Your data stays with you
What this site stores, what reaches our server, and why — written from what the code actually does.
Last updated
1. Summary
We have no user accounts, no advertising, no analytics or tracking cookies, no third-party embeds and no tracking pixels. We do not sell or share personal data, or use it for advertising or profiling.
Blood-test files and pack photos are processed only in your browser and are never sent to us. Your medicines list is kept only on your device. The one exception is the optional recall and shortage check, which sends only product codes, and only if you expressly agree.
2. Who is responsible for your data
The controller of personal data is the individual named in the Legal notice, the private individual who runs the site. For anything about your data: the address given in the Legal notice. We are not required to appoint a data protection officer and have not appointed one.
3. Technical data when you visit
On every visit, our hosting provider receives and logs the technical data needed to deliver the pages: IP address, date and time, the address of the page requested, and browser and device information. The page address can contain what you searched for (for example, a medicine name).
Purpose: delivering the site, security, preventing abuse and fixing faults. Legal basis: legitimate interests (GDPR Art. 6(1)(f)). We do not use these logs to identify or profile you and do not combine them with other data. They are kept for a short period set by the hosting provider for security purposes, and then deleted.
4. The optional recall and shortage check
If you turn on checking in My medicines, the product codes of your saved products are sent to our server, checked against public US FDA notices, and the result is returned. No name, account or other data about you is sent.
Because a list of medicines can reveal information about health, this happens only with your explicit consent (GDPR Art. 6(1)(a) and Art. 9(2)(a)). The codes are processed only to answer the request and are not stored by us. You can withdraw consent at any time with one click; withdrawal does not affect processing before it.
5. Data that stays on your device
Files you open in the blood-test reader and photos you scan are processed entirely in your browser and never sent to us.
Some features store data on your device — only when you use them (the list is below). That data does not reach us. It is strictly necessary for a service you asked for, which is why the site does not ask for cookie consent. You can delete it at any time by clearing this site’s data in your browser.
6. When you write to us
If you write to us through the contact form or by email, we process your email address, your name (if you give it), your organisation (for partnerships), the page address (for a report) and your message, in order to reply (legitimate interests, GDPR Art. 6(1)(f)). The site does not store messages in a database: the form sends them as an email to our inbox through the email provider Resend, Inc. (USA), which acts as our processor. We keep the correspondence as long as needed to deal with your query, and then delete it.
Please do not send us health information about yourself. If you do, we use it only to reply and delete it with the correspondence.
7. Requests to public sources
Our server fetches public information from official sources (for example the US FDA and the US National Library of Medicine). Those requests contain no personal data about you.
8. What we do not do
We do not use analytics or advertising cookies, browser fingerprinting, social media buttons or third-party embedded content. We do not sell or “share” personal information as those terms are defined in US state privacy laws. We make no automated decisions with legal or similarly significant effects on you. We honour the Global Privacy Control signal by not carrying out any of the activities it is meant to opt you out of.
9. Recipients and transfers
Technical data is processed by our hosting provider, and contact-form messages by Resend, Inc., on our behalf as processors. We may disclose data where the law requires it. These providers may process data outside your country, including in the United States; where required, transfers rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision.
10. Your rights
Depending on the law that applies to you, you have the right to access, correct, erase, restrict and port your data, to object to processing and to withdraw consent, and the right to complain to a supervisory authority — in Bulgaria the Commission for Personal Data Protection (www.cpdp.bg), or the data protection authority of your own EU country. If you live in a US state with a privacy law (such as California), you have the rights to know, delete and correct, and to opt out of sale or sharing — we do not sell or share data.
To exercise a right, email the address given in the Legal notice. We will respond within the legal time limit (one month under the GDPR). Because we hold very little data, most requests can be met by clearing this site’s data in your browser.
11. Consumer health data
For the purposes of consumer health data laws (such as Washington’s My Health My Data Act): we do not collect or keep such data, except product codes in the optional check, which are processed transiently with your consent, and searches that may appear in the hosting provider’s technical logs. We share them with no one except the hosting provider as a processor, and we never sell them.
12. Children
The site is not directed at children under 16, and we do not knowingly collect their data.
13. Security
We use encrypted connections (HTTPS), keep no database of personal data, and limit processing to what is necessary. No system is perfectly secure; holding as little data as possible is the best protection.
14. Changes
We may update this policy. The date of the last update is shown at the top of this page, and significant changes will be noted on the site.
15. Contact
Privacy questions: the address given in the Legal notice.
Everything stored on your device
| Name | Type | When | Why | Kept |
|---|---|---|---|---|
| mc-locale | cookie | Only when you accept or dismiss the language suggestion | To remember that choice | 1 year |
| mediclarum:motion | localStorage | Only when you press “Pause motion” | To keep animations paused | Until you clear it |
| mc-my-medicines | localStorage | Only when you save a medicine | Your list, on your device | Until you remove it |
| mc-my-medicines-consent | localStorage | Only when you agree to have your list checked | To remember that agreement | Until you turn checking off |
| mc-label-seen | localStorage | Only for medicines you saved | To tell you when their official label changes | Until you clear it |
| mc-visit-bloodwork | sessionStorage | Only when you choose “Add to visit summary” | To hand your results to the visit summary | Until the tab is closed |
Each of these is created only by something you do, which is why the site asks for no cookie consent. There are no analytics or advertising cookies.