Research privacy notice

What the page records

The page records basic research events, such as a page view, whether the price card was actually visible, whether the research questions were started or completed, the referring source tag, timestamps, and a random browser identifier used to avoid counting the same browser repeatedly.

If you complete the three audience checks, the system records only whether the full research audience definition was met. It does not store each audience answer as a separate profile.

If you continue, the page stores your verified email address and your active response to one delayed YES49 or NO49 follow-up. The two short offer-focused answers are checked for the pre-registered length and duplicate rules, but their words are not retained. The database keeps only their character counts and one-way fingerprints. The email is stored in the separate health research database and is not placed on a general marketing list.

Where the data comes from

Most data comes directly from what you enter or select on the research page and from your later YES49 or NO49 link. The page also creates a random browser identifier and receives limited device, request, source tag, and referral data when your browser connects to the page and the first-party research service.

The qualified-audience result and the fact that you reviewed a men's performance concept may be treated as consumer health data. Ardio does not infer a diagnosis, treatment need, or medical condition from it.

What the page does not collect

The page does not ask for your name, phone number, symptoms, diagnosis, medical history, medications, payment information, or sexual history. Do not enter health information in the written prompts.

How the research data is used

The data is used to measure whether a defined audience sees and seriously considers the proposed $49 concept and then actively confirms that interest after 24 to 48 hours. It is not used to make a medical decision, create a patient relationship, or determine eligibility for care.

Your separate consent authorizes one verification code and one neutral research follow-up. It does not authorize recurring marketing emails.

Who processes the data

The research page does not use third-party advertising pixels. Ardio does not sell research responses or share them with advertising platforms. The limited service-provider categories and services are:

• Cloudflare: page hosting, delivery, DNS, security, and technical logs.
• Vultr: the separate health research server and database.
• Resend and Amazon SES: delivery of the requested verification code and one follow-up email.

These providers process data only to perform those functions for this study. No affiliate receives consumer health data, and Ardio does not share this data for cross-context behavioral advertising.

Retention

Ardio keeps identifiable research records for no longer than 12 months after collection unless a longer period is required by law. Data is deleted earlier when it is no longer needed for the pre-registered experiment. A valid deletion request also applies to service providers and backups, subject only to legally permitted archival timing.

Your privacy rights

You may ask whether Ardio has data about you, access that data, obtain a list of third parties or affiliates with whom it was shared, withdraw consent, or request deletion. You do not need an account. Requests are free up to twice in a 12-month period.

Email [email protected]from the address used in the study and state the right you want to use. If you are writing about a browser-only record, include the browser identifier shown on the research page if available. Ardio will verify only what is reasonably needed, respond within 45 days, and may extend once by up to 45 additional days with notice when reasonably necessary. Withdrawing consent stops future processing but does not change lawful processing completed before withdrawal.

If a request is denied, the response will explain why and how to appeal. To appeal, reply to that response with the word “Appeal.” Ardio will review the appeal and provide a written decision. If the appeal is denied, the response will explain how to contact the Washington State Attorney General.

Security

Access is limited to the separate health research environment. Ardio uses transport encryption, access controls, hashed technical identifiers, short-lived single-use verification codes, and data minimization. No advertising platform receives the email address or research answers.