Privacy Policy
This page describes what GLP1Prescription.ca actually collects today, in plain terms, in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).
The short version
You can read this entire site without creating an account, subscribing to anything, or giving us your name or email address — we don’t have an account system or a newsletter at all. What we do collect is limited to an anonymous session identifier used to measure our own disclosed partner links, described in full below.
1. Cookies
This site sets one first-party cookie, glp_sid. It’s a random, anonymous identifier — not your name, not an email address, not tied to any account, because we don’t have accounts. It’s set the first time a placement (one of our disclosed provider links or internal cross-links) is shown to you or you click one, lasts up to 180 days, and lets us count on our own systems that the same browser saw and later clicked a link. It’s marked HttpOnly and SameSite=Lax. We don’t use advertising or tracking cookies from any other company, and we don’t run any third-party ad network on this site.
2. What our placement system records
Some pages on this site carry a placement — a small, labelled unit that links to one of our own pages or to a specific provider. When one is shown to you, and again if you click it, we record an anonymous event on our own systems: which unit, which page it appeared on, your browser window’s width, and the glp_sid identifier described above. A click additionally records where the click sent you and a one-time click token (see Section 3). We do not record your IP address, your browser or device’s user-agent string, a device fingerprint, or your precise location — none of those exist as fields in this system at all, so there is nothing to turn off.
3. Affiliate click redirects
Clicking a disclosed partner link (for example, one of Felix’s) takes you through a first-party redirect on this domain before you land on the partner’s own site — this is how the click is counted at all, and it adds no delay you’d notice. That redirect passes the partner’s network a one-time click token and a slot identifier, so the partner can match a later signup back to our referral. Neither value is linked to your name, email address, or any account — again, we don’t collect those in the first place. Once you’re on the partner’s own site, their privacy practices apply, not ours — we encourage you to review them separately.
4. Analytics
This site is built to support Google Analytics 4 for aggregate usage measurement — which pages are viewed, which links are clicked — but as of the date below, no analytics measurement ID is configured and no analytics script loads on any page. If we turn analytics on, we’ll update this section first. When active, GA4 would collect aggregate interaction data only, never your name or email address.
5. Glenna (chat assistant), if and when it’s enabled
This site is built to support an AI chat assistant, internally called Glenna, that answers questions about the prescription process. It is not currently active — it only turns on if a site-wide switch and a separate API key are both configured, and we’ll update this section before that happens, not after. When it is active: each conversation is identified only by a random id your browser generates and holds for that browsing session, never a cookie and never tied to any account. Messages are passed through an automated filter that strips personal information — names, emails, phone numbers, and similar — before anything is stored. What we keep after that is limited to the scrubbed message text, which page you were on, a coarse topic category, and whether the assistant answered or declined — never your IP address, never a device fingerprint. These records are automatically deleted after 180 days.
6. Hosting and data storage
This site is hosted on Vercel and stores its data in a Postgres database hosted by Neon. All traffic to this site uses HTTPS. These providers may process data outside of Canada; under PIPEDA we’re responsible for making sure our service providers protect information to a comparable standard, and each maintains industry-standard security practices.
7. Third-party sharing
We do not sell or rent any information — we don’t collect anything that identifies you personally to sell in the first place. The one thing we do share is the anonymous click token described in Section 3, passed to a disclosed partner’s affiliate network at the moment you click through to them. If analytics is ever enabled (Section 4), aggregate usage data would be shared with Google under its own terms.
8. Your rights under PIPEDA
Under Canada’s Personal Information Protection and Electronic Documents Act, you have the right to access, correct, or request deletion of any personal information we hold about you, and to withdraw consent for its use. In practice, the only record connected to your browser is the anonymous session identifier described above — it can’t identify you on its own, but if you can point us to it (for example, by describing when and what you clicked), we’ll act on a good-faith deletion request. Email hello@glp1prescription.ca to exercise any of these rights; we’ll respond within 30 days, as PIPEDA requires. If you’re not satisfied with our response, you can file a complaint with the Office of the Privacy Commissioner of Canada.
9. Changes to this policy
We’ll update this page whenever what we actually collect changes — most notably before turning on analytics or the chat assistant described above. We’ll update the date below whenever we do.
10. Contact
Questions about this policy? Email hello@glp1prescription.ca or visit our contact page.
Last updated: August 13, 2026