Privacy Policy
Last updated: March 8, 2026
Who we are
Longevity Chef (longevitychef.net) is an evidence-driven science publication focused on biohacking, longevity research, and fact-checking health claims. The data controller for this website is the Longevity Chef team. For privacy-related questions, contact us at [email protected].
What data we collect and why
Visitors (no account required)
We do not collect any personal information from visitors. We do not require registration, do not store IP addresses, and do not build user profiles.
If you consent to analytics (see Cookies section below), Google Analytics 4 collects anonymised usage data such as pages visited, time on site, and approximate country. This data is processed by Google LLC under their own privacy policy and is used solely to understand how our content is read.
Admin users
Access to the admin dashboard requires signing in with a Google account. We store your Google account email in a secure, httpOnly session cookie to authenticate you. No additional personal data is stored in our database about admin users.
Cookies
| Cookie | Purpose | Duration | Required? |
|---|---|---|---|
__Secure-authjs.session-token | Admin authentication (JWT session). Only set when an admin signs in. | 30 days | Strictly necessary for admin login |
_ga, _ga_* | Google Analytics 4 — anonymous usage statistics. | 2 years | Only after consent |
We use your browser's localStorage (not a cookie) to remember your analytics consent choice under the key cookie_consent. This data never leaves your device.
You can withdraw consent at any time by clearing your browser's local storage for this site or by using browser settings to block Google Analytics cookies (_ga*).
Third-party services
- Google Analytics 4 — loaded only with your consent. Google may transfer data outside the EU. See Google's Privacy Policy.
- Google OAuth — used for admin sign-in only. We receive your email address from Google to verify admin access. See Google's Privacy Policy.
- Google Fonts — fonts are loaded from Google's servers, which may log requests including your IP address.
Data retention
We do not store personal data about visitors. Admin session tokens expire after 30 days. Analytics data retained by Google follows their own retention settings (default 14 months in GA4).
Your rights (GDPR)
If you are in the European Economic Area, you have the following rights:
- Access — request a copy of personal data we hold about you.
- Erasure — request deletion of your personal data.
- Objection — object to processing based on legitimate interests.
- Withdraw consent — withdraw analytics consent at any time (see Cookies above).
Since we do not collect personal data from visitors, these rights primarily apply to admin users (email stored in session). To exercise any right, email us at [email protected].
You also have the right to lodge a complaint with your local data protection authority.
Changes to this policy
We may update this policy to reflect changes in our practices or legal requirements. The “Last updated” date at the top will reflect any changes. Continued use of the site after changes constitutes acceptance of the updated policy.