Privacy Policy

Last Updated: February 5, 2026

BrainFlow (“we,” “us,” or “our”) operates the website BrainFlow.co (the “Site”). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our Site, subscribe to our newsletter, or interact with our content and services.

We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and other applicable U.S. state privacy laws.

By accessing or using our Site, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, please discontinue use of our Site.

1. Information We Collect

1.1 Information You Provide Directly

We may collect personal information that you voluntarily provide when you:

• Subscribe to our email newsletter (e.g., name, email address)
• Submit a contact form or send us an email
• Leave comments on our content
• Participate in surveys, promotions, or giveaways

1.2 Information Collected Automatically

When you visit our Site, certain information is collected automatically through cookies and similar technologies, including:

• IP address and approximate geolocation
• Browser type, version, and language preferences
• Device type, operating system, and screen resolution
• Pages visited, time spent on pages, referring URLs, and click behavior
• Scroll depth, session duration, and interaction data

1.3 Information Collected by Third Parties

Our Site uses third-party services that may independently collect information about you, including:

• Mediavine / Journey by Mediavine (advertising management and delivery)
• Google Analytics (website analytics and traffic measurement)
• Google Ad Manager (ad serving)
• Affiliate networks (Amazon Associates and other affiliate partners)
• Social media platforms (via embedded content, share buttons, and tracking pixels)
• Email marketing providers (for newsletter delivery and analytics)
• ConsentManager (consent management platform for privacy compliance)

2. How We Use Your Information

We use the information we collect for the following purposes:

• To operate, maintain, and improve our Site and content
• To deliver and personalize advertising through our ad management partners
• To send newsletters, updates, and promotional communications (with your consent)
• To analyze traffic patterns and user behavior to improve user experience
• To respond to your inquiries and communications
• To detect, prevent, and address technical issues and security threats
• To comply with legal obligations and enforce our terms
• To facilitate affiliate marketing partnerships and track referral commissions

3. Advertising and Ad Partners

We use Mediavine (Journey by Mediavine) as our advertising management partner. Mediavine and its advertising partners may collect and use data including IP addresses, device identifiers, browsing behavior, ad viewing history, and approximate geolocation to serve personalized advertisements based on your interests.

If you opt out of personalized advertising, you will still see ads, but they will not be tailored to your interests and may be less relevant.

Our Site participates in programmatic advertising, which involves the automated buying and selling of ad impressions through real-time bidding. Multiple demand-side platforms, supply-side platforms, ad exchanges, and data management platforms may process your data as part of this ecosystem. A full list of registered vendors is available through the consent management interface displayed on our Site.

Note: Additional advertising partner disclosures may be provided below by our ad management platform.

4. Affiliate Marketing Disclosure

BrainFlow.co participates in affiliate marketing programs, which means we may earn commissions on purchases made through links on our Site. Our affiliate partners may use cookies and tracking technologies to attribute sales and track referral activity. Our affiliate partners include, but are not limited to, the Amazon Associates Program and other supplement, health, and wellness brand affiliate programs.

These affiliate partners may collect information such as your IP address, browser information, and purchase activity when you click on affiliate links. This data is governed by each partner’s respective privacy policy. For full details, please see our Affiliate Disclosure page.

5. Cookies and Tracking Technologies

5.1 What Are Cookies

Cookies are small text files stored on your device when you visit a website. They serve various purposes including remembering your preferences, enabling site functionality, and collecting analytics data.

5.2 Types of Cookies We Use

Essential Cookies: Required for the Site to function properly. These include cookies necessary for security, consent management, and basic site operations.

Analytics Cookies: Used to collect information about how visitors use our Site, including which pages are most popular and how visitors navigate between pages. We use Google Analytics for this purpose.

Advertising Cookies: Used by Mediavine and its advertising partners to deliver relevant advertisements and measure ad performance. These cookies track your browsing activity across websites to build a profile of your interests.

Functionality Cookies: Used to remember choices you make (such as consent preferences) and provide enhanced, personalized features.

Affiliate Tracking Cookies: Used by our affiliate partners to track referrals and attribute purchases to our Site.

5.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. However, blocking certain cookies may affect the functionality of our Site. You can also manage your advertising preferences through the consent management banner displayed on our Site, or by clicking the “Change Privacy Settings” link in our Site footer.

Additionally, you can opt out of interest-based advertising through:

• The Digital Advertising Alliance (DAA) at optout.aboutads.info
• The Network Advertising Initiative (NAI) at optout.networkadvertising.org
• The European Interactive Digital Advertising Alliance (EDAA) at youronlinechoices.eu

6. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, we process your personal data under the following legal bases:

Consent: Where you have given clear, affirmative consent for us to process your personal data for a specific purpose, such as subscribing to our newsletter or consenting to personalized advertising through our CMP.

Legitimate Interests: Where processing is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. This includes operating and improving our Site, ensuring security, and conducting analytics.

Contractual Necessity: Where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.

Legal Obligation: Where processing is necessary for us to comply with a legal obligation.

7. Your Privacy Rights

7.1 Rights Under GDPR (EEA, UK, and Switzerland Residents)

If you are a resident of the EEA, UK, or Switzerland, you have the following rights:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data under certain circumstances.
• Right to Restrict Processing: Request that we limit the processing of your personal data.
• Right to Data Portability: Receive your personal data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Withdraw your consent at any time where we rely on consent as our legal basis.

To exercise these rights, please contact us at admin@brainflow.co. You also have the right to lodge a complaint with your local supervisory authority.

7.2 Rights Under CCPA / CPRA (California Residents)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete: Request deletion of personal information we have collected from you.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt Out of Sale/Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Personal Information: If applicable, you may limit our use of sensitive personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To opt out of the sale or sharing of your personal information for targeted advertising purposes, use the “Do Not Sell or Share My Personal Information” link available in our Site footer or manage your preferences through the consent management banner. You may also submit a request by emailing admin@brainflow.co.

We do not sell personal information in the traditional sense, but the use of certain advertising cookies may constitute a “sale” or “sharing” under the CCPA/CPRA.

7.3 Rights Under Other U.S. State Privacy Laws

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCDPA), Montana (MTCDPA), Florida (FDBR), and other states with applicable privacy legislation may have similar rights, including:

• The right to access, correct, and delete personal data
• The right to opt out of targeted advertising, sale of personal data, and profiling
• The right to data portability
• The right to appeal a denial of a privacy request

Our Consent Management Platform automatically detects your location and provides the appropriate privacy controls and opt-out mechanisms required by your state’s laws. You may also exercise your rights by emailing admin@brainflow.co.

7.4 Universal Opt-Out Mechanisms

We honor Global Privacy Control (GPC) and other recognized Universal Opt-Out Mechanism (UOOM) browser signals as valid opt-out requests where required by applicable law. If your browser sends a GPC signal, we will treat it as a request to opt out of the sale and sharing of your personal information.

8. Data Sharing and Disclosure

We may share your personal information with the following categories of recipients:

• Advertising Partners: Mediavine and its network of programmatic advertising vendors, for the purpose of serving and optimizing digital advertisements.
• Analytics Providers: Google Analytics and similar services, for website performance analysis.
• Affiliate Partners: For tracking referrals and attributing purchases.
• Email Service Providers: For sending newsletters and marketing communications.
• Consent Management Providers: ConsentManager, for managing your privacy preferences.
• Legal and Regulatory: When required by law, subpoena, or to protect our legal rights.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.

We do not sell your personal information to third parties for their own independent marketing purposes outside of the programmatic advertising ecosystem described above.

9. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specifically:

• Newsletter subscriber data is retained until you unsubscribe or request deletion.
• Analytics data is retained according to our analytics provider’s default retention settings (currently 14 months for Google Analytics).
• Advertising-related data is retained according to our ad partners’ respective policies.
• Consent records are retained for the duration required by applicable law.

10. Data Security

We implement reasonable administrative, technical, and physical security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include SSL/TLS encryption for data in transit, secure hosting infrastructure, and access controls.

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

11. International Data Transfers

Our Site is hosted in the United States. If you are accessing our Site from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States and other jurisdictions where our service providers operate. These countries may have data protection laws that differ from the laws of your country.

Where required by applicable law, we ensure that appropriate safeguards are in place for international data transfers, such as Standard Contractual Clauses (SCCs) approved by the European Commission.

12. Children’s Privacy

Our Site is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18 (or under 16 in the EEA). If we become aware that a child has provided us with personal information, we will take steps to delete such information promptly. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at admin@brainflow.co.

13. Do Not Track Signals

We honor Global Privacy Control (GPC) signals as described in Section 7.4. Beyond GPC compliance, there is currently no uniform standard for how websites should respond to browser Do Not Track (DNT) signals, and our Site does not currently respond to DNT signals beyond what is required by applicable law.

14. Third-Party Links

Our Site may contain links to third-party websites, products, or services that are not owned or controlled by us. This includes affiliate links, social media platforms, and advertiser landing pages. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policy of every site you visit.

15. Email Marketing and Communications

If you subscribe to our newsletter, we will send you periodic emails containing content updates, supplement and health information, and promotional offers. Each email will include an unsubscribe link that allows you to opt out of future marketing communications at any time.

We may use third-party email marketing platforms to manage our subscriber list and deliver emails. These platforms may collect data such as open rates, click-through rates, and device information for analytics purposes.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will update the “Last Updated” date at the top of this page and, where required by law, provide additional notice.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

BrainFlow
Website: https://brainflow.co
Email: admin@brainflow.co

For privacy-specific requests, including data access, deletion, or opt-out requests, please include “Privacy Request” in your subject line to ensure timely processing.