Legal · effective August 31, 2026
Your privacy
You can read every page here without telling us who you are. This page says what is measured, what is not, and how to switch the measuring off.
What this page covers
This covers americanglp.org and every page on it, including the /go/ links that send you to a company we write about. It does not cover what happens after you land on someone else's site. Once you leave, their policy governs, not ours.
American GLP is a set of static pages served by Vercel. There are no accounts, no login, no shopping cart, and no form on this site that collects your information. If a page ever asks you to type personal details into it, you are not on this site.
What we collect
Three things, and nothing else.
Analytics, through Google Analytics 4
Page URL, referring page, approximate location derived from a truncated IP address, browser and device type, and how you moved between pages. This is measured for every visitor unless you opt out. It is how we learn that the Medicaid appeal deadline page gets read and the employer plan page does not.
Server and network logs
Vercel serves this site and keeps ordinary request logs: IP address, timestamp, requested path, user agent, and response code. Those logs exist to run and defend the site. Bot protection sits in front of the
/go/redirector and can challenge a request before it reaches us.Whatever you put in an email to us
If you write to us, we have your email address, your name if you sign it, and the contents of your message. We keep it long enough to answer you and to record a correction if you sent one. Read the next section before you write.
Do not email us your health information
This matters more here than on most sites, because readers arrive holding a denial letter. Do not send us your diagnosis, your prescriptions, your insurance member ID, your Medicare or Medicaid number, your Social Security number, or a photograph of your denial notice. We do not need any of it, we are not a covered entity under HIPAA, and ordinary email is not a secure channel.
If you want help understanding a rule, describe the situation without the identifiers. Say “a commercial plan denied a GLP-1 as not medically necessary and the letter is dated the fourth” rather than sending the letter. If you send protected information anyway, we delete it once we have answered, and we do not add you to anything.
What we never collect
We do not run advertising pixels, remarketing tags, conversion pixels, session recorders, heatmaps, or fingerprinting scripts. There is no newsletter, so there is no mailing list. We take no payments, so there is no card data. We do not buy data about you from a broker, and we do not build a profile of you across other sites.
Cookies, and what the _ga family does
Google Analytics sets cookies whose names begin with _ga. They hold a randomly generated identifier that lets Google tell a returning browser from a new one. They do not hold your name, your email, or anything you have read on this site in a form we can tie back to you as a person.
This site also writes two values into your browser's local storage, which never leave your device and are never sent to us: aglp-privacy, which records that you opted out, and aglp-privacy-seen, which records that you have already dismissed the notice at the bottom of the screen. Clearing your browser data erases both, and the opt-out goes with them.
One more third party is worth naming because it is invisible: the typefaces on this site load from Google's font servers, which means your browser makes a request to Google to fetch them. That request carries your IP address the way any request for a file does. It sets no cookie for us and we receive nothing from it.
Google's role, and the defaults we actually set
Google processes analytics data on our behalf under its own terms. We do not have a contract giving Google permission to use what it measures here for advertising, and we set the consent defaults to say so before the analytics library starts. Those defaults, exactly as the page sends them:
Ad storage: denied
No advertising cookie is written, for any visitor, at any time.
Ad user data: denied
Nothing measured here is passed to Google for advertising purposes.
Ad personalization: denied
Your reading here does not feed personalized advertising anywhere.
Analytics storage: granted, until you say otherwise
Measurement runs from your first page view and stops the moment you opt out. IP anonymization is switched on, so Google truncates the address before it is stored.
What a /go/ link sends
Links to the companies we write about run through a redirector on this domain: /go/ followed by a short name for the company. It is a plain redirect. It sets no cookie, reads nothing about you, and stores nothing.
What it does do is add campaign parameters to the destination address so the company and the affiliate network can credit the referral to this site. Those parameters identify us and the page you clicked from, not you. They carry an offer number, our publisher number, the word americanglp, the short name of the company, and a placement label such as if-denied or plan-medicaid so we can tell which page sent the click.
The network is Katalys, which operates the tracking domain those links resolve to. Katalys and the company you land on set their own cookies once you arrive, under their policies. Search engines are told not to crawl /go/ at all. How we pay for this explains the money side.
Why measurement runs before you agree
This site serves readers in the United States, where the rule is opt-out rather than opt-in. We could show you a wall and make you click through it to read a Medicaid appeal deadline. We would rather tell you plainly, give you a switch that works on the page you are standing on, and let you read. If you are in a place that requires consent before measurement, opt out first and then read.
How to opt out of analytics here
Analytics is on for this browser. Opting out takes effect immediately, on this page.
Press the button above
It works immediately, on this page. You do not have to reload or navigate anywhere for it to take effect.
Check that the box now says you are opted out
When it does, analytics storage has been denied and the
_gacookies this site set have been expired. Denying storage alone does not delete cookies that already exist, so we clear them as well.Repeat it on each browser and device you use
The setting lives in that browser's local storage. Your phone does not know what your laptop chose, and a private window forgets when you close it.
How to opt out everywhere, not just here
Turn on Global Privacy Control in your browser
Some browsers ship it on; others need an extension. When your browser sends the signal, this site denies analytics storage before the first measurement, without you clicking anything.
Install Google's own opt-out add-on
Google publishes a browser add-on that blocks Google Analytics on every site, not only this one: Google Analytics Opt-out Browser Add-on.
Block third-party scripts or cookies in your browser settings
Every major browser can do this, and content blockers do it too. Nothing on this site breaks when Google Analytics is blocked. The pages, the deadlines and the sources all still work.
Global Privacy Control and Do Not Track, honored
Most sites say they ignore Do Not Track. We do not ignore it. If your browser sends a Global Privacy Control signal, or sends Do Not Track set to one, this site denies analytics storage automatically on every page you open. You do not have to do anything else, and we do not ask you to confirm it.
Do we sell or share your data?
No. We do not sell personal information, and we do not share it for cross-context behavioral advertising, which is the phrase California law uses for the practice that most people mean by “sharing.” There is nothing to sell: we hold no account records, no contact list, and no purchase history. Advertising signals are denied for every visitor at all times, so nothing measured here can be repurposed into ad targeting.
Your rights if you live in a state that grants them
California, Virginia, Colorado, Connecticut, Utah and a growing list of other states give residents rights over personal information: to know what is held, to get a copy, to correct it, to delete it, and to opt out of sale, sharing, targeted advertising and profiling. Some states also give you the right to appeal a refusal. We honor these requests from anyone who asks, whatever state you live in, because sorting readers by residency would require collecting more about you than we do now.
There is no rights portal on this site, because building one would mean holding an account database we deliberately do not have. Requests go by email instead.
How to make a privacy request
Write to desk@americanglp.org
Put the word Privacy request in the subject line so it is not mistaken for a correction to a coverage page.
Say which right you are using
Name it plainly: access, copy, correction, deletion, opt-out, or an appeal of a decision we already gave you. If you are not sure which one fits, describe what you want to happen and we will tell you what it is called.
Give us what we need to find you
We can only search what we hold, which for most readers is nothing at all. If you have written to us before, send the request from that same email address, or name the address you used and roughly when you wrote. Do not send us your Social Security number, member ID, or a copy of your identification. We will not ask for them.
Expect a plain answer, usually the same one
We reply within 45 days and will tell you if we need the extension the law allows. In most cases the honest answer is that we hold no personal information about you beyond an email thread, and we will say exactly that rather than send you an empty report.
If we say no, ask us to reconsider
Reply to the same thread and say you are appealing. We will look again and give you a written reason. If you disagree with that, your state attorney general accepts complaints, and we will tell you where to file.
Authorized agents. Someone may make a request for you. Have them send written permission signed by you, or a power of attorney, and we may write to you directly to confirm you asked for it. That confirmation step is the only verification we do, and it exists so nobody can use this address to reach into your affairs.
Children
This site is written for adults dealing with their own insurance, or an adult helping a family member. It is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has sent us something, write to us and we will delete it.
How long anything is kept
Google Analytics data expires on Google's retention schedule for our property and is not exported anywhere else. Vercel's request logs roll off on its own short schedule; we do not archive them. Email threads are kept while they are useful for answering you and for the correction record, then deleted. There is no database of readers, so there is nothing else with a retention period.
How this site is secured, honestly
The honest answer for a static site is that most of the risk simply is not present. Every page is served over HTTPS. There is no login to steal, no database of readers to breach, and no payment path. What remains is our hosting account and our email, and those carry the ordinary risks any account carries. No site can promise perfect security, and we are not going to promise it here.
When you leave this site
We link to insurers, to state Medicaid agencies, to federal agencies, and to companies that pay us. Those sites set their own cookies and keep their own logs. Read their policies if it matters to you. We do not control them, and a link is not an endorsement of how they handle your data.
Who this site is for
American GLP is published for readers in the United States and describes United States coverage rules. If you read it from elsewhere, you are doing so on your own initiative, and your information may be handled in the United States under United States law.
How you will know this changed
The effective date at the top of this page changes whenever the substance does. If a change matters to what we collect or how you opt out, we will describe it here in plain words rather than hiding it in a rewrite. Keep reading and you accept the version that is posted.
How to reach us
Privacy questions and requests: desk@americanglp.org. For the rest, see the terms, how we pay for this, the medical disclaimer, and trademarks.