Privacy Policy

We try to collect as little as possible. The data we do collect is used to operate the site, measure what readers find useful, and (if you choose to subscribe) deliver the newsletter. We do not sell your data to third parties. We have no business interest in selling reader data, and the affiliate model that funds this site does not require it.

What we collect

Information you provide voluntarily. When you subscribe to The Notebook (our newsletter), you give us your email address. When you contact us by email, you give us your email address and whatever you write in the message. When you click an affiliate link and complete a purchase, the merchant — not us — receives your purchase details.

Information collected automatically. When you visit the site, our analytics provider (Vercel Analytics, plus Google Analytics 4 in some configurations) records: IP address (anonymized to country/region), browser type and version, device type, the pages you visit, the time you spent on each, the referring source (the site or search engine that brought you here), and approximate geographic location.

Information from cookies. See our Cookie Policy for the specific cookies set and how to manage them.

How we use this data

• Operate the site — server logs, error tracking, performance optimization.
• Measure usage — which articles are read, how readers find us, where they leave the site.
• Deliver the newsletter — only to subscribers, only with their consent, with one-click unsubscribe in every email.
• Track affiliate conversions — anonymously, via the merchant’s affiliate cookie. We see the aggregate, not the individual.
• Respond to inquiries — when you write to us, we use your email to write back.
• Comply with the law — when required by valid legal process.

What we do not do

• We do not sell your personal data to third parties.
• We do not run third-party display advertising that profiles you across the web.
• We do not share your email address with manufacturers, affiliates, or partners.
• We do not require you to register an account or provide personal information to read articles.

Third parties we share data with

We use the following third-party services to operate the site. Each has its own privacy policy. We have selected each based on its data-handling reputation, but you should review their policies if you have specific concerns.

• Vercel — hosts the site and provides analytics. Vercel privacy policy: vercel.com/legal/privacy-policy.
• Sanity — content management system. Sanity privacy policy: sanity.io/legal/privacy.
• Google Analytics 4 (when active) — site analytics. Google Analytics privacy: policies.google.com/privacy.
• Substack — newsletter delivery and hosting. Substack privacy policy: substack.com/privacy.
• Affiliate networks — when you click through, the merchant’s affiliate network sets a cookie to track the conversion. Each network has its own policy.

Your rights

Depending on where you live, you may have the following rights with respect to data we hold about you:

• Access. The right to know what data we hold and receive a copy.
• Correction. The right to correct inaccurate data.
• Deletion.The right to ask us to delete your data (sometimes called “the right to be forgotten”).
• Portability. The right to receive your data in a portable format and transmit it to another service.
• Objection. The right to object to certain processing activities, including direct marketing.
• Opt-out of sale.Under California’s CCPA, the right to opt out of any sale of personal data. (We do not sell personal data, so this is moot — but the right exists.)

To exercise any of these rights, write to disclosure@the40method.com with the request and enough information for us to identify you in our records (typically your email address). We respond within 30 days.

Children’s privacy

The 40 Method is not directed at children under 13, and we do not knowingly collect personal data from anyone under 13. If you believe we have inadvertently collected such data, write to disclosure@the40method.com and we will delete it promptly. (As an editorial site for women aged 40+, we do not expect this to be a meaningful issue, but the commitment is on the record.)

International users

We are based in the United States. If you are in the European Economic Area, the United Kingdom, or another jurisdiction with data protection laws (GDPR, UK GDPR, etc.), your data may be transferred to the United States for processing. We rely on the Standard Contractual Clauses where required for such transfers.

Changes to this policy

We may update this policy as the site grows (new analytics tools, additional third parties, etc.). When we do, we update the “Last updated” date at the top. For material changes (new categories of data, new third parties), we note the change in The Notebook and at the top of this page for at least 30 days.

Contact

Privacy questions: disclosure@the40method.com. We aim to respond within 30 days for any rights request.