Privacy Policy

This policy explains what information Faz LLC (“AllergyNest”, “we”, “us”) collects when you use allergynest.com, why we collect it, who processes it for us, and what you can ask us to do with it. It describes how the site works today, including pollen alert sign-ups, food allergen recall alert sign-ups and clinic accounts for doctors and their practices.

The short version

• Readers don’t need an account. We have no newsletter, comments or payments.
• You can sign up for pollen alert emails with your email address and one metro, and for food allergen recall alerts with your email address and the allergens you choose. We email alerts only to addresses that have been confirmed, and unsubscribing deletes the sign-up.
• Our pages set no cookies for readers. Clinic accounts, which doctors and practice staff use to manage a directory listing, use one cookie to keep them signed in.
• We count visits with Vercel Web Analytics, which identifies no one and shows us only totals. If your browser sends Global Privacy Control or Do Not Track, your visit isn’t counted.
• We run no ads and use no tracking pixels. Apart from Vercel’s visit counter, our pages load no outside scripts.
• “Use my location” finds the nearest metro on your device. Your location is never sent to us.
• We don’t sell or share personal information.
• Our hosting provider processes technical data about each request, such as your IP address, to deliver and protect the site. It keeps that data for a limited time.

Who we are

AllergyNest is operated by Faz LLC, a Wyoming limited liability company. This policy covers allergynest.com and the emails you send us. It doesn’t cover other websites we link to, such as the sources cited in our allergen guides. Those sites have their own policies.

You can reach us about anything in this policy at hello@allergynest.com.

What we collect

Request data processed by our host

Each time your browser asks for a page, our hosting provider, Vercel Inc., processes technical data about the request:

• your IP address
• your browser and device type
• the page you asked for, including any search text in the page address
• the referring page
• the time of the request

Vercel processes this data to deliver the site and protect it from abuse. It keeps these request logs for a limited time under its retention periods. We use them to run, fix and secure the site. We don’t use them to profile visitors or to infer anything about anyone’s health.

Visit counts (Vercel Web Analytics)

To see which pages people use, so we know what to improve, our pages run Vercel Web Analytics, a visit counter from our hosting provider. Its script is served from our own domain. For each page view it records:

• the page address, without any search text: we remove everything after the “?” (such as a ZIP code) before the count is sent
• the kind of page, such as a metro page or an allergen guide
• the website that linked to the page, if any
• a general location (country, region and city) that Vercel works out from your IP address
• your browser, operating system and type of device
• the time

Vercel doesn’t store your IP address with these counts, and it uses no cookies. To tell how many different people visited, it uses a code worked out from the request that it discards after 24 hours. The counts aren’t linked to you, and visits on different days or on other websites can’t be connected. We see only totals, such as how many people viewed a page or came from a given country.

Your visit isn’t counted if your browser sends a Global Privacy Control or “Do Not Track” signal.

Pollen alert sign-ups

You can sign up at Pollen alerts. If you sign up, we keep:

• your email address
• the metro you choose
• when you agreed to this policy, and which version you agreed to
• whether and when you confirmed your address
• when we last emailed you about your sign-up, and how many such emails we sent that day, so that no one can use our form to flood an inbox

We don’t ask for your name, your ZIP code or anything about your health. We send one email to confirm your address, and we send nothing else until you confirm. If you don’t confirm within 7 days, we delete your sign-up. We store the code in your confirm link only in a scrambled (hashed) form. Your settings link carries its own random code, so keep your emails to yourself.

Every email we send has a link to your settings, where you can change your metro or unsubscribe. Unsubscribing deletes your email address and metro from our database straight away. Email apps that offer one-click unsubscribe can use it too.

Our emails are sent by Resend, an email delivery service, which processes your email address and each email we send you on our behalf and keeps a record of its deliveries under its own retention periods. Our emails contain no tracking pixels and their links aren’t tracked, so we don’t know whether you opened an email or followed a link. The sign-up form and the pages for confirming and managing your sign-up set no cookies.

Because signing up for pollen alerts could suggest that you have a pollen allergy, we treat sign-ups as consumer health data. Our Consumer Health Data Privacy Policy explains what that means for you.

Recall alert sign-ups

You can sign up for emails about food allergen recalls at Recall alerts. This is separate from pollen alerts: each sign-up has its own confirmation and its own settings link. If you sign up, we keep:

• your email address
• the allergens you choose, or that you chose all nine major food allergens
• when you agreed to this policy, and which version you agreed to
• whether and when you confirmed your address
• when we last emailed you about your sign-up, and how many such emails we sent that day, so that no one can use our form to flood an inbox
• up to when we have checked recalls for you, so that you never get the same recall twice

We don’t ask for your name, your ZIP code or anything else about your health. We send one email to confirm your address, and we send nothing else until you confirm. If you don’t confirm within 7 days, we delete your sign-up. Recall alerts go only to confirmed addresses.

On a day that FDA posts a company’s announcement of a recall naming one of your allergens, we send you one email in the evening, US Eastern time, covering that day’s recalls. Each recall in it gives the product, the company, the reason as FDA gives it and the dates, with a link to the announcement on FDA’s website. On other days we send nothing.

Every email has a link to your settings, where you can change your allergens or unsubscribe. Unsubscribing deletes your email address and allergens from our database straight away. Email apps that offer one-click unsubscribe can use it too. These emails go through Resend, like our pollen alert emails, with no tracking pixels and no tracked links.

Because the allergens you choose could suggest that you, or someone you care for, has a food allergy, we treat recall alert sign-ups as consumer health data, collected only with your consent. Our Consumer Health Data Privacy Policy explains what that means for you.

Clinic accounts

Doctors listed in our allergist directory, and people who work at their practices, can create a clinic account to claim the doctor’s listing and add details such as languages and a booking link. Readers don’t need one. If you create a clinic account, we keep:

• your email address and name
• when you created the account and when you last signed in
• which version of our Directory Listing Terms you accepted, and when
• for each listing you claim: your role (the doctor, or someone at the practice), your job title, any note you add to help us confirm the claim, and whether and when we confirmed or declined it
• which account last changed a listing, and when

There is no password. You sign in with a link we email to you, which works once and expires after 15 minutes. Signing in sets one cookie that keeps you signed in for up to 30 days; our Cookie Policy describes it. We store the code in each sign-in link and each sign-in cookie only in a scrambled (hashed) form, and we delete used and expired sign-in links within a day.

To confirm a claim, we contact the practice, usually by calling a phone number in the public records and asking for you by name. We don’t look you up anywhere else.

The details you add to a listing, such as the practice’s phone number, website or a short description, are published on the doctor’s profile for anyone to see. Your name, email address, job title and notes are never published.

We email you only about your account: sign-in links, and messages about your claims and the details you submit. We never add clinic accounts to a mailing list, and we never sell or share them.

You can delete your account at any time from your account page, which deletes your email address, name, sign-ins and claims. The details you added stay on the listing, because they describe the doctor or practice, unless you ask us to remove them. We delete declined claims after 90 days, and accounts that haven’t signed in for two years.

Doctors in our directory

Our allergist directory publishes public professional records about doctors: name, credential, specialty, practice names, addresses and phone numbers, National Provider Identifier, the Medicare telehealth flag, and medical school and graduation year. They come from Medicare’s Doctors and Clinicians file and the national provider registry (NPPES), which the federal government publishes for anyone to use. How we list doctors explains the rules. Every listing has a “Report a problem” link, and we take down listings for doctors who have retired, moved away or aren’t allergists.

What you type in the search box

When you search for a city, metro, state or ZIP code, what you type is sent to our server as part of the page address (for example, /pollen/find?q=denver or /pollen/near-me?zip=77002) so we can find the matching or nearest metro. We match a ZIP code to a metro using Census data held on our own server; we don’t send it to anyone. We don’t store searches in our database, and we remove search text from our visit counts. Like every request, the address with your search text appears in our host’s request logs. When you follow a link from our pages, your browser tells the next site only that you came from allergynest.com, not which page or search.

“Use my location”

If you press “Use my location”, your browser first asks for your permission. If you allow it, the nearest metro is worked out on your device. Your location is never sent to us. Your browser then opens that metro’s page, or, if the nearest metro is far away, shows a link to it. When a metro page opens, that request is logged like any other.

Emails you send us

If you email hello@allergynest.com, we receive your email address, your name if you include it, and your message. We use them only to reply to you and to keep a record of the conversation. Our mailbox is hosted by Google Workspace, Google’s business email service, which processes your messages for us. We keep emails only as long as we need them for those purposes. Please don’t include health details we don’t need to answer you.

What we don’t collect

• No accounts for readers, and no passwords for anyone: clinic accounts sign in with an emailed link.
• No cookies set by our pages, apart from the sign-in cookie for clinic accounts, and no local storage.
• No advertising, tracking pixels, social media pixels or session replay, and no analytics that identify visitors.
• No payments or payment details.
• No health questionnaires, comments or chat. Answers to our symptom tools, Cold or allergies? and the allergy symptom quiz, stay in your browser: we never receive them.

Google pollen data

Our pollen values come from the Google Pollen API, part of Google Maps Platform. Our servers request values for a fixed list of metro locations on a schedule. These requests carry no information about you or any other visitor. When you view a page, your browser doesn’t contact Google or any other third party: apart from our host’s visit counter, our pages load no outside scripts, and our fonts and the counter are served from our own domain.

AllergyNest includes Google Maps content: the pollen values on our pages and the figures we calculate from them. Use of Google Maps features and content is subject to the then-current Google Maps End User Additional Terms of Service and the Google Privacy Policy. Our own use of Google’s data is governed by the Google Maps Platform Terms of Service.

How we use information

We use the information described above only to:

• deliver the pages you ask for
• count visits, to see which pages people use and what to improve
• find the metro that matches your search
• keep the site secure and working, and fix problems
• reply to your emails and keep a record of the conversation
• send the pollen or recall alert emails you signed up for, and the emails needed to confirm and manage your sign-up
• run clinic accounts: sign you in, confirm your claims, publish the details you add to a listing, and email you about your account
• meet our legal obligations

We don’t build profiles of visitors. We don’t infer anything about anyone’s health. We don’t use personal information for advertising, and we don’t use it to train AI models.

Who we share it with

We share personal information only:

• with service providers that process it for us, listed below
• with authorities, when the law requires us to
• with a new owner, if AllergyNest is sold or transferred. This policy would continue to apply to the information we hold.

Provider	What it does for us	Personal information it handles
Vercel Inc.	Hosts the site and counts visits	Request data and visit counts, as described above
Google LLC (Google Workspace)	Hosts our mailbox	Emails you send us
Neon	Runs our database	Pollen and recall alert sign-ups and clinic accounts. The database also holds the list of metros, pollen values, recalls and the details added to listings.
Resend	Sends our emails	Email addresses of people who sign up for pollen or recall alerts or have a clinic account, and the emails we send them
GitHub	Hosts our code	None. It receives no visitor data.
GoDaddy	Registers our domain name	None. It receives no visitor data.

Google supplies our pollen values, and our requests for them carry no information about visitors, as explained above.

No sale, no sharing, no targeted advertising

We don’t sell personal information. We don’t share it for cross-context behavioral advertising, we don’t use it for targeted advertising, and we don’t use it for profiling. We don’t give it to anyone for their own marketing. Our pollen and recall alert lists and our clinic accounts will never be sold, shared with sponsors or uploaded to advertising platforms. We don’t use or disclose sensitive personal information beyond what is needed to provide the site.

Global Privacy Control. We honor Global Privacy Control (GPC) signals. We don’t sell or share personal information or use it for targeted advertising, so there is nothing of that kind for a GPC signal to switch off. We go further: if your browser sends a GPC signal, your visit isn’t counted in our visit counts. If we ever add advertising, we will treat a GPC signal as an opt-out, and the controls will be on Your Privacy Choices.

Do Not Track. We don’t track visitors across websites. If your browser sends a “Do Not Track” signal, your visit isn’t counted in our visit counts either.

Health information

We don’t ask for health information. Under some state laws, a record linking your IP address to a page about an allergy could count as consumer health data, and so could a pollen or recall alert sign-up, which we collect only with your consent. Our visit counts don’t keep your IP address or link a page view to you. Our Consumer Health Data Privacy Policy explains how we handle it and the rights you have.

Your rights

Wherever you live in the United States, you have these rights, whether or not your state’s law requires us to offer them:

• Know and access. Ask whether we hold personal information about you, and see it.
• Get a copy. Receive a copy of it in a format you can use elsewhere.
• Correct. Ask us to fix information that is wrong.
• Delete. Ask us to delete it.
• Opt out. Opt out of the sale or sharing of your personal information, targeted advertising and profiling. We do none of these, so you are already opted out.
• Equal treatment. We won’t treat you differently for using any of these rights.
• Use an authorized agent. Someone you authorize can make a request for you. We may ask for proof that you gave them permission, and we may confirm the request with you.

We hold very little personal information. In most cases, the only information we could find about you is email you have sent us, your pollen or recall alert sign-up or clinic account if you have one, and our host’s request logs. You can see, change or delete your sign-up yourself from the settings link in any of our emails, and your clinic account from your account page. Those logs are held by our host and expire on their own after a limited time; we can’t edit or delete individual entries in them.

How to make a request

Email hello@allergynest.com with the subject “Privacy request” and tell us what you would like us to do. We may need to confirm that the request came from you. Usually we do this through the email address you write from. We won’t ask for more information than we need for that, and we will use what you give us only to handle your request.

How long it takes

We answer within 45 days. If we need more time, we may extend this once, by up to 45 more days. If we do, we will tell you within the first 45 days and explain why.

Appeals

If we decline all or part of your request, we will explain why. You can appeal by replying to our decision with the word “Appeal”. We will answer your appeal in writing within 45 days and explain what we decided and why. If we deny your appeal, you may contact your state attorney general.

California

California residents have the rights described above. In the last 12 months:

Category of personal information	Collected?	Details
Identifiers	Yes	IP addresses, in our host’s request logs. Email addresses and names, if you email us. Email addresses of people who sign up for pollen or recall alerts. Email addresses and names of people with clinic accounts.
Professional or employment-related information	Yes	For clinic accounts only: your role at a practice and your job title.
Internet or other electronic network activity	Yes	Browser and device type, pages requested (including search text in the address), referring page and time, in our host’s request logs. Our visit counts record the same kinds of details without search text, IP address or any lasting identifier.
Precise geolocation	No	“Use my location” works on your device. We never receive your location. For our visit counts, Vercel works out a general area (country, region and city) from your IP address; we see only totals.
Inferences	No	We don’t draw inferences about anyone or build profiles.
Sensitive personal information	Not used beyond providing the site	We don’t ask for it. If you put any in an email, we use it only to reply and keep a record of the conversation. A pollen alert sign-up could suggest a pollen allergy, and the allergens chosen for recall alerts could suggest a food allergy; we use them only to send the emails you asked for.
Commercial, financial, biometric and other categories	No	We don’t ask for them. We have no payments.

• Sources: your browser, when it requests our pages; you, when you email us, sign up for pollen or recall alerts or use a clinic account; and the practice, when we contact it to confirm a claim.
• Purposes: the uses listed in “How we use information”.
• Disclosed to: our service providers (our hosting provider, Vercel; our mailbox provider, Google Workspace; our database provider, Neon; and our email delivery service, Resend), for those purposes.
• Sold or shared: none. We have not sold or shared personal information in the last 12 months, and we don’t sell or share the personal information of anyone, including people under 16.
• How long we keep it: request logs for the limited time set by Vercel’s retention periods; visit counts under Vercel’s retention periods (our reports cover up to 12 months); emails only as long as we need them to reply and keep a record of the conversation; pollen and recall alert sign-ups until you unsubscribe, or 7 days if never confirmed; clinic accounts until you delete them, or two years after the last sign-in; declined claims for 90 days; sign-in links for up to a day.
• Financial incentives: none.

Children

AllergyNest is written for adults. It is not directed to children under 13, and we don’t knowingly collect personal information from children under 13. If you think a child under 13 has sent us personal information, email hello@allergynest.com and we will delete it.

Security

The main way we protect personal information is by holding very little of it. There are no passwords, and the only personal information in our database is alert sign-ups, an email address with a metro or a list of food allergens each, and clinic accounts. Codes in sign-in links, confirm links and sign-in cookies are stored only in hashed form. No website or mailbox is perfectly secure, so we can’t promise that information will never be exposed. To report a security problem, see our Security page.

Where information is processed

AllergyNest is hosted in the United States. People who work on AllergyNest may access information from outside the United States.

New features

Before we add reader accounts, advertising, payments, error monitoring or any other analytics, we will update this policy to say what changes. For material changes, we will post a notice on the site before they take effect.

Some commitments are already fixed:

• Pollen alert emails go only to people who sign up and confirm their address. Every email includes a way to unsubscribe. The list will never be sold, shared with sponsors or uploaded to advertising platforms.
• Advertising, if we add it, will never come with social media pixels. Before adding any advertising cookies or tags, we will update our policies, give you the choices the law requires, and treat a GPC signal as an opt-out.
• Our allergist directory doesn’t book appointments or pass on patient details. You contact clinics directly. Claiming a listing, or paying for anything, never changes the order of our lists.
• Health data. If we ever collect consumer health data, we will collect only what is needed to provide what you asked for, ask for consent where the law requires, and update our Consumer Health Data Privacy Policy first.

Changes to this policy

28 October 2026: ahead of opening food allergen recall alerts, we added “Recall alert sign-ups”, which explains what a sign-up keeps, when we email and how to unsubscribe, and we said in the summary that alert emails go only to confirmed addresses. We updated our uses, our service providers, the California table and “Security” to match.

19 October 2026: ahead of opening clinic accounts, we added “Clinic accounts”, which explains what an account keeps, how we confirm a claim and how to delete an account, and “Doctors in our directory”, which explains the public records the directory publishes. We updated the summary, our uses, our service providers, the California table and “Security” to match, and we added our new Directory Listing Terms.

17 October 2026: we added “Pollen alert sign-ups” above and opened sign-ups. They keep only your email address and one metro, our emails are sent through Resend, and unsubscribing deletes your sign-up. We also added Neon and Resend to the list of service providers, and noted in “What we don’t collect” that answers to our symptom tools stay in your browser.

15 October 2026: we started counting visits with Vercel Web Analytics, as described in “Visit counts” above.

When we change this policy, we will update the “Last updated” date on this page. For material changes, we will post a notice on the site before they take effect. All our policies are listed on our policies page.

Contact us

Write to us at hello@allergynest.com. For privacy requests, please use the subject “Privacy request”.