Privacy Policy

Last updated: August 2026

The Devotion Formula (thedevotionformula.com) is built to collect as little personal data as possible. This page explains exactly what we collect, why, and what your rights are. Our content is written primarily for a US audience, but we extend GDPR-level protections to all visitors as a courtesy, wherever you are.

What we collect

Newsletter data

If you subscribe to our newsletter, we store your email address, your first name (only if you choose to give it), the exact consent text you agreed to, and a timestamp of your consent. We use double opt-in: no emails are sent until you confirm your subscription via the link we email you.

Affiliate click statistics

When you click an affiliate link on this site, we record the click for aggregate statistics: which link was clicked, your browser type, the referring page, your country, and a truncated one-way hash of your IP address mixed with a secret salt. We never store your raw IP address, and the hash cannot be reversed to identify you.

Aggregate visit counts

We count visits in aggregate — a single daily total per site — to understand what content helps; this counter stores no cookies, no IP address, and no identifier of any kind. To avoid counting the same visit twice, we set a temporary technical flag in your browser tab — deleted when the tab closes, containing no identifier.

What we do not collect

We do not use tracking cookies, advertising pixels, or third-party analytics scripts. Reading the articles on this site requires no account and leaves no marketing profile.

Optional account (daily love affirmations tool)

If you choose to sign in with Google to save results and track a streak on the free daily love affirmations tool, we store your email address and name from sign-in, the tool results you choose to save, and your check-in streak — nothing else. This account is entirely optional; you can use the rest of the site without ever creating one. Signing in uses Google's OAuth service, which processes your basic profile information (name, email) to authenticate you; see Google's own privacy policy for how Google itself handles that exchange. You can permanently delete this account and everything stored in it at any time from the account page — deletion is immediate and complete (GDPR Art. 17, right to erasure).

Why we collect it (purposes)

To send you the newsletter you asked for, including occasional product recommendations.
To understand which recommendations readers find useful, in aggregate.
To keep the site secure and prevent abuse of our forms.

Legal basis

Newsletter processing is based on your consent (GDPR Art. 6(1)(a)), which you give explicitly via an unticked checkbox and confirm via double opt-in. You can withdraw it at any time using the unsubscribe link in every email; withdrawal is one click. Aggregate, pseudonymized click statistics are based on our legitimate interest (Art. 6(1)(f)) in understanding and funding our editorial work; the hashing described above minimizes any privacy impact.

Who processes your data

Vercel (US-based): website hosting and delivery. Every visit to this site is served through Vercel's infrastructure, which involves a transfer of data (such as your IP address, as part of standard web request handling) to the United States.
Supabase (eu-west-1, EU region): database storing subscriber records, click statistics, and — if you use the optional tool account — your account data.
Resend (US-based): our email delivery provider (resend.com), which processes subscriber email addresses on our behalf to send the newsletter and confirmation emails.
Google (US-based): if you choose to sign in to the optional tool account, authentication runs through Google OAuth, which processes your name and email address to verify your identity.

We do not sell or rent personal data to anyone. Data is shared with processors only to the extent needed to run this site.

International data transfers

The Devotion Formula is operated from the EU, but Vercel, Resend, and Google are US-based companies, so using this site — reading it, subscribing to the newsletter, or signing in to the optional tool — necessarily involves transferring some personal data to the United States, a country the EU has not given a full adequacy decision for consumer data in general. Each of these providers publishes its own data processing terms and states that it offers Standard Contractual Clauses (the EU Commission's approved transfer mechanism) as the safeguard for this kind of transfer; some also self-certify under the EU-US Data Privacy Framework. To be transparent about where this stands today: we have not yet separately countersigned a bespoke Data Processing Agreement or Standard Contractual Clauses with each of these providers — that paperwork is in progress. If this matters to your decision to use the site, or you would like more detail on a specific provider's safeguards before that is finalized, email us at hello@thedevotionformula.com and we will tell you exactly where things stand.

How long we keep it

Subscriber records are kept while your subscription is active. If you unsubscribe, we keep a minimal suppression record so we do not email you again. Click statistics are kept in pseudonymized form for aggregate reporting.

Your rights

You can at any time:

Request a copy of the data we hold about you (access & portability).
Ask us to correct or delete it (rectification & erasure).
Withdraw consent with one click on the unsubscribe link in any email.
Object to or ask us to restrict any processing.
Complain to your local data protection authority.

To exercise any of these rights, email hello@thedevotionformula.com. We respond within 30 days.

Changes to this policy

If we change how we handle personal data, we will update this page and the date at the top.