Privacy Policy for morrb.com (Methuselah Foundation)

Effective Date: March 18, 2025

1. General Information

This website (morrb.com) explains MORRB – an application provided by the Methuselah Foundation (referred to as “we,” “us,” or “our”). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard information when you visit morrb.com. If you have any questions or concerns about this policy or your data, please contact us:

Organization Name: Methuselah Foundation (MORRB)
Address: 8021 Flint Street, Springfield, VA 22153, USA
Contact Email: info@methuselahfoundation.org

By using our website, you agree to the practices described in this Privacy Policy.

2. Hosting & Technical Details

Our website is hosted by Hetzner Online GmbH on servers located in Germany. When you visit morrb.com, the hosting service automatically processes certain technical data in server log files to deliver the site to you and keep it secure. This may include information such as:

Your device and browser type (for compatibility and optimization).
The date and time of your visit and which pages you access.
Requested URL, referrer URL, HTTP status code, and basic technical request information.

This technical data may include your IP address, which can constitute personal data under the GDPR. It is not combined with other information to identify you personally and is used solely for operating, maintaining, and securing the website. Hetzner processes this data on our behalf under a data processing agreement and does not use it for its own purposes.

This policy describes the website (morrb.com) only. The MORRB application itself (my.morrb.com), where health data is processed, runs separately on HIPAA-compliant servers in the United States.

3. Website Analytics

We keep a simple, aggregate count of how the site is used. It is calculated on our own server from the log files described in section 2 — there is no analytics service, no tracking script, and nothing is loaded into your browser. What we count is:

How many pages were viewed each day, and which pages they were.
An approximate number of daily visitors (see below).
The website that linked you to us, if any — the domain only, never the full address.
Whether the visit came from a desktop computer, a phone, or a tablet.
Addresses that returned “page not found”, so we can fix broken links.

To estimate visitor numbers without identifying anyone, your IP address and browser description are converted into a short code using a random key that changes every day and is never saved. The code cannot be turned back into your IP address, and codes from different days cannot be linked to each other. Your IP address itself is never stored in these statistics. We keep the resulting counts for 90 days.

Just as importantly, here is what we do not do:

We do not use Google Analytics or any comparable third-party analytics service.
We do not place any cookie or script on your device to measure your visit.
We do not record how long you stay on the site or on any individual page.
We do not derive your location.
We do not follow you from page to page, recognize you on a later visit, or track you across other websites.

We do not build, combine, or share any analytics profile about you, and these statistics are never sold or passed to third parties.

4. No Cookies & Third-Party Tracking

For your privacy, morrb.com does not use any cookies for visitors. We do not place tracking cookies on your browser, and therefore we do not display a cookie consent banner (because none are needed).

We also do not use any third-party tracking or advertising services on our site. This means:

We do not use Google Analytics, Facebook Pixel, or similar third-party analytics/advertising tools that track your behavior.
We do not use any marketing or advertising cookies, web beacons, or fingerprinting techniques.
No third-party advertisers or networks collect data about you through our site.

Because we have no third-party trackers, your browsing information is not being shared with or sold to outside parties for advertising or marketing purposes. In short, we do not sell, rent, or share any visitor data with third parties. Your activity on our site remains private and is used only as described in this policy.

5. Email Contact & Data Usage

You have the option to contact us via email (for example, by writing to info@methuselahfoundation.org or any email links provided on our site). If you choose to get in touch with us, we may receive certain personal information from you – typically your email address and any other details you include in your message (such as your name or the content of your inquiry).

We will use this personal information only for the purpose of responding to you and addressing your request or question. Specifically:

We will use your email address to reply to your inquiry and provide the information or assistance you requested.
Any additional personal details you provide (like your name, phone number, or relevant background information) will be used strictly to understand and fulfill your request.

We do not add your information to any mailing lists without your explicit request or consent, and we will not send you marketing emails just because you contacted us. We also do not share, sell, or disclose your email or message contents to any third party, unless it is necessary to fulfill your request or required by law. For example, if your inquiry requires us to coordinate with a specific partner or service provider, we would do so only with your permission or as necessary, and we would ensure any such partner also keeps your information confidential.

We do not store your personal information from emails longer than needed. Once your inquiry is resolved, we will retain the correspondence only for our records and to comply with any legal or administrative requirements. We will not use your information for any unrelated purposes.

If you use the demo-request form on this site, your entries (name, email address and message) are sent from our web server to our mailbox through our email hosting provider, Hetzner Online GmbH (Germany), which processes them on our behalf solely to deliver the message. If the form cannot reach our server, your mail application opens instead and the message is sent directly by you.

6. Your Rights Under US Privacy Laws

We respect your rights to privacy and strive to comply with applicable U.S. privacy laws. Depending on where you live, especially if you are a resident of California or certain other states, you may have specific legal rights regarding your personal information. This section describes those rights and how you can exercise them.

California Residents (CCPA): If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) (as amended by the CPRA) regarding personal information we may have about you. These include the right to:

Know what personal information is collected about you: You can request that we disclose the categories and specific pieces of personal information we have collected about you, as well as the categories of sources of that information, the business purpose for collecting it, and any categories of third parties with whom we share it.
Request deletion of your personal information: You can ask us to delete personal information we have collected from you (with certain exceptions allowed by law, such as if the information is necessary to complete a transaction or comply with a legal obligation).
Opt-Out of the sale of personal information: You have the right to direct us not to sell your personal information to third parties. Note: We do not sell personal information, and we have no intention of doing so. Therefore, while this right is provided by law, it is not applicable in our case because we do not engage in selling user data.
Non-discrimination: We will not deny you services, charge you different prices, or provide a different level of service just because you exercised your privacy rights. In other words, we will not discriminate against you for exercising any CCPA rights.

To exercise any of your California privacy rights, you or an authorized agent can contact us at info@methuselahfoundation.org with your request. We may need to verify your identity (for instance, by confirming information like your email address or other details) before fulfilling certain requests, to ensure we protect your data from unauthorized access. We will respond to your request within the timeframe required by the CCPA (generally within 45 days).

Virginia Residents (VCDPA): If you are a Virginia resident, the Virginia Consumer Data Protection Act (VCDPA) provides you with similar rights concerning your personal data. These rights include the ability to:

Confirm and access your data: You can ask whether we are processing your personal data and request to access that data.
Correct inaccuracies: If any personal information we hold about you is incorrect or outdated, you can request that we correct it.
Delete your data: You can request deletion of personal data that you have provided to us or that we have obtained about you.
Obtain a copy of your data: You have the right to get a copy of the personal data you provided to us, in a portable format (to the extent technically feasible), so you can transfer it to another service if needed.
Opt-Out of certain processing: You can opt out of the processing of your personal data for purposes of targeted advertising, the sale of personal data, or certain types of profiling. Note: We do not engage in targeted advertising or sell personal data, nor do we use profiling to make legally significant decisions about you.

If you wish to exercise any of these Virginia rights, please contact us at info@methuselahfoundation.org with your request. As with California requests, we will need to verify your identity and will respond within 45 days as required by law. Virginia law also allows you to appeal a decision if you feel we have not adequately addressed your request; if needed, we will provide you with information on how to make such an appeal.

Other State Privacy Laws: Several other U.S. states (such as Colorado, Connecticut, Utah, and others) have enacted or are enacting privacy laws that may provide residents with similar rights over their personal data. We intend to comply with all applicable state privacy laws. If you are a resident of any state that grants you rights to access, delete, or control your personal information, you may contact us to exercise those rights as well. Even if you are not in one of the states with specific laws, we will do our best to honor your privacy requests in good faith.

How to Exercise Your Rights: To make any privacy-related request, simply send an email to info@methuselahfoundation.org specifying your request (for example, “CCPA Data Access Request” or “Request to Delete My Personal Data”). Please include enough information for us to verify your identity and locate your information (if any). We take your privacy seriously, so we will only fulfill requests when we are confident the requester is entitled to receive the information. Once verified, we will respond and act on your request within the timeframe required by applicable law. There is no charge for making a privacy request, though if you make repeated or excessive requests, the law allows us to charge a reasonable fee or refuse the request in some cases.

7. Data Security & Storage

We take data security seriously and have implemented reasonable measures to protect any personal information we hold. These measures are designed to prevent unauthorized access, disclosure, alteration, or destruction of your data. For example, we use technical safeguards (such as secure servers, encryption, and firewall protection) and organizational measures (such as limiting access to personal data to authorized personnel only) to secure information. While we strive to protect your data, please understand that no website or internet transmission is completely secure. We cannot guarantee absolute security of information, but we follow industry best practices to minimize risks.

Data Storage and Retention: We only keep personal information for as long as it is necessary to fulfill the purposes for which it was collected, as described in this policy, or as required by applicable laws and regulations. For instance, if you email us with a question, we will use your information to respond and then retain that correspondence for a period of time in our email archives. We will not keep it longer than needed unless required for legal reasons (such as compliance with record-keeping laws or resolving any disputes).

When personal information is no longer required, we will delete it or anonymize it so that it can no longer be associated with you. Our criteria for retaining data may include considerations such as: the nature of the data, the purpose for which it was collected, our legal or contractual obligations, and the expectation or requirements of the individuals it pertains to. If you would like us to delete any personal information we have about you, you may request deletion as described in the “Your Rights” section above, and we will honor such requests in accordance with law.

8. Changes to This Privacy Policy

We may update or change this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other reasons. When we make changes, we will post the updated policy on this page and update the “Last Updated” date at the top of the policy. Any changes will become effective when the revised Privacy Policy is posted on our website.

If the changes are significant, we may provide a more prominent notice or seek your consent where required by law. However, we encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

Your continued use of morrb.com after any changes to this Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any updates or modifications, you should stop using the site and contact us if you have concerns.