Privacy Policy

Summary

• We do not require accounts to use the risk-check tool.
• We do not store the answers you enter into the questionnaire on our servers.
• Your answers stay in your browser's session storage only for the duration of your visit and are cleared when you close the tab.
• Optional ZIP/country is sent to ClinicalTrials.gov to find nearby trials; it is not stored by us.
• This is a public health educational site. We are not a HIPAA covered entity.

Information processed by the Site

Questionnaire answers (age, sex assigned at birth, height, weight, smoking, exercise, family history, conditions): processed in your browser to compute your report. Stored only in your browser's session storage; never transmitted to or stored by the NCD Foundation.

Location (optional ZIP and country): if provided, transmitted in the query string of requests to the public ClinicalTrials.gov API to filter trials by location. Not stored by us.

Admin accounts: only administrators who manage screening rules create accounts. For administrators, we store an email address and authentication metadata via our authentication provider.

Server logs: like most websites, our hosting provider may automatically log standard request metadata (IP address, user agent, timestamp, requested URL) for security and reliability. These logs are retained for a limited period and are not used to identify individual visitors.

Sensitive health information

The answers you enter may qualify as sensitive personal information under laws such as the EU GDPR, the UK GDPR, and US state privacy laws (e.g., California CPRA, Washington My Health My Data Act). Because we process this information entirely in your browser and do not transmit or store it, we limit our exposure — but you should still take care when entering health information on any shared device.

Third-party services

• ClinicalTrials.gov (U.S. National Library of Medicine) — receives trial search queries including any optional location you enter.
• Hosting and authentication providers — receive standard request metadata and admin authentication data.

Each third party has its own privacy practices. Counsel should list and link the specific providers used in production.

Cookies and tracking

The Site uses only essential storage required to operate the questionnaire and admin sign-in. We do not currently use advertising cookies. If analytics are added later, this policy and a cookie/consent notice will be updated accordingly.

Your rights

Depending on where you live, you may have rights to access, correct, delete, or port personal information we hold about you, and to object to or restrict certain processing. Because we do not store questionnaire answers, most rights apply only to admin accounts. Contact us using the address below to exercise your rights.

Children

The Site is not directed to children under 18 and we do not knowingly collect information from them.

Changes

We may update this policy. Material changes will be reflected on this page.

Contact

Privacy questions: [insert contact email].