The Fit Forty
Menu

Privacy Policy

Last updated: August 2026

The Fit Forty (thefitforty.com) is built to collect as little personal data as possible. This page explains exactly what we collect, why, and what your rights are. Our content is written primarily for a US audience, but we extend GDPR-level protections to all visitors as a courtesy, wherever you are.

What we collect

Newsletter data

If you subscribe to our newsletter, we store your email address, your first name (only if you choose to give it), the exact consent text you agreed to, and a timestamp of your consent. We use double opt-in: no emails are sent until you confirm your subscription via the link we email you.

Affiliate click statistics

When you click an affiliate link on this site, we record the click for aggregate statistics: which link was clicked, your browser type, the referring page, your country, and a truncated one-way hash of your IP address mixed with a secret salt. We never store your raw IP address, and the hash cannot be reversed to identify you.

Interactive tools

Our interactive tools, like The Protein-First Quiz (/tools/protein-first-quiz/), ask a few short questions about your habits and preferences — for example, how much time you have in the kitchen, what equipment you have on hand, and your typical energy pattern through the day — so we can personalize the recipe and movement suggestions you see. We never ask about menopause stage, symptoms, diagnosed conditions, or medication. Your answers are used only to generate your result in your browser; we do not store them on our servers unless you separately choose to email yourself a copy of your result, using the same consent-based opt-in described above. Because these tools only ever ask about behavior and preferences — never health status — and we don't store your raw answers unless you opt in, this kind of tool did not require a full Data Protection Impact Assessment; we screened it against the DPIA triggers and confirmed none apply.

Account (optional)

Tools like the Macro Calculator, the Fat-Loss Blocker Quiz, and The Protein-First Quiz let you optionally sign in with Google to save your result and see it again on a later visit. Every tool works fully, and shows your result, without signing in — this is purely an opt-in convenience. If you do choose to sign in, we receive your Google account email address, display name, and a unique Google account identifier from Google's sign-in service, and we create an account record and a session cookie that keeps you signed in. We store the tool result(s) you choose to save, tied to that account. You can permanently delete your account and everything tied to it at any time from the Account page (type the confirmation word shown there) — this is your GDPR Art. 17 right to erasure, self-service, with no email required.

Aggregate visit counts

We count visits in aggregate — a single daily total per site — to understand what content helps; this counter stores no cookies, no IP address, and no identifier of any kind. To avoid counting the same visit twice, we set a temporary technical flag in your browser tab — deleted when the tab closes, containing no identifier.

What we do not collect

We do not use tracking cookies, advertising pixels, or third-party analytics scripts. Reading this site never requires an account, and we build no advertising or marketing profile from your activity. The one account feature we offer — signing in to save a tool result, described above — is opt-in and separate from anything needed to read the site or use a tool.

Why we collect it (purposes)

  • To send you the newsletter you asked for, including occasional product recommendations.
  • To let you optionally save a tool result and find it again later, if you choose to sign in.
  • To understand which recommendations readers find useful, in aggregate.
  • To keep the site secure and prevent abuse of our forms.

Legal basis

Newsletter processing is based on your consent (GDPR Art. 6(1)(a)), which you give explicitly via an unticked checkbox and confirm via double opt-in. You can withdraw it at any time using the unsubscribe link in every email; withdrawal is one click. The optional account/sign-in feature is also based on your consent (Art. 6(1)(a)) — nothing is created or stored server-side until you affirmatively click "sign in," and you can withdraw by deleting your account at any time. Aggregate, pseudonymized click statistics are based on our legitimate interest (Art. 6(1)(f)) in understanding and funding our editorial work; the hashing described above minimizes any privacy impact.

Who processes your data

  • Vercel (United States): website hosting and delivery.
  • Supabase (eu-west-1, EU region): database storing subscriber records, click statistics, and — if you choose to sign in — your account and saved tool results.
  • Resend (United States): our email delivery provider is Resend (resend.com), which processes subscriber email addresses on our behalf.
  • Google (United States): if you choose to use the optional sign-in feature, Google acts as our identity provider (Google Sign-In) and shares your email, name and account identifier with us so we can create your account.

Resend, Vercel and Google are all United States companies. Using this site's newsletter, hosting, or optional sign-in feature therefore involves transferring some personal data (your email address for the newsletter; ordinary page-request data for hosting; your Google profile if you sign in) to the United States. We are in the process of formalizing a data processing agreement with Standard Contractual Clauses (or another GDPR Art. 46 transfer safeguard) with each of these processors; as of the date at the top of this page, that paperwork is not yet signed. In the meantime we rely on each provider's own published security and privacy commitments. You can use every tool's core result, and read the entire site, without ever giving us your email or signing in, if you would rather avoid this transfer.

We do not sell or rent personal data to anyone. Data is shared with processors only to the extent needed to run this site.

How long we keep it

Subscriber records are kept while your subscription is active. If you unsubscribe, we keep a minimal suppression record so we do not email you again. Click statistics are kept in pseudonymized form for aggregate reporting.

Your rights

You can at any time:

  • Request a copy of the data we hold about you (access & portability).
  • Ask us to correct or delete it (rectification & erasure).
  • Withdraw consent with one click on the unsubscribe link in any email.
  • Object to or ask us to restrict any processing.
  • Complain to your local data protection authority.

To exercise any of these rights, email hello@thefitforty.com. We respond within 30 days.

Changes to this policy

If we change how we handle personal data, we will update this page and the date at the top.