Accountability
Privacy
PlainVitamins asks nothing of you: no account, no form, no newsletter. The only data about visitors comes from the tools below, which measure visits and place ads. Kiznis Studio, which owns PlainVitamins, is the controller of that data.
Published ยท Last updated
What runs on PlainVitamins
| Tool | What it does | Cookies or storage | Before your choice (EEA, UK, Switzerland) |
|---|---|---|---|
| Journey by Mediavine | Places the ads and shows the consent banner (IAB TCF v2.2) | Advertising cookies, with your consent where the law requires it | No advertising cookies until you choose |
| Google Analytics 4 | Counts visits and pages | First-party cookies (_ga) once analytics is allowed; data kept at most 14 months | Sends cookieless measurements (the page, the time, the browser); no cookies until you choose |
| Umami | Tallies which pages are read, as totals | Sets nothing in the browser and keeps no identifier | Active, cookie-free |
| Cloudflare | Serves the site and stops abusive requests | One security cookie (__cf_bm), only for traffic that looks like a bot | Active, for security |
| Sentry (EU region) | Logs errors the server hits, for fixing | None: it works on the server, not in the browser | Active, server side |
| Your browser | Keeps your light or dark theme choice | A localStorage entry that stays on your device | Active; never reaches us |
Consent, by region
A visitor from the European Economic Area, the United Kingdom or Switzerland sees Mediavine's consent banner first, and no advertising or analytics cookie is written before an answer is given; the only storage in that time is Cloudflare's security cookie. Google Analytics is set to consent mode there: with no answer yet it receives cookie-free pings (which page, when, which browser), and its cookies follow only an acceptance. For visitors in the United States, ads and analytics start on the first page, with the opt-outs listed further down. In the rest of the world analytics starts at once and advertising storage still waits for a choice.
Under the GDPR the legal basis for advertising and for analytics cookies is consent. The cookie-free pings sent before an answer store nothing on your device and rest on our legitimate interest in counting visits. Consent can be taken back as easily as it was given: from Mediavine's privacy settings link on the page, by sending Global Privacy Control, or by clearing the cookies this site set, after which the banner returns. The security checks, the Umami totals and the error log rely on a legitimate interest: keeping the site safe, running and counted. Data held by Google and Mediavine may be handled in the United States, under the transfer safeguards set out in their policies (Google, Mediavine).
What you type into the site's search stays out of the analytics: the page is reported with the query removed, and a link you follow from a results page tells the next site only plainvitamins.com, never the search words.
Your privacy choices in the United States
To choose which ads to show, Mediavine and its partners read a cookie ID, the IP address and the rough location it implies, and the PlainVitamins pages you open; Google Analytics counts the visits. Several state privacy laws treat passing that to advertisers for cross-context advertising as a "sale" or "sharing" of personal information. Four ways to opt out:
- Mediavine's own privacy settings, reached from its banner or from its privacy link when the page shows it;
- a Global Privacy Control signal from your browser, which makes every PlainVitamins page deny Google's ad storage, ad user data and ad personalisation;
- the industry opt-out page at aboutads.info, which covers many ad networks at once;
- an email to hello@plainvitamins.com.
The same address takes a request to see, fix or erase what is held about you. The reply comes within 45 days, and because the data sits with Google and Mediavine, the request is carried out with them.
The label data
The pages publish the NIH Dietary Supplement Label Database: products, brands and the companies named on labels. They name no private individuals.
Your rights
The GDPR and laws like it let you find out what is held about you, have it corrected or erased, object to how it is used, and complain to the data protection authority where you live. Our own systems keep one kind of personal data: the emails readers send, held until the reply is sent and any correction it prompted is recorded. Visit and ad data is in Google's and Mediavine's systems, on the terms described above. An email to hello@plainvitamins.com starts any of these requests; the answer comes within one month, and where the data is with one of those providers, the request goes to them.
The site is written for adults reading supplement labels. It is not aimed at children under 13, and nothing here is meant to gather their data.
Who is responsible
The controller of the visitor data described here is Kiznis Studio of Lithuania, the owner of PlainVitamins. Contact: hello@plainvitamins.com. Changes to this page are dated above and recorded in the changelog.