Privacy
Vitals.run can be read without an account. The public protocol pages do not intentionally run advertising, behavioral analytics, tracking pixels, or third-party marketing scripts, and the initial page response does not set a cookie. The site does not sell visitor data.
Vitals.run is hosted by Vercel. Like other web hosts, Vercel may process ordinary request information needed to deliver and protect the site, such as an IP address, user agent, requested URL, timestamp, and network or error logs. Vercel handles that information under its own published privacy and security terms.
The log records Adam's dates, routine timing, adherence checks, mood ratings, and optional notes in a Neon-hosted database. Log reads and writes require an operator access token; public visitors are not asked to submit health information. The access token is held only in the open browser tab while the private log is in use and is sent to the same-origin log API for authorization.
Links to GitHub and research sources leave vitals.run, and those services apply their own privacy policies. The project's contact route is a public GitHub issue, so visitors should never post private health information there. A privacy concern can be raised through that route without using the private log.