Consumer health data privacy policy
Last updated 5 August 2026. This is a standalone policy, separate from our general privacy policy, as required by the Washington My Health My Data Act.
What consumer health data we collect
Categories of data, and their sources
- Health data collected directly from you: none. There is nowhere on this site to tell us anything about yourself.
- Health data inferred from your behaviour: none. Which pages you read could imply a health interest, which is why we run no analytics that identify individuals and no advertising trackers at all. Nothing derives an inference and nothing records one.
- Health data from third parties: none. We purchase no data and receive none.
How it is used and shared
There is nothing to use or share. We have no affiliates with access to consumer health data, no processors handling it, and no service providers receiving it, because none exists. If that ever changes, this policy will name each affiliate and processor specifically, in advance of the change, with separate and unbundled opt-in consent collected before any collection or any sharing.
Retention
Not applicable, as nothing is collected. Our standing intention is to not store consumer health data at all rather than to store it briefly.
Your rights
Under the Washington My Health My Data Act, and comparable provisions in Nevada and Connecticut, you have the right to confirm whether we collect, share or sell your consumer health data, to access it, to withdraw consent, and to have it deleted, including by anyone we shared it with.
We can answer any such request immediately: we hold nothing. You are welcome to ask anyway and receive that answer in writing. Contact us at the address in the site footer. We do not require you to create an account to make a request, and we will not discriminate against you for making one.
If this ever changes
Two features of this site are planned that would collect health data: a test-selection tool, and an optional way to report back a test result. Both are deliberately unbuilt. Neither will launch without this policy being rewritten first to name exactly what is collected, separate unbundled consents for collection and for sharing, a published retention schedule, and every affiliate named. Research use would require its own separate consent, because providing a service does not cover studying the people who used it.