Plain English summary: We collect your email address only when you voluntarily give it to us. We use privacy-friendly analytics that don't track you across the web. We don't use cookies for advertising. We don't sell your data to anyone. You can unsubscribe or request deletion of your data at any time.
myHSAPath.com ("myHSAPath", "we", "us", or "our") is committed to protecting the privacy of our visitors and subscribers. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have over your data.
This policy applies to all information collected through our website at myhsapath.com, including our blog, comparison tools, calculators, eligibility quiz, and newsletter signup forms.
By using myHSAPath, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Site.
| Data type | When collected | Why |
|---|---|---|
| Email address | Newsletter signup, quiz email gate, lead magnet forms | To send you our newsletter and HSA content |
| Quiz responses | Am I Eligible? quiz (5 questions) | To show you your eligibility result — not stored on our servers |
| Calculator inputs | HSA Tax Savings Calculator | To compute your result — processed in your browser, not transmitted to us |
| Contact messages | If you email us directly | To respond to your inquiry |
Important: Quiz answers and calculator inputs are processed entirely in your browser using JavaScript. They are never sent to our servers or stored anywhere. We cannot see what you entered.
| Data type | Source | What it includes |
|---|---|---|
| Page views | Plausible Analytics | Which pages were visited, how long, referral source |
| Device type | Plausible Analytics | Mobile vs desktop, browser type, country (not city) |
| Referral source | Plausible Analytics | Which site or search engine referred you |
| Affiliate clicks | Affiliate network (Impact.com, CJ) | Which custodian links you clicked and whether you opened an account |
We do not collect: full IP addresses, device identifiers, precise location data, browsing history across other websites, or any sensitive personal information such as health data, financial account details, or Social Security numbers.
We use the information we collect for the following purposes:
We do not use your information for targeted advertising, sell it to data brokers, share it with insurance companies or financial institutions without your consent, or use it for any automated decision-making that affects you.
Good news: myHSAPath uses Plausible Analytics, which is a privacy-friendly analytics tool that does not use cookies and does not track visitors across websites or devices. We do not use Google Analytics, Facebook Pixel, or any other cookie-based tracking.
We use the following third-party services to operate myHSAPath. Each has its own privacy policy governing how it handles data:
Privacy-friendly, cookie-free website analytics. Aggregated data only — no personal information stored. GDPR compliant by design.
plausible.io/privacy →Newsletter platform that stores your email address and manages subscriptions and delivery. Based in the US.
beehiiv.com/privacy →Affiliate tracking network used to attribute referrals to HSA custodians. Tracks affiliate link clicks and conversions.
impact.com/privacy-policy →Affiliate tracking network for HSA Bank and other partners. Tracks referral clicks and conversions.
CJ privacy policy →Website hosting platform. Netlify may log basic server access data (IP addresses in server logs) as part of standard hosting operations.
netlify.com/privacy →Domain registration for myhsapath.com. Stores registrant contact information as required by ICANN regulations.
namecheap.com/privacy →We are not responsible for the privacy practices of these third-party services. We encourage you to review their privacy policies before using our site if you have concerns about any of them.
myHSAPath participates in affiliate marketing programs. When you click a link to an HSA custodian on our site, the following may occur:
We never see your HSA account details. When you open an account through our links, all account data goes directly to the custodian. We only receive a confirmation that a qualifying referral occurred — not your name, account number, or any financial details.
| Data type | Retention period | How to delete |
|---|---|---|
| Email address (newsletter) | Until you unsubscribe | Click unsubscribe in any email |
| Analytics data | Retained by Plausible per their policy | N/A — anonymized, not personal |
| Affiliate click data | Per affiliate network policy (typically 24 months) | Contact the affiliate network |
| Email correspondence | Up to 3 years for business records | Email privacy@myhsapath.com |
| Quiz / calculator inputs | Never stored — browser only | N/A — nothing to delete |
Depending on where you live, you may have the following rights regarding your personal data:
Request a copy of the personal data we hold about you.
Request that we correct inaccurate personal data we hold about you.
Request that we delete your personal data. For newsletter subscribers, unsubscribing handles this automatically.
Request your personal data in a portable, machine-readable format.
Object to processing of your personal data for direct marketing purposes.
Every newsletter email contains a one-click unsubscribe link. No confirmation required.
To exercise any of these rights, email us at privacy@myhsapath.com with "Privacy Request" in the subject line. We will respond within 30 days. We may need to verify your identity before processing certain requests.
myHSAPath is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13. HSA accounts require adult legal capacity to open, and our content is designed for adults managing their own health and financial decisions.
If you believe we have inadvertently collected information from a child under 13, please contact us immediately at privacy@myhsapath.com and we will delete it promptly.
myHSAPath is operated from Canada and primarily serves users in the United States. By using our site, your information may be transferred to, stored, and processed in Canada, the United States, or other countries where our service providers operate.
If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR). Our legal basis for processing your personal data is:
You have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.
As a Canadian-operated site, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA). We collect only the minimum personal information necessary and obtain meaningful consent before collecting email addresses. You have the right to access and correct your personal information held by us.
If you are a California resident, the California Consumer Privacy Act (CCPA) gives you specific rights regarding your personal information:
To exercise your California privacy rights, email privacy@myhsapath.com with "California Privacy Request" in the subject line.
We take reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
However, no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.
In the event of a data breach that affects your personal information, we will notify affected users as required by applicable law.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this page.
For significant changes, we will notify newsletter subscribers by email. Your continued use of myHSAPath after any changes constitutes your acceptance of the updated policy.
We encourage you to review this policy periodically. Previous versions are available upon request.
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: