Privacy

Last updated October 18, 2026.

sermorelinreport is an independently operated US publishing site. It has no accounts, no login, no newsletter and no forms: there is nothing here to sign up for and nothing that asks you for your name, your address, your email or anything about your health. There is no comment section, no chat widget and no checkout. This policy sets out what is collected when you visit, what it is used for, who else receives it, and what you can require us to do about it. The email address at the end of the page is the contact point for every right described below.

1. Information We Collect

The following list covers everything this site collects. There is no fifth item.

• Information you send us. If you write to the address at the foot of this page we hold your message and the address it came from for as long as it takes to deal with it. That is the only way to reach us and the only personal information we ever hold on purpose. We operate no mailing list and we hold no other addresses.
• Information collected automatically. Google Analytics 4 records which pages were opened and in what order, an approximate location derived from the network address, and the browser and operating system in use. It also measures links opened from this site to provider reviews, including the originating page, destination review and where the link appeared. Those review-link parameters exclude query strings and honor your analytics preference, including Global Privacy Control. Review banners also measure when an offer is shown or clicked, including the public review page, provider, placement and test variant, when analytics are allowed. Our host receives the request itself, as any web host must, and keeps server logs for its own operations.
• Cookies and similar technologies. Analytics cookies from Google, one key in your browser’s local storage holding your answer to the cookie notice, and session-storage records for the comparison panel, review navigation and consented review-banner test assignments described below. No advertising pixel, no retargeting, no session recorder, no data broker, nothing sold to anyone. Every key is named in section 3.
• Click data. Clicking through to a seller sends you via a redirect on this domain, which hands you to the affiliate network. There is no click database on this site and the redirect keeps no log. The network receives its own attribution details, separately from the analytics events described above. We never receive your name, your medical answers, or anything else you tell the seller.

We do not ask for, collect or store health information of any kind: no diagnosis, no prescription, no dose, no lab result, no body weight and no insurance identifier. Nothing you read here is tied to a person we could identify, because there is no person record to tie it to. The calculators run entirely in your browser: the figures you type are not sent to us or saved to browser storage.

2. How We Use Your Information

We use what is described above to:

• serve the pages and keep the site working;
• reply to a message you send us;
• see which pages, reviews and boards are read, so we know which figures to re-check and what to write next;
• attribute an outbound affiliate click, so the network can tell which of our pages sent it;
• and comply with the law where we are required to.

We do not use it to profile you, to build or sell an advertising audience, to target an advertisement, or to make any decision about you as an individual. There is no automated decision-making here of any kind.

3. Cookies, Tracking Technologies, and Your Consent Choices

Your analytics preference is under your control. This is a US site and analytics here work the way US privacy law contemplates: on an opt-out basis. Google Analytics starts measuring on your first visit, and you can turn it off whenever you like. On that first visit a notice appears at the foot of the page with two buttons: Got it, which dismisses the notice and changes nothing, and Opt out, which stops analytics.

Opting out takes effect immediately, on the page you are reading. We tell Google Analytics to stop using storage and we delete the analytics cookies already on your device. Your choice is kept in your browser’s local storage and honored on every later visit from that browser. Clearing this site’s data resets it, and the notice reappears. If your browser sends a Global Privacy Control signal, that is read first, ahead of anything stored, and treated as an opt-out without you doing anything at all.

The control below is the same switch as the one on the notice, and it reports the setting actually in force on this device:

Analytics opt-out Reading your current setting… Stored in this browser under sr-analytics; clearing site data resets it to on.

This is the complete list of what this site puts on your device:

• Analytics cookies, on by default, opt-out. Unless you have opted out we load Google Analytics 4, which measures traffic in aggregate and sets first-party cookies on this domain whose names begin _ga to tell repeat visits apart. They carry expiry dates Google sets. If you opt out we delete them and Google Analytics stops setting or reading them. Google’s advertising features are switched off in the tag itself at every page load — ad storage, ad user data and ad personalization are all set to denied, and no branch of this site ever changes them. What Google does process is governed by Google’s own privacy policy, and Google publishes a browser add-on that opts you out of Google Analytics everywhere.
• Your analytics choice, in local storage, under sr-analytics. It holds one word, your answer to the notice, so we do not ask twice. It never leaves your device.
• A per-visit counter, in session storage, under sr-intercept. When you click through to a seller, a panel sometimes appears naming one other seller before you go. This key counts how many times that has happened during this visit and which sellers it named, so that the panel is capped rather than repeated. It never leaves your device and it is gone when you close the tab.
• Review navigation, in session storage, under sr-review-navigation. When analytics are allowed and you open a review in the same tab, this briefly holds the public source page, destination review, link placement and time of the click. The arriving page checks your analytics preference again, then removes the record. It expires after 30 seconds and is cleared if you opt out. It contains no personal or health information, query strings or cross-site identifier. New-tab links are measured on the page you clicked instead.
• Review-banner assignments, in session storage, under keys beginning sr:review-bottom:. When analytics are allowed, these records keep the same alternative offer assigned during a tab session. They hold a public review identifier, two provider identifiers and an A or B assignment. They contain no medical information or cross-site identifier, are not used after opt-out or Global Privacy Control, and expire when the tab closes. The banner still works when storage is blocked, using an assignment held only in memory.
• Cookies set after you leave. When you follow a link to a seller, that seller and its affiliate network may set their own cookies to attribute the sign-up. Those are cookies of the destination site under that company’s policy, not ours. We set no affiliate pixel on this domain.

There is no third-party cookie on this site, no fingerprinting script and no cross-site identifier. We do not use storage to reconstruct a cookie you deleted. You can block cookies or scripts in your browser and every page here still works: nothing is behind the tag.

4. Third Parties We Share Data With

We do not sell personal information. Three companies are involved in running this site, and no others. We name them rather than describing a category:

• Google, for analytics. Unless you have opted out, pseudonymous traffic data is processed by Google Analytics 4 so we can see how the site is read. Google acts as a processor on our behalf and is bound by its own published terms. No advertising purpose is enabled.
• Vercel, for hosting. The site is served by Vercel, which processes the request and keeps server logs on our behalf for its own operations.
• Katalys, the affiliate network. When you click a link to a seller that pays us, the redirect on this domain adds our publisher identifier and a few short labels to the destination address: which seller you chose, which page you came from, which position in a list the link sat in, and which slot on the page it was. Those labels describe our pages, not you. They are how the network can tell one of our pages from another when it reports a click. A link to a seller that pays us nothing carries none of them and is passed through untouched. Katalys operates under its own privacy policy and is responsible for what it collects after the hand-off.

None of the three receives anything you sent us directly. We disclose nothing to anybody for their own direct marketing, which is also the answer to a California Shine the Light request. We may disclose information where the law requires it, such as in response to a valid legal demand, or where it is necessary to protect readers or the public. If this site were ever sold the pages would go with it; there is no reader database that could go anywhere.

5. Your Rights and How to Exercise Them

Wherever you live, you can write to editor@sermorelinreport.com and ask what personal information we hold about you, ask us to correct or delete it, or opt out of analytics. Say what you are asking for and, if a state law is the reason, which state you live in. We do not charge for any of this and asking changes nothing about what you can read here.

One limit is worth stating plainly rather than burying. We hold no account and no identifier that would let us connect a request to a particular reader, so for most requests the honest answer is that we hold nothing about you to produce, correct or delete. Where the data sits with Google Analytics we will say so and tell you how to reach it. If we have to verify who you are before acting, we will ask for the least that will do it, and we will not keep it afterwards. You may use an authorized agent. If we refuse a request we will say why, and you can appeal by replying to that answer.

The fastest way to opt out of analytics is not a request at all: it is the switch in section 3, which works on the spot and deletes the cookies already written.

6. California Residents (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act gives you the right to:

• know what personal information we have collected about you and how we use it;
• get a copy of it;
• have inaccurate personal information corrected;
• have personal information deleted;
• opt out of the “sale” or “sharing” of personal information, sharing being the term the statute uses for cross-context behavioral advertising;
• limit the use and disclosure of sensitive personal information;
• and not be discriminated against for exercising any of them.

We do not sell personal information and we do not share it as those terms are defined in the CCPA. We run no cross-context behavioral advertising and no profiling. We collect no sensitive personal information: no health data, no precise location, no government identifier, no account credential, because we ask for none of it. We do not knowingly collect or share the personal information of anyone under 16.

The opt-out that does something here is the switch in section 3, and a Global Privacy Control signal from your browser is treated as that same opt-out automatically. For anything else, write to editor@sermorelinreport.com and say it is a California privacy request. The same rights, in substantially the same form, are available to residents of the other states with a comprehensive privacy law — Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana and the rest as each one takes effect — and we handle those requests the same way. If an appeal is refused, your state attorney general takes complaints.

7. EU / UK Residents (GDPR)

Jurisdictional scope. sermorelinreport is a United States publication written for readers in the United States. Sermorelin is a prescription drug there, and the sellers this site records are US telehealth companies and compounding pharmacies serving US patients. We do not market this site to residents of the European Economic Area, the United Kingdom or Switzerland, and nothing on it is an offer of medication or of a telehealth service to anyone in those places.

If you are in one of them and you visit anyway, the General Data Protection Regulation and the UK GDPR give you rights of access, rectification, erasure, restriction, portability and objection over any data we process about you, the right to withdraw a consent you gave, and the right to complain to your data protection authority — for readers in the United Kingdom, the Information Commissioner’s Office. We honor those rights whether or not the sellers we write about would serve you.

Where a lawful basis is asked for, ours are these. Analytics is the only processing for which consent is relevant, and this site runs it on the opt-out basis US law contemplates, so a reader from a jurisdiction that requires prior opt-in should use the switch in section 3, which stops it immediately and deletes the cookies; opting out does not undo processing that already happened. Replying to a message you send us is processing necessary to take steps at your request. Serving and securing the site rests on our legitimate interest in operating it, and you can object to that by writing to us.

We process no special categories of data: no health data, no biometric data, nothing under Article 9. We make no decision about you based solely on automated processing within the meaning of Article 22, because we make no decision about you at all.

8. Children’s Privacy

This site is written for adults and is not directed at children. In line with the Children’s Online Privacy Protection Act we do not knowingly collect personal information from a child under 13, and we ask for nothing from anyone under 18 either. Sermorelin is a prescription drug and everything here is written for an adult deciding what to ask a clinician. If you believe a child has sent us something, write to editor@sermorelinreport.com and we will delete it.

9. Data Retention

We keep nothing ourselves. There is no reader database on this site, no analytics copy on our side, and no server-side log that we read. That is not a policy choice we could quietly reverse; it is what the code does.

What is kept elsewhere: Google holds the analytics events under that property’s own retention setting and deletes them on its schedule, and the cookies supporting them expire on the dates Google sets. Our host rotates its server logs on its own operational schedule. A message you send us is kept as long as it takes to answer it and for a reasonable period afterwards for reference. Turning analytics off in section 3 deletes the analytics cookies on this device immediately.

10. Security

The site is served over HTTPS. It is a set of published pages with no database behind them, no login, no password and no payment detail, which removes most of what there is to protect: we cannot lose what we never asked for.

No site can promise it will never be attacked and we do not make that promise. What we can tell you is what is at stake here, and on this site it is page views.

11. International Data Transfers

The site is hosted in the United States and written for readers there. If you read it from another country the request reaches servers in the United States, and the analytics measurement described above is processed by Google under its own arrangements, as is the hosting under Vercel’s. Privacy law in the United States may be less protective than the law where you live.

12. Changes to This Policy

If this policy changes the date at the top changes with it. A change to what is collected or to who receives it is made here on the day that change ships, not afterwards. We do not email anyone about it, because we hold no mailing list, and we keep no archive of previous versions. Continuing to use the site after a change means you accept the revised policy.

13. Contact

For a privacy question, a request or a complaint, write to editor@sermorelinreport.com. The same address takes a correction to anything we have published; what happens next is set out on the corrections page. See also our terms.

How this site is paid for

We run no display or programmatic advertising. We are affiliate-supported instead. Some of the providers listed here pay us a commission when a reader signs up through our link, and many of them pay us nothing at all. Both kinds are listed, in the same tables, with the same figures against them. Paying us moves a seller to the top of its group on a board and puts a line on its button saying so. Nothing else moves: the figure, the qualifier printed with it, the disclosure score, whether the seller is on a board at all and every word of its review are what they would be if it paid us nothing. How that works, with the names.