The short version
SupplementCycle has no signup, no login, no newsletter and no contact form. We never ask for your name, your email address or anything about your health, and there is no field anywhere on the site in which you could tell us.
What does happen: the site is hosted, measured and — on the live site — advertised on, and each of those involves a company that sees something about your visit. That is what the rest of this page is about.
Who is responsible
SupplementCycle is published by Hasim Emre Ozocal, the data controller for this site.
Questions about this policy, or any request covered by your rights below, go to brainspicks@gmail.com — see the contact page.
What the site itself stores
One thing, and only if you ask for it. Building a cycle in the guide keeps everything in the URL until you press save. Saving writes a row to our database containing the goal, the compounds, the duration, a generated title and a random share token — and nothing else. No name, no email, no IP address, no account.
The token becomes the share link. Anyone who has that link can open the plan, so treat it as public: do not put anything in a plan you would not want read. There is no way for us to tell who saved a plan or who opened one, which also means we cannot connect a saved plan back to you in order to delete it — send us the link and we will remove that row.
Third parties, and what they see
These are the only companies with any visibility into your visit. The list is the whole list — it matches what the site actually loads, and it changes in the same commit as the code.
- Google AdSense
- Runs on the live site only. Google and its ad partners use cookies and similar technologies to serve and measure ads, which on personalised ads includes profiling based on your browsing. Google’s own description of this is at policies.google.com/technologies/ads.
- Vercel Analytics
- Page-view counts, referrer, country, browser and device type. Cookieless, with no cross-site identifier and nothing that identifies you individually.
- Vercel Speed Insights
- How fast pages render for real visitors. Timing measurements only.
- Vercel (hosting)
- Serves every page, and like any web server keeps short-lived request logs that include IP addresses, for security and debugging.
- Supabase (database)
- Holds the compound catalogue and saved cycle plans. It is read on nearly every page and written to only when you save a plan.
Error monitoring (Sentry) is installed but switched off — no reporting endpoint is configured, so nothing is sent. If that changes, this page changes with it.
Cookies
SupplementCycle sets no cookies of its own. It has no login session to keep and no preferences to remember.
Google's advertising does use cookies, and where the law requires consent for that — the UK and the EEA — you are asked before any advertising cookie is set, and you can change or withdraw that answer at any time. You can also switch off personalised ads across all of Google at My Ad Center, independently of anything on this site.
Your rights
Under UK GDPR you can ask what we hold about you, ask for it to be corrected or erased, object to how it is used, and ask for a copy. In practice the honest answer will usually be that we hold nothing about you at all, because there is nothing here that collects it — the exception is a saved plan, and only if you send us its link.
Requests for the data the third parties above hold go to those companies, since they are the ones holding it. If you think we have handled something badly you can complain to the UK Information Commissioner's Office at ico.org.uk, though we would rather you told us first.
Changes
When this policy changes the date at the top changes with it. There is no mailing list to notify, which is rather the point.