Your privacy.
Here’s what this first edition collects, and what happens when you use an external resource.
Browsing the resources
You can use the entire library without an account or email address. We do not ask for health information or assessments, and program progress is not sent to Sturdy. This version does not add advertising trackers or analytics cookies.
Library search and filters run in your browser. Your current selections appear in the page address, so they are included when you copy, share, or reload that link. They are not linked to your email signup or program checkmarks.
Your place in a program
If you choose to mark a week complete, we save those checkmarks only in this browser on this device. They help you find your place and do not measure exercise performance or readiness. You can uncheck weeks or reset the checkmarks from the program overview. Clearing this site’s browser data also removes them.
If browser storage is unavailable, checkmarks can work temporarily while the page stays open, and the program tells you that they will not be saved. All weeks remain available without saved progress.
If you join the email list
With your explicit consent, we save your email address, signup time, and a record of that consent in a Postgres database hosted by Neon. This first release collects interest; email delivery and address verification have not yet been connected. A successful signup means your interest was saved.
We do not sell the list. If email updates are introduced, they will include a way to unsubscribe. We will update this page when the email service is connected.
Protecting the signup form
Cloudflare receives requests to serve the website and protect its infrastructure. The signup endpoint temporarily uses a keyed hash derived from the connecting IP address to limit repeated submissions. The application does not store raw IP addresses in the subscriber database. These short-lived rate-limit records are cleaned up as the service is used.
Images, videos, and external links
Some resource images are loaded from their original providers, including YouTube. Your browser contacts those services to retrieve them. YouTube players are loaded only when you press play; the player uses YouTube’s privacy-enhanced embed domain. Once loaded, YouTube’s own privacy practices apply.
Links to creator websites, NHS resources, and research publications take you to those providers. Their privacy policies apply on their websites.
Keeping this accurate
This notice describes the current implementation. Before email delivery, new analytics, or other data features are introduced, the notice and consent experience need to reflect those services.
Last updated October 30, 2026.