Dragon Fuel Health ("Dragon Fuel", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have in relation to your data.

By using dragonfuelhealth.com and its services, you agree to the practices described in this policy. If you do not agree, please do not use the site.

Information you provide directly:

• Account registration details: first name, last name, and email address
• Password (stored as a one-way cryptographic hash — we cannot read it)
• Progress tracker entries: weight, calories, protein intake, steps, sleep hours, water intake, mood, energy, body measurements, and notes you choose to log
• Meal log entries you create manually
• Inputs you provide to calculators and tools (TDEE, macros, BMI, hydration)
• Email address if you subscribe to our newsletter

Information collected automatically:

• IP address (logged when you register or submit forms)
• Browser type and device type (via standard web server logs)
• Pages visited and time spent on the site (via Google Analytics)
• Referring website or search query that brought you to Dragon Fuel

Payment information:

Premium membership payments are processed by Stripe. Dragon Fuel does not store your card number, expiry date, or CVV. We receive only a Stripe customer ID, subscription status, and basic billing information. Stripe's privacy practices are governed by their own privacy policy at stripe.com/privacy.

• To create and manage your account
• To provide access to the features and tools you have paid for or signed up for
• To save and display your progress data in the tracker
• To process payments and manage your subscription through Stripe
• To send you a password reset email when requested
• To send newsletter emails if you have subscribed (you can unsubscribe at any time)
• To understand how the site is used in aggregate, so we can improve it
• To prevent fraud, abuse, and unauthorised access

Dragon Fuel uses Google Analytics 4 to understand how visitors use the site. This includes data such as pages visited, time on site, device type, and general geographic location (country/region level). This data is collected in aggregate and is not linked to your personal account information.

Google Analytics uses cookies and may transfer data to Google's servers. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

Dragon Fuel uses the following cookies:

• Session cookie: A secure, HTTP-only cookie that keeps you logged in during your session. It expires when you close your browser or when the session times out.
• Remember me cookie: If you check "Remember me" at login, a longer-lived authentication cookie is stored on your device.
• Google Analytics cookies: Used by Google Analytics to track site usage. These are third-party cookies.

We do not use advertising cookies, tracking pixels, or any cookies from social media platforms.

We share your data only in the following limited circumstances:

• Stripe: Payment processing. We share your email address and name to create a Stripe customer record. Card details are handled entirely by Stripe.
• Google Analytics: Aggregate, anonymised usage data as described in Section 3.
• Legal requirements: We may disclose information if required to do so by law, court order, or government authority.
• Business transfer: If Dragon Fuel is acquired or merges with another entity, your data may be transferred as part of that transaction. We would notify you before your data became subject to a different privacy policy.

We do not sell your personal data. We do not share your health data with any third party for any commercial purpose.

We take reasonable technical and organisational measures to protect your data:

• Passwords are stored as bcrypt hashes — the original password is never stored or readable
• All data is transmitted over HTTPS (encrypted in transit)
• Database access is restricted to the application server
• Authentication uses CSRF tokens to protect against cross-site request forgery
• Sessions use secure, HTTP-only cookies

No method of transmission or storage is 100% secure. While we use industry-standard security practices, we cannot guarantee absolute security. If you suspect your account has been compromised, change your password immediately.

You have the following rights regarding your data:

• Access: You can view all your progress data in the Progress Tracker at any time.
• Correction: You can update your name and email in Account Settings. You can edit or delete individual progress entries.
• Deletion: You can request deletion of your account and all associated data by contacting us. We will process account deletion requests within 30 days.
• Newsletter: You can unsubscribe from our newsletter at any time by emailing us or following any unsubscribe link we include in emails.
• Portability: If you would like a copy of your data, contact us and we will provide it in a readable format.

If you are located in the European Economic Area (EEA), United Kingdom, or California, you may have additional rights under GDPR, UK GDPR, or CCPA respectively. Please contact us to exercise any of these rights.

We retain your account and progress data for as long as your account is active, or until you request deletion. If you do not log in for 3 years and have no active subscription, we may delete your account after notifying you by email.

Payment records are retained for the period required by applicable tax and accounting law (typically 7 years).

Anonymised, aggregate analytics data may be retained indefinitely.

Dragon Fuel is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. Our nutrition guides for children are written for parents and caregivers to read on their children's behalf, not for children to use the site directly.

If you believe we have inadvertently collected information from a child under 13, please contact us and we will delete it promptly.

Dragon Fuel contains links to third-party websites, including Amazon (through our affiliate programme), supplement brands, and fitness apps. These sites have their own privacy policies and we are not responsible for their practices. Clicking a third-party link takes you away from Dragon Fuel and into their data environment.

Our Amazon affiliate links earn us a small commission on qualifying purchases at no extra cost to you. Amazon's privacy policy applies to any data collected through those links.

Dragon Fuel's AI Meal Planner uses the Anthropic API to generate personalised meal plans. When you use this feature, the dietary preferences, allergies, and goals you enter are sent to Anthropic's servers to generate your plan. We do not store the content of AI conversations beyond what is necessary to display the generated plan to you.

Anthropic's data handling practices are governed by their own privacy policy. We do not link AI-generated content to your personally identifiable information in Anthropic's systems.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify registered users by email. Continued use of Dragon Fuel after changes are posted constitutes acceptance of the updated policy.