Telehealth Ledger

Privacy

Effective 19 October 2026. Last updated 19 October 2026.

This policy says what Telehealth Ledger (https://telehealthledger.com) collects, who receives it, and the choices you have. The site is operated by Brady Hanlon, a sole proprietor doing business as Orenston (“we”, “us”).

In short: there is no visitor account and no health form. We keep first-party visit and click records. Google Analytics, Skimlinks, and AvantLink load only if you choose Accept, and they stay off when your browser sends Global Privacy Control. We do not sell personal information for money.

Who we are

Telehealth Ledger compares prices and plan terms that telehealth companies publish, including GLP-1, NAD+, sermorelin, and similar programs, plus coupon pages and downloadable price datasets.

Information we collect

What you send us

This site has no sign-up, no account, and no contact form. If you email partners@telehealthledger.com, we receive your address and whatever you write. Corrections and partner questions use that same address.

Visit records (first-party)

Public pages load /a.js, which posts to our own database (Cloudflare D1, table hits). A record can include the page path with the query string removed, the referring host, a campaign tag, the country Cloudflare reports, device type, viewport size, and, for a click, a short label and the outbound host path without its query. A session id lives in sessionStorage as asid. A daily hash of IP address, browser, day, and a salt counts visitors. The IP address is not stored.

These records use no cookie. With Global Privacy Control (the Sec-GPC header or navigator.globalPrivacyControl), only page views are stored, and the session id, page-view id, visitor hash, and campaign tag are left empty. Path, referring host, country, and device can remain. Click, scroll, and leave records are deleted after 90 days. Remaining hit rows are deleted after 25 months. A daily job does that deletion. Add ?notrack=1 on a public page to set localStorage keys notrack and tl_notrack and stop these records. ?notrack=0 clears them. /admin is excluded.

Event ledger (first-party)

A second record posts to /api/events and is stored in analytics_events. Outbound clicks are also stored in outbound_clicks. Events the site accepts include page_view, page_time, scroll_depth, click, outbound_click, compare_click, search, filter_apply, coupon_copy, discovery_response, switch_calc, real_price_calc, and ai_landing. The stored path is the real path, including a treatment or drug slug. An outbound click can include the destination URL, provider, treatment, vertical, surface, position, network, and sub-id.

The browser keeps a session id in localStorage as tl_session_id, plus tl_attribution_first, tl_attribution_last, and tl_referrer_first for campaign tags (including utm fields, gclid, gbraid, wbraid, and msclkid) and the first referring host. This ledger does not read Global Privacy Control, and nothing in the application deletes these rows on a schedule. ?notrack=1 stops new events from this browser. discovery_response stores a source label and a prompt pattern, not the text you typed. ai_landing stores a page type and a platform label.

Google Analytics, only if you allow it

Measurement ID G-CDR2RSN3RL loads from www.googletagmanager.com only after you choose Accept or turn Analytics on in cookie settings. Until then the tag is not requested. Global Privacy Control keeps it off even if you had previously accepted.

Consent Mode v2 sets ad_storage, ad_user_data, ad_personalization, and analytics_storage to denied before any Google tag runs. Accept grants analytics_storage only. Advertising storage stays denied. The tag is configured with anonymize_ip, send_page_view off, allow_google_signals off, and allow_ad_personalization_signals off. Page location, page path, and page title sent to Google replace a treatment, drug, or provider-treatment slug with a generic type such as /programs/[treatment]. Event fields that name a provider, a treatment, or an outbound destination are not sent to Google. Campaign tags can still be sent. The first-party records above are not scrubbed that way.

This codebase does not set Google’s retention period. Google’s own cookies, such as _ga, are set by Google’s tag after you allow analytics. Turning Analytics off deletes _ga cookies this script can see on this site.

Affiliate scripts, only if you allow them

Skimlinks (s.skimresources.com) and an AvantLink script (https://classic.avantlink.com) are in the page as inert tags. They run only after you turn on Affiliate partners, and never under Global Privacy Control. Skimlinks can rewrite other merchant links and may set its own cookies. The AvantLink script is a site-ownership check. It is not the redirect used when you click a provider link. This site does not choose how long those networks keep their cookies.

Hosting

Cloudflare hosts the site and the database. It processes IP address and browser data to deliver pages and block abuse. This application does not include a Cloudflare Web Analytics beacon. Cloudflare may set its own bot cookies, such as __cf_bm or cf_clearance, when it challenges a request. This application does not set those cookies and does not choose their lifetime.

Cookies and browser storage are listed on the cookie policy.

How we use it

  • To answer email you send us.
  • To see which pages and links are used, fix errors, and maintain the site.
  • To credit an affiliate referral when you use a provider link, as described on the affiliate disclosure.
  • To keep the site available and to enforce the terms of use.

We do not run automated decisions that have a legal effect on you.

Who receives it

  • Cloudflare, which hosts the site and the database.
  • Google, for Google Analytics, only if you allow analytics. How Google uses data from sites that use its services: https://policies.google.com/technologies/partner-sites
  • Affiliate networks, when you click a provider link. Visit links use Katalys, Awin, or UpPromote. UpPromote uses an sca_ref parameter or a short link on shop.plexusdx.com. The network receives the click and can set a cookie on its own site, then redirects to the provider. That happens from the link itself. It does not wait for the Skimlinks or AvantLink scripts. Skimlinks and AvantLink also receive a page view if you allow those scripts.

We do not sell personal information for money. We do not use this browsing for targeted advertising. A cookie on an affiliate network can still count as sharing under some state laws. The Do Not Sell or Share control turns the on-site scripts off.

Health information

We do not ask for or store medical history, symptoms, prescriptions, or other health details. You cannot buy or be prescribed anything here. If a form asks for health information, you have left this site and that provider’s policy applies.

The page you open can still suggest an interest in a treatment. A path such as a program or provider-treatment page is stored in the first-party visit record and the event ledger. Those rows are not sold as a health profile. Google Analytics does not receive that slug. See the consumer health data policy.

Your privacy choices

  • Global Privacy Control turns Google Analytics, Skimlinks, and AvantLink off. Visit records then store page views only. The event ledger does not read that signal.
  • Cookie settings: the footer link “Do Not Sell or Share My Personal Information / cookie settings” reopens the banner. Reject is the same kind of button as Accept. The choice is stored in localStorage as tl-consent for 12 months.
  • ?notrack=1 stops the first-party visit script and the event ledger on this browser.
  • Email partners@telehealthledger.com and say “opt out” if you want the request applied to mail we can tie to that address.

We do not read the Do Not Track header. There is no single standard for it. We do honor Global Privacy Control.

Your rights

You can email partners@telehealthledger.com and ask what we hold that we can tie to that address, for a copy, a correction, or deletion, or to stop sale or sharing. We will reply. We do not have an account system that looks a person up. Visit rows and event rows are not stored under a name or email, so we may not be able to find one person’s browsing in them. We will say so if that is the case. You can use an agent who shows your signed permission. We will not change how the site treats you because you asked.

Residents of California and other US states, and of the EU, EEA, UK, and Switzerland, can have additional rights under their local law. We do not decide on this page which statute applies to a request. The controller named for European requests is Brady Hanlon, a sole proprietor doing business as Orenston, 78 Hawthorne Avenue, Auburndale, MA 02466. This site does not designate an EU or UK representative. We are in the United States, and the providers named above process data there. This page does not claim a Data Privacy Framework certification.

How long we keep it

  • Hit click, scroll, and leave rows: 90 days.
  • Other hit rows, including page views: 25 months.
  • analytics_events and outbound_clicks: no automatic deletion is implemented.
  • tl-consent: 12 months in this browser, or until you clear site data.
  • Google Analytics: Google’s own setting. This repository does not set it.

Children

This site is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child emailed us, write to partners@telehealthledger.com and we will delete that mail.

Operator sign-in

A cookie named tl_admin_session is set only after a sign-in on /admin. It is httpOnly, SameSite strict, limited to the /admin path, and expires after 12 hours. Public pages do not set it. /admin is excluded from the measurement above.

Security and changes

Pages are served over HTTPS. No system is perfectly secure. If we change this policy, we post the new text here and change the date above.

Contact

Mailing address: 78 Hawthorne Avenue, Auburndale, MA 02466