Privacy Policy

Effective date: July 7, 2026

This Privacy Policy explains how Healthy Sprays LLC ("Healthy Sprays," "we," "us," or "our") collects, uses, shares, and protects information when you visit healthysprays.com (the "Site"), submit any of our forms, or interact with our communications. Healthy Sprays LLC is the brand and formulation-IP licensor for THIN™, THIN-R™, and THIN-ST™. Telehealth evaluations and prescribing are provided independently by licensed providers via PrescriberNow, and medications are dispensed by licensed pharmacies; those parties maintain their own privacy practices. Questions? Email cs@healthysprays.com.

The Short Version

We collect contact details and quiz answers you choose to give us through lead forms, plus limited first-party analytics events.
We do not collect health records, payment card data, or Social Security numbers on this Site — ever.
Advertising pixels (Meta, Google, TikTok) load only after you click Accept on our cookie banner.
We do not sell your personal information.
You can request access, correction, or deletion at any time by emailing cs@healthysprays.com.

Information We Collect

1. Information you submit through lead forms

The Site includes several lead-capture forms: the newsletter signup, the contact form, the pharmacy partner application, the eligibility quiz, the product-match quiz, and the exit-intent guide download. Depending on the form, we collect:

Email address (required on most forms).
Name, phone number, and ZIP code (optional, where the form offers those fields).
Quiz answers — your responses to eligibility and product-match questions are used in your browser only to show you a result. Health-related screener answers are not stored, transmitted, or forwarded by Healthy Sprays; only your contact details and, where applicable, the product you expressed interest in are saved.
The page URL you submitted the form from.
Marketing attribution — UTM parameters (such as utm_source, utm_medium, utm_campaign) and advertising click identifiers (such as gclid, fbclid, ttclid) present when you first arrived at the Site.

2. First-party analytics events

Our own lightweight analytics records events such as page views, scroll depth, quiz step progression, and clicks on call-to-action buttons. Each event may include:

The page path and event name.
An anonymous visitor ID — a random identifier stored in a cookie, set only after you consent via the cookie banner. It is not linked to your name unless you separately submit a form.
Coarse attribution (e.g., which campaign or channel brought you here).
Your browser user-agent string.

3. Pharmacy partner portal

If your pharmacy applies to carry our products and uses the pharmacy partner portal, we collect business contact information and order details. We treat this as business-to-business data associated with your pharmacy, though contact details of individual representatives are handled under this Policy as well.

What we do not collect

No health records. No payment data. No Social Security numbers. This Site does not collect protected health information (PHI). Health information relevant to treatment is collected only by licensed providers through PrescriberNow under their own privacy practices and notices. Healthy Sprays LLC is not a covered entity under HIPAA, and nothing you submit on this Site creates a provider-patient relationship. Payments, if any, occur off-Site with PrescriberNow, the treating provider, or the dispensing pharmacy.

Where Your Information Is Stored

Cloudflare (United States). The Site is hosted on Cloudflare, and form submissions and analytics events are stored in a Cloudflare D1 database.
Google Sheets. A copy of each lead is forwarded to a private Google Sheet via Google Apps Script so we can review and respond to inquiries.
Klaviyo (email marketing) and Resend (email notification delivery) may also receive lead data if those integrations are enabled.

Cookies & Local Storage We Set

The table below lists every cookie and local-storage item set by the Site itself:

Name	Type	Purpose
`hs_consent_v1`	Cookie	Remembers your cookie consent choice (Accept or Decline).
`hs_attr`	localStorage	First-touch marketing attribution (UTM parameters and ad click IDs from your first visit).
`hs_vid_v1`	Cookie	Anonymous analytics visitor ID. Set only after you accept the consent banner.
`hs_exit_v1`	Cookie	Frequency cap so the exit-intent popup does not reappear repeatedly.
`hs_subscribed_v1`	Cookie	Suppresses signup popups after you have already subscribed.
`hs_portal`	Cookie (HttpOnly)	Pharmacy partner portal login session.
`hs_admin`	Cookie (HttpOnly)	Staff administration session.

Analytics & Advertising Pixels

Cloudflare Web Analytics (always on). A cookieless, privacy-first service that measures aggregate traffic without cookies or cross-site tracking.
Consent-gated advertising pixels. The Meta Pixel, Google Analytics 4 / Google Ads tags, and the TikTok Pixel load only after you click Accept on our consent banner. Once loaded, these third parties set their own cookies and process data under their own privacy policies to measure our campaigns and show relevant ads. If you click Decline, these pixels never load.
Google Fonts. The Site loads typefaces from Google's font content delivery network; your browser makes a request to Google's servers to fetch the font files.

How We Use Information

To respond to your inquiries and deliver whatever you requested (newsletter, guide, quiz results, pharmacy partnership follow-up).
To point you toward the product and telehealth next step that may fit you, based on your quiz answers.
To send marketing emails you signed up for (unsubscribe anytime via the link in any email).
To measure which pages, campaigns, and ads work, and to improve the Site.
To operate the pharmacy partner program.
To secure the Site, prevent abuse, comply with law, and enforce our terms.

How We Share Information

We do not sell your personal information. We share information only as follows:

PrescriberNow. When you click a consult button, the link passes along the product you selected and your marketing attribution parameters so PrescriberNow can route you correctly. From that point forward, your relationship — including any health information you provide — is with PrescriberNow and its licensed providers under their privacy policy.
Service providers. Cloudflare (hosting and database), Google (Sheets/Apps Script lead copies, fonts), Klaviyo (email marketing, if enabled), and Resend (email notifications, if enabled) process data on our behalf and are permitted to use it only to provide services to us.
Advertising platforms. Meta, Google, and TikTok receive pixel data only after you consent, as described above. Where this constitutes "sharing" for cross-context behavioral advertising under state law, you can opt out by declining the banner or as described under State Privacy Rights below.
Legal and business transfers. We may disclose information to comply with law, respond to lawful requests, protect rights and safety, or in connection with a merger, acquisition, or sale of assets (in which case this Policy continues to apply until updated).

Your Rights & Choices

Access, correction, deletion. Email cs@healthysprays.com and we will act on your request consistent with applicable law. We may need to verify your identity (typically by confirming control of the email address on file).
Marketing opt-out. Use the unsubscribe link in any marketing email, or email us. Opting out of marketing does not delete your data unless you also request deletion.
Withdraw cookie consent. Clear your cookies for healthysprays.com and choose Decline the next time the banner appears. Declining stops the anonymous analytics ID and all advertising pixels.

State Privacy Rights (California and Similar States)

If you live in California or another state with a comprehensive privacy law (such as Colorado, Connecticut, Texas, or Virginia), you have the right to:

Know what personal information we collect, use, and disclose about you (this Policy is our disclosure; you may also request a copy of your specific data).
Delete personal information we hold about you.
Correct inaccurate personal information.
Opt out of "sharing" / targeted advertising. Our consent-gated pixels are the only such sharing. Decline the cookie banner (or clear cookies and decline) to opt out, or email us and we will suppress your information from advertising uses.

To exercise any right, email cs@healthysprays.com with the subject line "Privacy Request." We will confirm receipt and respond within the timeframe required by your state's law (generally 45 days). You may designate an authorized agent to act for you; we will verify the agent's authority. We will never discriminate against you — no different prices, services, or quality — for exercising a privacy right.

Do Not Track & Global Privacy Control

Because our advertising pixels are opt-in (they load only after you affirmatively accept the banner), visitors who take no action are already untracked by those pixels. We treat a Global Privacy Control (GPC) signal from your browser as an opt-out of advertising sharing where required by law. "Do Not Track" has no settled industry standard, but our consent-first design means declining or ignoring the banner achieves the same result.

Data Retention

Leads and form submissions are retained until you request deletion, so we can honor your subscription and respond to follow-up inquiries.
Analytics events are retained and reported in aggregate; individual event rows have no name attached unless you submitted a form.
Pharmacy partner records are retained for the duration of the business relationship and as required for accounting and legal purposes.

Children

The Site is not directed to anyone under 18, and our products are for adults only. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, email cs@healthysprays.com and we will delete it promptly.

Data Security

We use reasonable administrative, technical, and organizational safeguards — including HTTPS everywhere, HttpOnly session cookies, and access limited to those who need it — to protect the information we hold. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

U.S.-Only Availability

The Site and our products are intended only for residents of the United States, and information is stored on infrastructure located in the United States. If you access the Site from outside the U.S., you do so on your own initiative and your information will be processed in the U.S.

Third-Party Links

The Site links to third-party sites and services, including PrescriberNow. We are not responsible for their privacy practices; please review their policies directly.

Changes to This Policy

We may update this Policy from time to time. When we do, we will revise the effective date above and post the new version on this page. Material changes will be highlighted here or communicated by email where appropriate.

Contact Us

Healthy Sprays LLC
Email: cs@healthysprays.com

Prepared for Healthy Sprays LLC. This document is provided for general informational purposes; consult your attorney for advice about your specific circumstances.