Privacy
Draft outline
What this policy covers
This outline describes how the site handles information. It must be finalized against the production configuration and applicable law before launch.
Information collected automatically
The MVP is a static site with no third-party analytics or trackers in the initial render. Standard server request logs may exist at the hosting layer.
Search-query privacy
Site search runs in your browser using a prebuilt index. Search terms are placed in the page URL only so results are shareable; they are not sent to an analytics service.
Cookies and local storage
The MVP does not set advertising or analytics cookies. Any functional storage will be documented here.
Analytics
No analytics are enabled by default. Any future privacy-respecting analytics will require review and, where applicable, consent.
Contact and correction forms
The MVP does not collect symptoms, records, or sensitive health information. Any future contact form will be reviewed for privacy, security, consent, and retention first.
External hospital and doctor websites
Official provider links point to third-party sites with their own policies. We are not responsible for their content or privacy practices.
Data retention
To be documented against the production configuration.
Data processors
To be documented against the production configuration.
International transfers
To be documented against the production configuration.
Your choices and rights
To be documented against applicable law.
Children's privacy
The site is general health information and is not directed at children.
Security
We use standard transport security and minimize data collection.
Policy changes
Material changes will be dated and summarized here.
How to contact us
Use the contact page. Do not send sensitive medical information.