Skip to main content

Legal

Privacy policy

How we collect, use, and protect your personal data. This policy complies with the EU General Data Protection Regulation (GDPR) and the ePrivacy Directive.

Last updated: 9 October 2026

1. Data controller

IntrinsicAge (“we,” “us,” or “our”) operates the website intrinsicage.com. We are the data controller responsible for your personal data processed through this website.

For any privacy-related questions or to exercise your rights, contact us at: privacy@intrinsicage.com

2. Data we collect

We collect the minimum data necessary to operate the site:

  • Technical data automatically collected by your browser when you visit (IP address, browser type, operating system, referring URL, pages visited, timestamps). This data is processed for legitimate interest in maintaining site security and performance.
  • Contact data you voluntarily provide if you sign up for our newsletter (email address) or contact us directly, including through our contact form (email address, message, and optionally your name and the page you are writing about).
  • Preference data stored locally on your device (cookie consent choice, display preferences). This data never leaves your browser.
  • If you accept analytics, Google Analytics processes page paths (without query strings), referring page, device and browser information, and limited interaction events. Microsoft Clarity records sessions (clicks, scrolling, visible page text and full page addresses, which on quiz pages include your answers). Both help us improve the website.
  • Page performance measurements (such as loading speed) are processed by Vercel Speed Insights without cookies. It receives page paths without query strings.

We do not collect health data, biometric data, or any special category data as defined under GDPR Article 9. IntrinsicAge is an educational resource — we do not process biological age test results or medical records.

The Find Your Best Test quiz asks about your test preferences (goal, sample type, budget), not about your health. It runs in your browser, and its answers are encoded in the results-page URL so the result can be shared; we do not store them.

If you accept analytics, the quiz is measured like other pages. Google Analytics receives which steps you complete (for example, quiz started and completed, the recommended test type, and how many tests met your requirements), always with page paths but never query strings or your answers. We also redact the quiz query keys q1–q7 in Google Analytics as an additional safeguard. Microsoft Clarity records how quiz pages are used, which includes the options you click and the page address. The results page reflects your answers, and Clarity can see it. Private editorial, admin, and provider-submission routes are not measured.

4. Cookies and local storage

A cookie is a small text file stored on your device by your browser. We take a minimal approach to cookies:

Strictly necessary storage

These do not require your consent under the ePrivacy Directive because they are essential for the website to function.

  • Cookie consent preference — stored in your browser’s local storage to remember whether you have accepted or declined cookies. This never leaves your device.

Analytics cookies

If you choose “Accept analytics,” we load Google Analytics and Microsoft Clarity through Google Tag Manager. These services may use cookies or similar identifiers to distinguish visits. No Google Analytics or Microsoft Clarity code is loaded if you choose “Essential only” or dismiss the banner, and declining does not reduce site functionality.

Google Analytics receives the pageviews and limited events we explicitly send, plus Google’s automatic session events, all with page paths but no query strings; automatic enhanced measurement is disabled. Microsoft Clarity is configured to show page text on the included routes; form inputs and dropdown selections remain masked by Clarity. On quiz pages, Clarity can see the options you pick. Clarity is stopped on private editorial, admin, and provider-submission routes.

Third-party cookies

We do not use advertising cookies or social media trackers, and we do not share data with advertisers or data brokers. Google and Microsoft process analytics data only when you consent, as described above.

Managing cookies

You can review or withdraw your cookie consent choice at any time using the “Cookie settings” link in the site footer. Alternatively, you can clear your browser’s local storage for this site, or configure your browser to block all cookies, though this may affect the functionality of other websites you visit.

5. How we use your data

We use collected data exclusively for:

  • Operating, maintaining, and improving the website
  • Understanding how consented visitors use the website, including the quiz
  • Sending newsletter communications (only if you subscribe)
  • Responding to your inquiries or feedback
  • Ensuring website security and preventing abuse
  • Complying with legal obligations

We never sell your personal data. We never use your data for automated decision-making or profiling.

6. Data sharing and transfers

We may share your data with service providers who help us operate the website (e.g. hosting providers, email delivery services). These processors act only on our instructions and are bound by data processing agreements.

Newsletter email is handled by Resend, our email processor. When you enter your address in the site footer, we first send it to Resend so it can deliver a confirmation email. We add your address to the newsletter list only after you open the confirmation link we email you and confirm on the page it opens; until then you are not subscribed and we send you no newsletter. Confirmation links expire after 24 hours. We do not add unconfirmed addresses to any list, but the confirmation link contains your address, so it can appear in our server logs (kept for up to 90 days), and Resend may retain delivery records of the confirmation email. Every newsletter Broadcast includes Resend’s unsubscribe link and preferences flow, and unsubscribing stops further newsletter emails. After you unsubscribe, Resend may retain a suppression or contact record so that we can honor your opt-out.

If you consent to analytics, Google processes measurement data for Google Analytics and Tag Manager, and Microsoft processes session-interaction data and visible page text from included routes for Clarity. On quiz pages this includes the options you click and the page address. Google Analytics does not receive quiz answers. Vercel processes page performance data for Speed Insights.

Our hosting infrastructure may be located outside the European Economic Area (EEA). Where data is transferred outside the EEA, we ensure adequate safeguards are in place, such as EU Standard Contractual Clauses or an adequacy decision by the European Commission.

We may disclose data where required by law or to protect our legal rights.

7. Data retention

  • Server logs are retained for a maximum of 90 days, then automatically deleted.
  • Newsletter subscriber data is retained until you unsubscribe, after which only a suppression or contact record may remain with Resend to honor your opt-out. You can unsubscribe at any time via the link in every email.
  • Contact form data is retained for as long as needed to resolve your inquiry, then deleted.
  • Local storage data (consent preference) remains on your device until you clear it.
  • Consented analytics data is retained according to the retention settings in our Google Analytics and Microsoft Clarity accounts, subject to any earlier deletion request or legal requirement.

8. Your rights under GDPR

If you are in the European Economic Area, you have the following rights regarding your personal data:

  • Right of access (Article 15) — obtain a copy of the personal data we hold about you.
  • Right to rectification (Article 16) — correct inaccurate personal data.
  • Right to erasure (Article 17) — request deletion of your personal data (“right to be forgotten”).
  • Right to restriction of processing (Article 18) — request that we limit how we use your data.
  • Right to data portability (Article 20) — receive your data in a structured, machine-readable format.
  • Right to object (Article 21) — object to processing based on legitimate interest.
  • Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, email us at privacy@intrinsicage.com. We will respond within 30 days.

You also have the right to lodge a complaint with your local data protection authority if you believe your data has been processed unlawfully.

9. Children's privacy

This website is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

10. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encrypted connections (HTTPS), access controls, and regular security reviews.

To keep automated spam out of our contact form, our hosting provider, Vercel, runs a bot check (Vercel BotID) when you send a message. It evaluates technical signals from your browser and request; we use the result only to accept or reject that submission. This is processed under our legitimate interest in keeping the website secure.

11. Changes to this policy

We may update this privacy policy from time to time. Material changes will be communicated through a notice on the website. The “Last updated” date at the top of this page reflects the most recent revision.

12. Contact

For any questions about this privacy policy or your personal data, contact us at: privacy@intrinsicage.com