Consumer health data privacy policy
Washington's My Health My Data Act, Nevada's consumer health data law and Connecticut's consumer health data rules give people rights over health-related data. Our site is about food choices of people on GLP-1 medications, so the fact that you subscribe could be read as health information. We treat it that way, for everyone.
Updated Oct 27, 2026
What we collect and why
| Data | Why |
|---|---|
| Your email address and subscription status | To send the email you asked for, and its confirmation. |
| When and where you signed up, the signup wording version, and when you confirmed | To show you agreed to receive the email, and, counted in totals by page (for a city page, that city), to decide which cities to cover. |
| A random token | To make your unsubscribe and delete links work. |
| IP address and browser details, processed by Cloudflare and kept in request logs for up to 7 days | To serve the site, block abuse and rate-limit signups. |
| Messages you email us (orders, tips, corrections, requests) and your email address | To answer you, handle requests, and consider orders for the site; anything published is the food details in our own words, never your name or address. Deleted within 90 days of handling. |
| An order you share on our form (restaurant or brand, what you order, and the city and numbers if you add them), with no name, email or IP address | To check the items on the chain's or brand's own page and publish them as a community pick in our own words. The form turns away doses, weight and health details. |
| Words typed into a search that found nothing, with a count and the date last searched | To see what readers look for that we haven't listed yet. Never linked to you, your IP address or a cookie. Searches that look like they contain an email address, phone number, username, link or long number, that mention a medication dose, weight, symptom or a health condition such as pregnancy, diabetes or pancreatitis, or that talk about the person searching or their family, aren't kept. Deleted 90 days after anyone last ran them. This is an automatic keyword filter that can't catch every phrasing, so please leave health details out of searches. |
We never ask about medication, doses, weight or health conditions. Page counts are kept as totals with no link to any person, so they aren't consumer health data.
Pick for me works out what's near you inside your browser. We never receive your exact location, so we don't collect or store it, and we don't use geofencing. Without your location, the page uses the city Cloudflare places your connection in, which we don't store.
Where it comes from
- From you, when you subscribe, search, share an order or email us.
- From your browser, when it requests a page.
- Never from data brokers or other companies.
Your rights
- Confirm whether we collect or share your health data, and see it, including the list of everyone we've shared it with.
- Delete it. “Delete my data” in any email removes it from our list at once, and copies of past emails at Resend, our email provider, expire within 30 days. If an email to you bounced or was reported as spam, email us and we'll also take the address off Resend's do-not-send list.
- Withdraw your consent: unsubscribe, or delete your data.
- Correct it.
To use these rights, email hello@lilnom.com. We'll confirm the request comes from you by replying to the subscribed address, and we answer within 45 days. If we need more time, we'll tell you why within those 45 days and take at most 45 more. Requests are free. We won't treat you differently for using them.
Appeals
If we turn down a request, you can appeal by replying to our answer with “Appeal” in the subject. We'll answer the appeal in writing within 45 days, with our reasons. If we deny it, we'll tell you how to contact your state attorney general to file a complaint.
Contact
BlueFort Labs LLC, 335 E Albertoni St Ste 200-515, Carson, CA 90746. Email hello@lilnom.com. Our general privacy policy covers the rest of the site.