Last updated: 19 August 2026. This policy explains what Longevity Lab does with personal data when you read longevity-lab.fit. It describes what this site actually does rather than what a template assumes, and we revise it whenever that changes.
The short version
- We set no cookies and run no analytics, advertising or tracking scripts of any kind.
- There is no sign-up, no account and no form on this site, so there is nothing for you to fill in.
- Our web server keeps short-lived technical logs, as every web server must.
- If you email us, we keep that email so we can reply to it.
- We do not sell personal data, we do not share it for advertising, and we never have.
1. Who is responsible for your data
Longevity Lab publishes longevity-lab.fit and is the controller of the personal data described below. For any question about privacy, write to info@longevity-lab.fit with “Privacy” in the subject line. We answer privacy requests within 30 days.
2. What we collect
Server logs, collected automatically
Our web server records each request it serves: the IP address it came from, the date and time, the URL requested, the HTTP status returned, the number of bytes sent, the browser user-agent string and the referring page, if your browser sent one. This is ordinary web-server logging. Without it we cannot keep the site online, block abuse or diagnose a fault. We keep these logs for 30 days and then delete them, and we do not attempt to link them to a named individual.
Email you choose to send us
If you write to us, we receive your email address, whatever name you sign with and the content of your message. We use it to answer you and, where you report a factual error, to correct the article.
What we deliberately do not collect
No cookies. No analytics identifiers. No advertising or social tracking pixels. No device fingerprinting. No mailing list. No user accounts. No payment details. No health data, and no information about your body, your test results or your medical history — nothing you read here is reported back to us.
3. Storage on your device
Longevity Lab is a progressive web app. Where your browser supports it, a service worker keeps copies of pages, stylesheets, fonts and images in the browser’s own cache so the site loads quickly and still opens when you are offline. That storage is strictly necessary to deliver the site in the form you requested it, it contains no identifier of any kind, and it never leaves your device. Clearing your browsing data removes it, and you can prevent it entirely by blocking service workers in your browser settings. Our Cookie Policy covers this in more detail.
4. Why we process data, and on what legal basis
Under the EU and UK General Data Protection Regulation, every purpose needs a lawful basis. Ours are as follows.
- To operate, secure and troubleshoot the site — server logs — our legitimate interests in keeping a public website available and free of abuse (Article 6(1)(f)).
- To answer a message you send us — your email address and the content of your message — our legitimate interests in replying to correspondence, and steps taken at your own request (Article 6(1)(f) and 6(1)(b)).
- To meet a legal obligation — any of the above, where a law or a lawful order requires it (Article 6(1)(c)).
We do not rely on consent for anything, because we run nothing that would need it.
5. Who else can see it
Our hosting provider processes server logs on our behalf, as a data processor bound by a data-processing agreement. Beyond that, no one: there are no advertising networks, no data brokers, no analytics vendors and no third-party scripts on this site. We do not sell personal information, and we do not share it for cross-context behavioural advertising — both terms carry a specific meaning under California law, and neither describes anything we do.
6. International transfers
Our hosting infrastructure may sit outside the country you are reading from. Where personal data covered by the EU or UK GDPR is transferred outside the European Economic Area or the United Kingdom, that transfer is governed by the standard contractual clauses adopted by the European Commission, together with the UK International Data Transfer Addendum where it applies.
7. How long we keep it
- Server logs: 30 days, then deleted.
- Email correspondence: for as long as needed to deal with the matter, and in any case no more than 24 months after the exchange ends.
8. Your rights
Wherever you live, you can write to info@longevity-lab.fit and ask us to act on any of the rights below. We do not charge for this and we do not treat anyone differently for exercising a right.
If the EU or UK GDPR applies to you
You have the right of access to your data, and the rights to rectification, to erasure, to restriction of processing, to data portability, and to object to processing carried out on the basis of legitimate interests. You also have the right to lodge a complaint with your national supervisory authority — in the United Kingdom that is the Information Commissioner’s Office, and in the European Union it is the data protection authority of the country you live in.
If you are in California
Under the California Consumer Privacy Act, as amended by the CPRA, you have the right to know what personal information we collect and why, to have it deleted, to have it corrected, to opt out of its sale or sharing, and to limit the use of sensitive personal information. We collect no sensitive personal information and we neither sell nor share personal information, so those last two rights have nothing to act on here — but the request channel is open regardless, and an authorised agent may use it on your behalf.
If you are elsewhere in the United States
Comprehensive privacy laws in Virginia, Colorado, Connecticut, Utah, Texas, Oregon and other states grant a similar set of rights to access, correct, delete and port your data, and to opt out of targeted advertising and profiling. We honour those requests through the same email address.
9. Automated decisions and profiling
We do not profile readers and we make no automated decisions that produce legal or similarly significant effects.
10. Children
This site is written for adults and is not directed at children. We do not knowingly collect personal data from anyone under 16, or under 13 in the United States. If you believe a child has sent us personal data, write to us and we will delete it.
11. Security
The site is served over HTTPS. We hold almost no personal data, we load no third-party code, and access to the logs we do keep is limited to the people who run the site. No system is perfectly secure, but the smallest attack surface is the one that holds the least.
12. Do Not Track and Global Privacy Control
We do not track readers across sites, so a Do Not Track header or a Global Privacy Control signal has nothing here to switch off. Both are effectively honoured by default.
13. Changes to this policy
If we change how this site handles data — for example by adding analytics or a newsletter — we will update this page and change the date at the top before that change goes live, and we will ask for consent where the law requires it.
14. Contact
Privacy questions, requests and complaints: info@longevity-lab.fit. See also our Cookie Policy and our Terms of Use.