Privacy policy

1. Scope

This policy applies to carecanon.com and the first-party services it controls. It does not govern a provider, pharmacy, DailyMed, affiliate network or other site you choose to visit through an external link.

2. Information involved

Information you do not have to provide

CareCanon currently has no account, patient intake, diagnosis form, treatment questionnaire or payment checkout. Do not send symptoms, diagnoses, prescriptions, medical records or other sensitive information to us by email.

Basic request and security data

Our hosting and security provider, Cloudflare, necessarily processes technical request data such as IP address, browser and device information, requested URL, timestamps and security signals to deliver the site, prevent abuse and diagnose failures.

Cloudflare performance measurement

Cloudflare currently injects a cookie-free performance beacon into public pages. It reports page-load timing and Core Web Vitals together with technical dimensions such as page path, referring page, device type, browser, operating system and country. Cloudflare states that this RUM beacon does not use cookies or browser storage, does not fingerprint individuals, and discards the source IP address rather than storing it in the RUM service’s core databases or logs. See Cloudflare’s RUM data and privacy description. This operational performance service is separate from CareCanon funnel measurement.

First-party product measurement

The unified Record Finder filters a static index already delivered to your browser. Text you type into it stays in the browser: it is not placed in the URL, saved by CareCanon or accepted by the CareCanon analytics endpoint. If CareCanon funnel measurement is enabled, CareCanon records only an enumerated event, page path without its query string, a short random session token stored for the browser session, an optional predefined record identifier, interaction method and timestamp. The event endpoint rejects free-form search text, referrers, email addresses, conditions, doses and persistent identity fields. CareCanon funnel measurement is currently disabled until privacy and retention controls are approved.

3. How we use information

• Deliver, secure and maintain the site.
• Understand whether readers can find records and sources.
• Measure internal paths and, when clearly disclosed, outbound provider links.
• Comply with law and investigate misuse.

We do not use health-related browsing activity for targeted advertising or build advertising profiles.

4. Cookies and browser storage

CareCanon does not currently use third-party advertising cookies. Cloudflare’s active performance beacon does not set a cookie or use local or session storage. If CareCanon funnel measurement is later enabled, a random session token may be kept in sessionStorage and disappears when the browser session ends. External sites may set their own cookies under their own policies.

5. Disclosure to others

We may disclose limited information to service providers that host, secure or operate the site; when required by law; to protect rights and safety; or as part of a lawful business transaction. If you choose an external or paid link, the destination receives the ordinary web request and may receive a short CareCanon attribution code. CareCanon does not sell personal information or share it for cross-context behavioral advertising.

6. Retention and security

We seek to minimize retention and access. Cloudflare states that Web Analytics keeps unsampled beacon data for seven days, then aggregates the dataset to roughly ten percent for longer-term storage, and currently makes Web Analytics history available for the previous six months. This is server-side retention even though the beacon uses no cookies or browser storage and Cloudflare discards the source IP address from the RUM service. See Cloudflare’s Web Analytics FAQ. Security and delivery data follow the retention available for the configured Cloudflare service and plan. Those settings, access roles and deletion limits must be recorded in the pre-launch retention schedule. A separate fixed retention period must be approved before CareCanon funnel measurement is activated. No internet service can promise absolute security.

7. Your choices and rights

You may block browser storage, use your browser’s privacy controls, or avoid external links. Section 8 explains how CareCanon responds to browser privacy signals. Depending on where you live, you may have rights to know, access, correct, delete or restrict certain personal information and to appeal a denied request. Send requests to privacy@carecanon.com. We may need to verify a request and will not discriminate against you for exercising a legal right.

8. Do Not Track and cross-site collection

Browser signals

Some browsers send a “Do Not Track” signal and some send a Global Privacy Control signal. No single standard says how a site must answer either one. CareCanon does not sell personal information, does not share it for cross-context behavioral advertising and does not build advertising profiles, so there is no tracking of that kind here to switch off. For that reason CareCanon does not currently change its behavior in response to a Do Not Track or Global Privacy Control signal. If CareCanon ever begins selling or sharing personal information, it will treat a Global Privacy Control signal as a valid opt-out request, and this policy will say so before that practice begins.

Collection by other parties

CareCanon does not permit advertising networks, data brokers or third-party analytics companies to collect personal information about your activities on CareCanon over time or across other websites. The only third party that receives request data is the hosting and security provider described in section 2. External sites you choose to open from a link, including a paid link, are controlled by others and apply their own policies once you leave CareCanon.

9. Children

CareCanon is intended for adults and is not directed to children under 13. We do not knowingly collect personal information from children.

10. Health privacy

CareCanon is an editorial reference, not a health plan, clearinghouse or health care provider. Do not assume information sent to CareCanon is protected by HIPAA. Other federal and state consumer-health privacy laws may still apply. See our separate Consumer Health Data Privacy Policy.

11. Changes

We will post changes here and revise the effective date. Material changes to collection or sharing should be explained before the new practice begins.