Privacy

nadplusreport.com is an independently operated United States website that publishes price and route comparisons for NAD+ and NAD+ precursor sellers. It is reached by email at editor@nadplusreport.com, and that address is the contact point for everything described below. This policy sets out what is collected when you read a page here, what it is used for, who else receives any of it, and what you can require us to do about it.

1. Information We Collect

The list below is everything. It is short because the site is built to be short: there are no accounts, no logins, no comment system, no newsletter and no shopping cart, and there is no form of any kind on any page. Nothing here asks you for your name, your address, your date of birth, your weight, your diagnosis, your prescriptions, your lab results, your insurance details or your payment details, and nothing here has anywhere to put them if you sent them.

• What you send us. If you write to editor@nadplusreport.com we hold your message and your email address for as long as it takes to deal with it, and for a reasonable period afterward for reference. That is the only route by which we ever hold an email address. There is no mailing list to join and no address is ever added to one.
• Measurement. Google Analytics records that a page was opened, which page it was, what page you came from, and what kind of browser and device you are reading on. It works out an approximate location from the network address your request arrives with; Google does not expose that address to us, and the reports we see are counts rather than people.
• Server logs. The hosting provider, Vercel, keeps ordinary web-server request logs, which include network addresses and user agents, for operations, billing and abuse prevention. Those logs are Vercel’s, kept on Vercel’s own schedule, and they exist whether or not you have opted out of analytics, because a server cannot answer a request without knowing where to send the answer.
• Storage in your own browser. Two values, both described in section 3, and neither of them is sent to us: your analytics choice, and a count of how many times the outbound notice has appeared during this visit.
• Outbound clicks. Links to sellers pass through /go/ on this domain before the seller, and where a seller pays us, through an affiliate network in between. Section 4 sets out exactly what that redirect attaches and what it does not.

We do not ask for or store health information, and we could not attach any to a reader if we had it. Nothing on this site runs a quiz, an eligibility check, an intake, a calculator that takes your details, or any other surface that would collect one.

2. How We Use Your Information

What the small amount collected here is actually for:

• To serve, operate and secure the site;
• To answer an email you sent us;
• To see which pages, boards and seller reviews readers actually use, so that the ones that help get written more often and the ones that do not get dropped;
• To attribute an outbound click to the page it came from, where a seller pays us for it, so that a payment can be matched to a page rather than to a person;
• To prevent fraud and abuse and to enforce the Terms of Use; and
• To comply with the law where it applies to us.

It is used for nothing else. Specifically, it is never used to build an advertising audience, to retarget you anywhere, to profile you, or to make any automated decision about you. There is no decision about you being made here at all: every page on this site is the same page for every reader.

3. Cookies, Tracking Technologies, and Your Consent Choices

Third-party scripts loaded on this site: one, named in full.

• Google Analytics 4 (Google LLC) — page views, the page a reader arrived from, outbound clicks, and the browser and device type the visit came from.

There is no tag manager, no advertising pixel, no retargeting tag, no session recorder, no heat map, no A/B testing script, no chat widget, no social embed and no data broker. Google Analytics runs here with every advertising purpose switched off — ad storage, ad user data and ad personalization are all denied, permanently and for everyone, rather than being a setting you have to find. Nothing here builds an advertising audience, and nothing collected here is sold, rented or traded to anyone.

Google Analytics sets its own cookies (_ga and _ga_<stream>) to tell one browser’s visits apart from another’s. Beyond those, this site uses your browser’s own storage for two values and no others. One is your analytics choice, held in local storage, which is what lets the switch below survive a reload. The other is a small record in session storage of how many times the notice that can appear when you leave for a seller has been shown during this visit and which companies it was shown for, which is what stops it appearing twice for the same company; it is cleared when you close the tab. Neither value leaves your browser, and neither is readable by us.

Analytics is on by default and measurement begins when the page opens, which is how United States privacy law contemplates it working and how the notice at the foot of the page describes it. You can switch it off here, permanently for this browser.

Turning analytics off

The switch applies immediately, on this page, without a reload — a control that only takes effect on the next page is a control that did nothing on the page you clicked it. When you opt out, Google Analytics is told to stop using storage and the _ga identifiers already on your device are deleted, because a consent signal on its own does not remove a cookie that is already there. Your choice is remembered in this browser and honored on every later visit from it. Clearing this site’s data in your browser clears the choice along with everything else, and the default returns.

If your browser sends Global Privacy Control, analytics is already off here and this site will not override that signal. You do not have to click anything, and the control below will tell you so rather than offering you a switch that would do nothing.

Reading your current setting…

You can also turn Google Analytics off across every site you visit using Google’s own browser add-on, and you can block or delete cookies in your browser settings. Nothing on this site depends on a cookie to work: every page, board, price and review reads the same with all of them blocked.

4. Third Parties We Share Data With

Nothing collected here is sold. The only parties that receive anything are the ones that make the site work:

• Google LLC, as the analytics vendor named above. Google processes the measurement data on our behalf under its own published terms and privacy policy, and it is the only vendor whose script this site loads.
• Vercel, as the hosting provider. Serving a page means handing the request to the host, so Vercel processes the request logs described in section 1 on our behalf.
• Katalys, the affiliate network a paid outbound link travels through on its way to the seller. Its tracking domain is track.revoffers.com, and it is reached only after you click a link to a seller who pays us. It receives the click, the page label the redirect attaches, and whatever your browser sends any site you visit. It never receives anything you sent us.
• The seller you clicked through to. Once you arrive, you are on their site under their privacy policy, and what you type into their intake is theirs and never reaches us.
• Law enforcement or a court, where a valid legal request requires it, or where it is necessary to protect the rights, property or safety of readers or the public.

Outbound links to sellers pass through /go/ on this domain and then to the seller, sometimes by way of an affiliate network. Where alink is paid, the redirect carries an identifier naming which page of this site the click came from — a page, not a person.Identifiers are attached only where a seller pays us; every other link goes out bare. Once you arrive, the seller’s own privacy policy governs, and the network may set its own cookie under its own terms.

What the redirect does not attach is anything about you. It has no reader identifier to send, because it never makes one: it carries the seller’s slug and a label naming the page and the slot the link sat in, all of which were written by this site before you arrived.

5. Your Rights and How to Exercise Them

Wherever you live, you can write to editor@nadplusreport.com and ask what is held about you, ask for it to be corrected or deleted, or opt out of analytics. We aim to answer a verifiable request within thirty days.

In practice the honest answer to most of those requests is that there is nothing to hand over. There are no accounts here, so there is no account data to show you or delete. There is no profile, no reader record, and no database of visitors — the site is a set of published pages and a redirect. What exists is the analytics measurement described above, which is not tied to a name, and any email you chose to send us, which we can delete on request. The fastest and most complete exercise of a right on this site is the analytics switch in section 3: it takes effect on the spot and needs no correspondence with anyone.

For anything held by a seller you reached through a link here, that seller is the controller of it and their policy is where the request goes. We cannot reach into a seller’s systems on your behalf, and we would not be given access if we asked.

6. California Residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act gives you the right to know what personal information is collected about you and how it is used, to have it deleted, to have inaccurate information corrected, to opt out of its sale or sharing, to limit the use of sensitive personal information, and to exercise all of that without being treated differently for doing so.

This site does not sell personal information and does not share it for cross-context behavioral advertising as those terms are defined by that statute, and it has not done so in the twelve months before the date at the top of this page. It collects no sensitive personal information, so there is nothing for a request to limit. Because there are no accounts, the categories collected are the ones in section 1 and nothing more. To exercise any right, write to editor@nadplusreport.com and say what you want; an authorized agent may make the request for you. Global Privacy Control is honored here as an opt-out signal, which is why a browser that sends it needs no request at all.

7. EU/UK Residents (GDPR)

This is a United States publication written for readers in the United States. The sellers compared here ship to United States addresses or treat patients in United States clinics, and many of them require a prescription written by a United States clinician. The site is not marketed to residents of the European Economic Area, the United Kingdom or Switzerland, nothing here is an offer of any product or service to anyone in those places, and the prices on it are unlikely to be of any practical use outside the United States.

If you read it from there anyway, the General Data Protection Regulation and the UK GDPR still give you rights of access, rectification, erasure, restriction, portability and objection over anything processed about you, the right to withdraw consent at any time, and the right to complain to your national data protection authority or, in the United Kingdom, to the Information Commissioner’s Office. Those rights are honored here whether or not you could ever buy anything the site writes about, and the address for all of them is editor@nadplusreport.com.

The lawful bases, where that regulation applies: analytics rests on consent, and this site is built for a United States audience on the opt-out basis United States law contemplates rather than the prior opt-in that regulation asks for, so a reader in a jurisdiction that requires opt-in should use the switch in section 3, which withdraws it immediately and deletes the cookies it set; answering an email you sent is processing necessary to take steps at your request; serving and securing the site, keeping server logs, and attributing an outbound click to the page it came from rest on legitimate interests in running a site that works and can pay for itself, which you may object to at the address above. No special category data is processed, because none is collected, and no automated decision-making of the kind that regulation restricts happens anywhere on this site.

8. Children’s Privacy

The site is written for adults, is not directed to children under thirteen, and does not knowingly collect information from them. There is no sign-up to complete and no form to fill in, so the ordinary route by which a site collects a child’s information does not exist here. If you believe a child has sent us something, write to editor@nadplusreport.com and it will be deleted.

9. Data Retention

Measurement data is held by Google under the retention period set on the analytics property, after which Google deletes it; the aggregate reports built from it are counts and carry nothing that identifies a reader. Server logs are the host’s and are rotated on the host’s schedule. Email you send us is kept as long as it takes to deal with it and a reasonable period afterward, and is deleted on request. The two values in your own browser are kept until you clear them; the session one goes when you close the tab. Nothing else is retained, because nothing else is collected.

10. Security

Every page is served over HTTPS, the site is hosted on a managed platform with access controls on the account that publishes it, and the pages are generated when the site is built rather than assembled on request from a database. The strongest protection here is structural rather than technical: there is no reader database to breach, no password to steal because there are no accounts, and no payment details anywhere because nothing is sold on this domain. No method of transmission or storage is perfectly secure, and nothing here is guaranteed against every possibility.

11. International Data Transfers

The site is operated from the United States and its data is processed there. The vendors named in section 4 operate globally and may process or store data in other countries, each under its own published terms and, to the extent the law requires it, under standard contractual clauses or another recognized transfer mechanism. If you read this site from outside the United States, you are sending your request to a United States server.

12. Changes to This Policy

This policy is revised whenever the site’s behavior changes. A feature that collects, stores or sends anything is not finished until this page describes it, and the date at the top of the page moves with it. There is no archive of previous versions; the date is what tells you whether you are reading a current one.

13. Contact

Privacy questions, requests and complaints all go to one address: editor@nadplusreport.com. It is read by the person who runs the site, and it is the same address printed on the About, Advertise and Corrections pages. The Terms of Use, linked in the footer, cover everything else about using nadplusreport.com.