Privacy policy
Last updated: September 18, 2026
WeightGain (“we”, “us”) operates a waitlist for launch updates. People outside the United States may join the email list. Planned services and products at launch are US only. This policy describes how we collect, store, and use the contact information you choose to share.
What we collect
- The signup form asks only for your email address. We also record the product updates you request (TRT, growth hormone deficiency evaluation, or peptides). Earlier versions of the form may have collected names, states, goals, free-text responses, and height ranges. Those historical records may remain; the current signup no longer collects new values for those fields.
- We save your email when your submission succeeds. Typing into the form does not submit it.
- Technical information needed to serve and protect the site, including IP addresses and browser request headers.
- A referral code when you use an invitation link. Earlier signup records may include country, broad region, timezone, browser, operating system, landing page, referrer, and campaign details.
- Signup and subscription records, email delivery, verification, unsubscribe, and any email engagement records described below.
How we use it
- Add you to the email list and send launch updates.
- Confirm your email and manage your subscription.
- Remember requested product updates, credit invitations, prevent spam, and keep the service working.
Health information
This waitlist is not a clinical intake and should not be used for urgent or private medical details, diagnoses, medications, lab values, or medical documents. If a future provider workflow becomes available, it would use separate notices, consent language, vendor controls, and healthcare grade privacy safeguards where required.
Analytics and advertising
Google Analytics is not installed. Optional browser usage analytics, performance reporting, and campaign tracking are disabled, including Cloudflare's Web Analytics browser beacon. We do not use advertising cookies or fingerprint visitors for advertising.
Advertising pixels and advertising conversion tracking are disabled. This site does not send page visits or signup events to Reddit or X.
Earlier analytics records may include signup events, performance measurements, product interest, browser details, and a hashed IP identifier. Turning tracking off does not automatically erase those existing records. You can contact us about your data using the details below. Hosting and security systems still process requests to operate and protect the site.
Browser storage
We use session storage, scoped to your browser tab, for invitation referral codes and form state. New unfinished email drafts can be restored for 30 minutes after they are saved. Expired drafts are removed the next time the form reads them, rather than by a timer. Older form versions may have left a pending email in the tab without that cutoff. A successful signup clears the draft and pending email. You can also clear them from the saved signup page or in your browser settings.
After a successful signup, local storage keeps your submitted email, product interest, and signup status on this device. Older saved records may also contain details submitted through earlier forms. This lets the saved signup page show your details. You can clear them there or in your browser settings. Clearing browser storage does not remove your email from the list.
A private email link can open a verified session for managing launch updates. The link expires after one hour and can be used once. A secure, HTTP-only cookie keeps that session for up to seven days; signing out revokes it. Your earned launch discount eligibility is stored separately from your current product choices.
Service providers
Cloudflare hosts the site and database and helps prevent spam. Cloudflare Turnstile processes browser and network information to check submissions. We also check your email domain using Cloudflare DNS. See Cloudflare's Turnstile Privacy Addendum.
Resend sends our emails and reports delivery, bounces, and complaints. It may also process opens and link clicks depending on its provider settings. During the tracking hold, our application discards new open and click reports; earlier engagement records may remain. We use delivery and suppression records to operate the list. Email links also record deliberate confirmation and unsubscribe requests on our site.
Our operators can access submitted details to manage the list. New owner notifications and operational alerts use generic messages without your email address or product choices. Earlier mailbox copies and alerts may contain details submitted through older forms.
Regional privacy requirements
Privacy rights and the requirements for collecting or using information depend on where you live and which laws apply. Contact us to exercise your rights. Any future clinical service would need separate privacy notices and safeguards before it launches.
IP addresses and location
We process IP addresses for security and rate limiting. Disabling optional analytics does not disable spam protection or essential network processing. Existing records may contain broad location context from earlier versions of the site.
Your choices
You can request a copy of your data or ask us to delete it at any time. Email londonmaksim@gmail.com.
Changes
If we change this policy, we will update the date above. Material changes will be communicated by email to members.