Who runs this site

This site is run by Saulo Cruz personally. There’s no company behind it, no team, no fund. The Vita Experiment is one person documenting one person’s health data in public. If you have a privacy question, you can email me directly: contact@vitaexperiment.com. It lands in my actual inbox.

What I actually collect

Email addresses, when you subscribe.

When you put your email into the signup form on this site, it’s sent to Kit (the email service powering Field Notes). Kit records your email address, the IP address your signup came from, and a timestamp. The IP and timestamp are used to confirm the signup is real and to support the double opt-in flow required by anti-spam law. I see your email in Kit’s dashboard. I do not see your IP except in aggregate.

Anonymous visit data, via Google Analytics.

Every visit to vitaexperiment.com is counted by Google Analytics 4. This includes which page you viewed, the country and city you appear to be visiting from (resolved from your IP address, which Google then anonymizes), the rough type of device you’re on, and which site referred you. It does not include your name, email, exact location, or anything that personally identifies you to me. I look at this data in aggregate to understand which Field Notes resonate.

Server logs, automatically.

The hosting provider (GoDaddy Managed WordPress) keeps standard server access logs — what URL was requested, when, and from which IP. This is normal infrastructure plumbing and exists for security and reliability. I don’t actively inspect these logs.

Cookies.

This site sets cookies for three reasons. One, WordPress sets functional cookies that keep the site running properly (these don’t track you across the internet). Two, Google Analytics sets cookies starting with _ga to count unique visitors. Three, if you ever comment on a post, WordPress stores your name and email in a cookie so you don’t have to retype them next time.

What I do with it

The email you give me has exactly one job: deliver Field Notes you signed up for. Sometimes that’s a Field Note about new bloodwork. Sometimes it’s a “the protocol changed and here’s why” note. It is never used for advertising, never sold, never given to a third party that isn’t already named here.

The analytics data has exactly one job: tell me which posts get read and which don’t, so I can write more of what’s useful and less of what isn’t.

Who else handles this data

Three companies touch any of this:

• Kit (formerly ConvertKit) — stores subscriber records and sends emails. kit.com/legal/privacy
• GoDaddy — hosts the site and handles standard server logs. godaddy.com/legal
• Google — receives anonymized analytics data via Google Analytics 4. policies.google.com/privacy

I don’t use any other third-party services that handle visitor data. If that ever changes, I’ll update this page and timestamp it at the top.

How long I keep it

Subscribers stay in Kit until you unsubscribe. The moment you click unsubscribe in any email, your record is marked inactive and is purged from Kit within 30 days. You can also email me at contact@vitaexperiment.com and ask to be removed manually — I’ll do it within a few business days.

Server logs follow GoDaddy’s retention schedule, typically 30 to 90 days.

Google Analytics data is retained for the default GA4 period of 14 months and then automatically deleted.

Your rights

You have specific rights over your data. I take these seriously because the whole project is built on the premise that people deserve to know what’s happening with theirs.

Email contact@vitaexperiment.com if you want to:

• See what I have on file about you
• Have it corrected if anything is wrong
• Have it deleted entirely
• Export it — your subscriber record, in a portable format
• Opt out of analytics (instructions below)

If you live in the European Union, the United Kingdom, or another GDPR jurisdiction, you also have the right to file a complaint with your local data protection authority. I’d rather you talked to me first, but it’s your right and I won’t take it personally.

If you live in California, you have the same access and deletion rights under the CCPA/CPRA. I don’t sell personal information to anyone, so the “Do Not Sell” provisions don’t really apply here — but the access and deletion rights do.

To opt out of Google Analytics on this site specifically, you can install Google’s official opt-out browser add-on: tools.google.com/dlpage/gaoptout. Or use a privacy-focused browser (Brave, Firefox with strict tracking protection) and GA stops working.

A note on health data

This site publishes one person’s health data — mine — by choice and in public. It does not collect or process anyone else’s health information.

If you email me, please don’t include your medical records, lab results, or other sensitive health data. I’m not a doctor. I’m not your doctor. I am explicitly not set up to receive or safeguard your personal health information — HIPAA, GDPR’s Article 9, and just basic prudence say you shouldn’t send it to me.

If a Field Note ever moves you to ask a health question, the best thing you can do with that energy is forward it to your actual physician. I’m rooting for you, but I am not the person to send your bloodwork to.

Children

This site isn’t designed for or directed at people under 18. I don’t knowingly collect personal information from minors. If you’re a parent or guardian and you think your child may have submitted their email here, email contact@vitaexperiment.com and I’ll remove the record.

Changes to this policy

If anything in how this site handles data changes — if I add a new service, drop one, change the analytics tool, anything material — I’ll update this page and change the last updated date at the top. If the change is significant, I’ll also note it at the bottom of the next Field Note so existing subscribers can re-read.