Legal
Privacy policy
The short version: the only personal information we ask for is your email address, and only if you choose to join the weekly email. We use Google Analytics to count visits, you can switch it off, and we do not sell your data.
Last updated 30 July 2026
Who we are
The Vitality Review is published by Oakman. In this policy, we and us mean Oakman. You can reach us at oakmanhealth@gmail.com.
What we collect
Your email address, if you give it to us. The only place we ask for personal information is the weekly email signup in the footer. If you subscribe, we collect the address you type and the fact that you subscribed.
Standard server records. Our host records ordinary technical information when a page is served, such as the address of the request, the page requested, and the time. This is how the site stays up and how attacks are blocked. We do not use it to build a profile of you.
Analytics, unless you say no. We use Google Analytics to count visits and see which pages get read, which is how we decide what research to cover next. It collects an approximate location from your IP address, your device and browser type, the pages you view and how long you stay. It tells us a page was read. It does not tell us who read it.
If you are in the United Kingdom, the European Economic Area or Switzerland, nothing analytics-related loads until you have agreed, and ignoring the notice counts as no. Everywhere else it loads by default and you can turn it off at any time with the Cookie settings link in the footer. Our cookie policy has the detail.
Nothing else. No advertising pixels, no social media trackers, no session recording, and nothing that follows you to other sites. We do not ask you to create an account. We do not collect names, addresses, payment details or health information, and please do not send us health information about yourself.
The weekly email
Like most email, the weekly email can record whether a message was opened and which links were clicked. We use that to judge whether an issue was worth sending, not to profile you. Blocking remote images in your email client stops open tracking, and the unsubscribe link in every email ends it altogether.
Cookies
Two values are stored locally by your browser, one remembering that you closed the first-visit notice and one remembering your analytics answer. Neither is sent to us. Google Analytics sets its own cookies where it runs. There are no advertising cookies. Our cookie policy lists every one of them with its purpose and duration.
Why we collect it, and what we do with it
We use your email address to send you the weekly email, which is new studies explained in plain language. We do not send you anything else without asking, we do not sell or rent your address, and we do not share it for anyone else’s marketing. We use the analytics data to understand which subjects readers actually want, and for nothing else.
If you are in the United Kingdom or the European Economic Area, our lawful basis for sending you the email is your consent, which you give by subscribing and can withdraw at any time, and our lawful basis for analytics is also your consent, which you give in the first-visit notice and can withdraw with the Cookie settings link. Our lawful basis for keeping the site running securely is our legitimate interest in operating it.
Who else handles it
We use a small number of service providers, and only for the purposes below.
- Google provides Google Analytics, where it is running.
- Klaviyo stores the subscriber list and sends the weekly email.
- Vercel hosts the site and keeps the standard server records described above.
- Supabase stores the study library itself. It holds no subscriber or visitor data.
These providers process data on our instructions. We do not sell personal information, and we do not share it for cross-context behavioral advertising.
Where your data goes
We are based in the United States and our providers, including Google, store and process data in the United States. If you subscribe or are measured from outside the United States, that data is transferred there.
How long we keep it
We keep your email address until you unsubscribe or ask us to delete it, and then we remove it from the active list. Analytics data is retained for 14 months. Server records are kept for a short period by our host and then deleted in the ordinary course.
Your choices and your rights
Every email we send has an unsubscribe link, and it works. Analytics can be switched off whenever you like using the Cookie settings link in the footer of every page. You can also write to oakmanhealth@gmail.com and ask us to show you what we hold about you, correct it, or delete it, and we will do that. You will not be treated any differently for asking.
Depending on where you live you may have further rights, including under the California Consumer Privacy Act or the UK and EU General Data Protection Regulation, and the right to complain to your data protection regulator. The same address handles all of it.
Children
This site is written for adult men and is not directed at anyone under 18. We do not knowingly collect information from children. If you believe a child has subscribed, tell us and we will remove the address.
Security
The site is served over an encrypted connection and access to the subscriber list is limited. No system is perfectly secure, and we will not pretend otherwise.
Changes
If we change what we collect, we will change this page and update the date at the top. Any new service that sets cookies is added to this page and to the cookie policy in the same change, and where the law requires consent we will ask before anything is set.