell personal information as defined under the CCPA. To exercise any of these rights, contact us at hello@rethinkthc.com.

Data Retention

Anonymous analytics data is retained for as long as it is useful for understanding and improving the Site. Because we do not collect personally identifiable information through normal use, there is no personal data to delete. Interactive tool data stored in your browser's localStorage is entirely under your control and can be cleared at any time through your browser settings.

Children's Privacy

RethinkTHC is not directed at individuals under the age of 18. We do not knowingly collect any personal information from minors. If we become aware that we have inadvertently collected personal information from a child under 13, we will take steps to delete that information promptly. This site is compliant with the Children's Online Privacy Protection Act (COPPA).

International Data Transfers

Our Site is hosted in the United States via Vercel's global content delivery network. If you access the Site from outside the United States, your anonymous analytics data may be transferred to and processed in the United States. Our cloud service providers maintain appropriate safeguards for international data transfers in accordance with applicable data protection laws.

Security

We take reasonable measures to protect the information collected through our Site. All connections to rethinkthc.com are encrypted via HTTPS. We implement appropriate security headers and follow web security best practices. Because we do not collect personally identifiable information through normal use, the risk profile is minimal — there is no user database of personal data to breach.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Changes will be posted on this page with an updated revision date. Material changes will be communicated prominently on the Site. We encourage you to review this policy periodically.

Contact

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at hello@rethinkthc.com.

See also our Terms of Use and Medical Disclaimer.