Privacy

Suber Health is a publication about living longer, published by Wittier Labs, which also publishes three other titles on the same email system. This page says what we collect about you, why, where it is kept and for how long, and how to see it or have it deleted. We have tried to write it so that it can be read.

The short version: reading the site does not identify you. Subscribing to the letter gives us your email address, and we record which letters you open and which links you click. We do not sell or share any of it, we do not use it for targeted advertising, and advertisers only ever see totals.

We use PostHog to understand how the site is used: which pages are read, where readers came from, what is clicked, how far a page is scrolled, and recordings of visits, called session replay, that show us where a page confuses people. A recording shows the pages an anonymous visitor saw and where they moved on them; it does not show who you are, we never connect it to an email address, and anything you type into a form is masked before it leaves your browser. Visit recordings are switched off on the pages where you confirm a subscription or manage your preferences. We have set PostHog up so that it stores nothing on your device: no cookies and no local storage. It is set to discard your IP address, and a reader who returns looks like a new visitor to us, by design. If your browser sends the Global Privacy Control signal, we do not load our analytics at all: nothing is measured and no recording is made.

What we learn from the site is never connected to your email address or to what you do in the letter. We do not know who is reading a page.

We also use Vercel Speed Insights to measure how quickly pages load for real readers. It sets no cookies, and we do not use it to identify anyone.

Our host, Vercel, keeps standard server logs, which include IP addresses, for security and to keep the site running.

To stop forms being abused we count requests per visitor. The count is kept against a scrambled (hashed) version of your IP address, never the address itself, and it is deleted within days.

To send you The Long Version we need your email address. You give it to us on the site and confirm it by clicking a link we email you; until you click, you are not subscribed, and an address that is never confirmed is deleted, normally within three weeks.

We record, for each subscriber, which issues were delivered and opened and which links were clicked, with the time and, for a click, a general device type (for example iPhone Mail or Gmail on the web). We do not record your IP address or your location from the letter. We tell you this before you confirm, and confirming is how you agree to it.

We use this to decide what to write more of, to stop sending to addresses that have gone quiet, and to tell advertisers how a placement performed in total.

Person-level records of letter activity (deliveries, opens, clicks, bounces and spam complaints) are kept for 13 months. After that only the totals for each issue remain.

You can leave at any time with the unsubscribe link in every letter, or from the preferences page. If an email to you bounces permanently, or you mark a letter as spam, we stop sending to you.

An advertiser in the letter receives totals for its placement: how many letters were delivered, how many were opened, how many readers clicked its link. It never receives your address or any record of what you did. If you click through to an advertiser's site, that site's own privacy policy applies from there.

When you book a placement we collect your name, company, email address and the brief you write, and we record that you accepted the advertising terms at checkout, and which version. Payment is taken by Stripe; we never see or store your card number. Booking records are kept in our advertising system (Airtable). We keep advertiser account, invoice and payment records for seven years after the end of the calendar year of the last booking, as required for tax, accounting and legal purposes, and then delete them. Enquiry details that do not lead to a booking are deleted after 24 months. While you are checking out, a short-lived record of the held slot is kept against scrambled versions of your IP address and email address so that one slot cannot be sold twice.

Your advertiser page. If you have booked with us, you can sign in to a page of your bookings at suber.health/portal with the email address you booked with. We email you a sign-in link that works once and expires after 30 minutes; we keep only a scrambled record that it was used. Once you are signed in, we set one cookie, which keeps you signed in for 14 days and does nothing else: it is needed for the page to work, it is not used for analytics or advertising, and the page has no analytics. What you send us there (your brief, your logo, your comments, and your approval of an ad or your request for changes, with when you gave it) is kept with your booking in our advertising system and follows the same seven-year rule as the rest of your booking record. We also keep a record of each sign-in, brief, logo, decision and comment, under a scrambled reference in place of your email address. You can ask us to delete your logo and comments sooner, unless we need them to show what was agreed for an ad that ran.

Email sent to our addresses is received through our email provider and passed to our team's workspace so that we can answer it. We keep correspondence for as long as it is useful for that purpose.

Resend sends our email and holds the subscriber list. Supabase hosts the database of letter activity and the abuse-prevention counts. PostHog provides site analytics. Vercel hosts the site and measures page speed. Stripe takes payments. Airtable holds advertising bookings. Slack is where mail to our addresses reaches the team. Sanity holds the articles and holds nothing about readers. We are based in the United States and our service providers process data there and elsewhere. Where we transfer personal data from the EEA, UK or Switzerland, we rely on an adequacy decision where one applies (including the EU-U.S. Data Privacy Framework for providers certified under it), and otherwise on the European Commission's Standard Contractual Clauses and the UK Addendum. You can ask us for a copy of the relevant safeguard. We do not give your data to anyone else, unless the law requires it.

Wittier Labs runs Suber Health and three other titles on one email system, so there is one contact record for your address across all four. Each title's letter is a separate subscription: subscribing to one never puts you on another, and no title writes to you because you subscribed to a different one. Leaving one title stops that letter. Asking us to delete your data removes everything of Suber Health's; say so and we remove the record from every title at once.

You can ask what we hold about you, ask us to correct it, or ask us to delete it, by writing to hello@suber.health from the address concerned. Deletion removes you from Suber Health's list and erases your record of letter activity. What remains: a keyed fingerprint of your address, made with a secret key kept outside the database so the address cannot be read back from it, with the date and the number of records removed, kept for six years as proof that the deletion was done (we keep it on the basis of our legitimate interest in being able to show that a request to delete was carried out); if you had unsubscribed or complained, a do-not-email entry with our email provider, which is what keeps the letters stopped; and, because our publisher, Wittier Labs, runs other publications on the same email system, your address in that system, with nothing of Suber Health's attached to it. If you want it removed from all of Wittier Labs' publications, say so and we delete it entirely. We answer within 30 days.

Suber Health is written for adults. It is not directed at children, and we do not knowingly collect personal data from anyone under 13 (or under 16 if you are in the EEA). If you believe a child has subscribed, email hello@suber.health and we will delete the record.

If you live in a US state with a privacy law, the rights above are yours there too: write to us and we will act on them.

When the meaning of this page changes we change the date at the top, and if the change is significant we say so in the letter.

hello@suber.health. Suber Health, Wittier Labs, 254 Chapman Rd, Ste 208 #13095, Newark, Delaware 19702.