The naltrexone launch list is open — be first to hear
Privacy Policy

What we collect, and what we don't.

The first version of Clero keeps data collection narrow: waitlist, contact form, and privacy-respecting first-party analytics with a one-click opt-out. Joining the naltrexone launch waitlist is not clinical intake.

Clero Health collects very little personal data. Right now, that means a waitlist form, a contact form, and privacy-respecting first-party analytics you can switch off below. Even though we are planning a naltrexone option, this site does not collect treatment information today.

What we collect

  • Launch list (waitlist): your email address and one optional category from a short fixed list. No free-text intake on the waitlist form.
  • Contact form: your email and your message. The message text is stored separately from the waitlist and is automatically deleted on a daily 90-day rolling window.
  • Analytics: anonymous page-view counts, launch-list CTA clicks, launch-list form views/submissions, article scroll-to-bottom events, and masked session replay via PostHog. These run by default; you can opt out below and we stop collecting from your browser. No third-party trackers, no autocapture, no Meta Pixel, no Google Analytics. Form contents are never sent to analytics, page text and element attributes are masked in replay, and URL query strings are stripped before analytics events are sent.
  • Homepage design experiment: we sometimes compare homepage layouts to see which explains Clero better. We set one first-party cookie (clero_visitor_v1, a random ID, kept for 180 days) on your first visit so the server shows you the same layout on every visit. The ID is random, is never linked to your email, and is not used for advertising. Assignment happens on our server via Statsig; no Statsig code runs in your browser.
  • Attribution: if you arrive with UTM parameters (e.g. ?utm_source=reddit), we capture those so we know which channel brought you in.

Cookies, exactly

  • The experiment cookie: clero_visitor_v1, described above. First-party, HttpOnly, random ID, 180 days.
  • PostHog's first-party analytics cookie and local storage, used to tell returning visits apart. First-party only — nothing is shared with ad networks.
  • If you opt out of analytics: your opt-out choice is stored in this browser so it sticks, and PostHog stops collecting. The experiment cookie is separate and remains (it never reaches analytics).

Opt out of analytics

One click, effective immediately in this browser, no account needed. If you use several browsers or devices, opt out in each.

Analytics on this browser: active

What we don't collect

  • No health data. No drinking history. No medication history.
  • No demographic data — no age, gender, race, location.
  • No payment information. The site does not sell or bill anything.
  • No third-party advertising or tracking cookies, ever.

When treatment enrolment opens

Enrolment is not open yet, and nothing in this section applies until it is. The current waitlist does not request a prescription, check eligibility, or create a clinician relationship. We will date the change on this page before any clinical information is collected.

When enrolment opens, medical care will be provided by licensed clinicians at an independent telehealth practice, not by Clero. The health questions you answer during enrolment will be sent to that practice so a clinician can evaluate you. That information is protected health information under HIPAA, and we will handleit as the practice's business associate: it may only be used to provide the service, never for our own marketing.

Alcohol treatment records get stronger protection than HIPAA alone. Records that identify you as someone who sought or received treatment for a substance use disorder are covered by a federal rule, 42 CFR Part 2. As a rule they cannot be disclosed without your written consent, and anyone who does receive them is barred from passing them on any further. That is stricter than HIPAA, and it applies on top of it.

Your medical record — clinical notes, prescriptions, and lab results — will be created and held by the treating practice, not by us. Its Notice of Privacy Practices explains your rights in that record: Notice of Privacy Practices.

Payments will be processed by our telehealth partner, the merchant of record, through Stripe. We will never see or store your full card number. Analytics and session replay will be switched off entirely on enrolment, checkout, and signed-in pages.

Washington consumer health data

Washington's My Health My Data Act gives Washington consumers specific rights over consumer health data that HIPAA does not cover. Those rights, and the disclosures the Act requires, are in our separate Consumer Health Data Privacy Policy.

Delete my data

Email privacy@clero.health with "delete my data" and we will permanently remove any matching waitlist row and contact-form messages within 14 days. We will email you to confirm.

If something goes wrong

If we discover unauthorized access to the waitlist or contact messages, we will (1) rotate keys immediately, (2) audit access logs, (3) email every affected person within 72 hours, and (4) notify state attorneys-general where required by CCPA / NY SHIELD / similar.

Changes

If we change what we collect, we update this page and date the change.

  • September 24, 2026 — Noted that alcohol treatment records carry federal 42 CFR Part 2 protection on top of HIPAA. Nothing about what we collect today has changed.
  • September 19, 2026— Added what will change when treatment enrolment opens (an independent practice as the treating provider, our role as its HIPAA business associate, and a link to that practice's Notice of Privacy Practices), and a separate Consumer Health Data Privacy Policy for Washington consumers. Nothing about what we collect today has changed.
  • August 8, 2026 — Removed the cookie banner. First-party analytics (PostHog) and the clero_visitor_v1 experiment cookie now run for all visitors by default, and this page gained a one-click analytics opt-out. A previously stored "declined" banner choice is no longer read; if you want analytics off, use the opt-out above.
  • July 19, 2026 — Documented the homepage design experiment and its clero_visitor_v1 cookie, and consent-gated it: the cookie was set only after accepting the banner. (Superseded by the August 8, 2026 change.)

Questions

Email privacy@clero.health. Someone reads it.