MERLINHEALTH WIZARD

Privacy

What this site collects, and what happens to it.

Last updated: September 14, 2026

This page covers merlinhealthwizard.com: the email box, and the guides. It is written for someone who does not have a Merlin account, because nothing on this domain requires one. If you do have an account, the notice that covers your health data is the full privacy policy, and it is readable without signing in.

No health data is collected here

Lab results, biomarker values and everything else clinical live behind an account, in the portal. None of it passes through this site. What this domain collects is an email address, and, if you ask for a guide, which guide you asked for.

If you sign up for updates

Your email address is written to our contact list at Resend, which sends the welcome note and every later update. Nothing is collected alongside it: no health data, and nothing from any account you may hold.

Every email includes a one-click unsubscribe link, and it keeps working. We keep your address until you use it or ask us to delete it.

If you ask for a guide

The Examined Self guides are free to read on the page without giving us anything. If you ask for a copy by email, we store your address together with which guide you asked for, because we cannot send you the right one otherwise.

You get a confirmation link first, and the guide is sent through once that is clicked. Nothing else is sent to an address that has not confirmed.

That pairing of address and topic is the sensitive part, and it does not last. It expires automatically 30 days after your most recent request, leaving the address without any record of what you read. If you gave an address but never confirmed it, the whole record is deleted after 30 days instead.

Counts of how many people downloaded each guide are kept indefinitely, but they carry no identity: they are monthly totals per guide, with no way back to a person.

The service that sends the email is never told which guide

This is worth saying plainly, because it is unusual and you would have no reason to assume it. The system that sends our email is a separate service from the one that holds the record of what you read, and it is never given the guide or the topic. It receives your address and a numbered sequence, and nothing else. It is not told what the number means.

This is enforced rather than intended: the sending service rejects outright any request carrying more than addresses and a number, its database has no column to put a topic in, and its sequences are named by number so that even a list name cannot leak what the list is about.

Being exact about the limit of that, because a flat claim would be too strong: the number is not arbitrary. It corresponds to a broad group of related guides, so the follow-up reading suits what you came for. That group is much coarser than the guide itself, the sending service cannot tell from its own records what any number refers to, and the specific guide you read never reaches it. But the sequence you are on is not unrelated to your subject, and we would rather say so than let "never told the topic" carry more weight than it should.

Who processes it

  • Vercel - hosting and content delivery for this site, plus anonymous page-view counts, device type, country, and page-load measurements. No cookies are set for analytics and no individual visitor is identified, which is why this site has no cookie banner.
  • Resend - email delivery, and the contact list behind the updates signup. It receives an email address and nothing else.
  • Supabase - the database where a guide request is stored. This is where the pairing lives, and it does not leave.
  • Our sending service - a separate service that runs the guide follow-up emails. It receives email addresses and a sequence number, never a topic. Not yet in service.

Your choices, without an account

You can unsubscribe from any email using the link in it. That stops the email but leaves us knowing not to write to you again, which is the point of keeping the record.

You can also ask us to delete everything we hold about you, and you do not need an account to ask. Email privacy@merlinhealthwizard.com from the address in question and we will remove it.

If you live in California, the EU, or the UK, you have additional rights under CCPA, GDPR, or UK GDPR, including the right to know what we hold. We do not sell or share personal information.

Getting in touch

For anything on this page, or to make a request about your data, write to privacy@merlinhealthwizard.com.

Merlin Health Wizard is a brand of Soul Flow Mechanics, operated by Unveil Enterprises, LLC.

Hold a Merlin account? The full privacy policy covers uploaded lab results, what the AI reads, voice notes, and the sub-processors that touch clinical data. It is readable without signing in. Back to the home page.