Privacy policy

The short version

You can read every page here without telling us who you are. We do not sell personal data. We do run analytics to see which codes people look up and which searches fail, and when advertising is switched on, third-party ad networks run their own tracking that we do not control. The details are below.

What is collected

Things you never give us

There is no login, no newsletter and no contact form that stores anything on our servers. We hold no name, address, payment detail or patient information. Please do not put protected health information into the search box or into feedback.

Automatically, when you visit

Our host, Vercel, records standard server logs — IP address, user agent, the page requested and the time — to serve the site and defend it from abuse. Our analytics tools record page views, referring pages, approximate location derived from IP (country or region level), device and browser type, and in-page events such as a search being submitted, a suggestion being chosen, a dataset being downloaded or an “ask an AI” prompt being copied.

Search terms are recorded as events. Searches are logged to improve ranking, so avoid typing anything into the search box that identifies you or a patient.

Feedback you choose to send

If you use the feedback page, the message you write — and the email address you add, if you add one — is sent to our analytics tool (PostHog) as an event so we can read and act on it. Leave the email blank if you would rather stay anonymous.

Services running on this site

Vercel

Hosting, server logs and Vercel Analytics, which measures page performance without cookies.

Google Analytics

Audience and traffic measurement, also used to verify the site with Google Search Console. Sets cookies. Google privacy policy.

Firebase Analytics

Google's app analytics, reporting into the same Google property.

PostHog

Product analytics and error reporting: which searches run, which results get opened, and which pages throw errors. PostHog privacy policy.

Minilytics

A lightweight self-hosted page-view counter run by the site owner.

Advertising networks

When advertising is enabled, scripts from Highperformanceformat and Profitable CPM Rate Network serve the ads. These networks set their own cookies and may profile you for ad targeting. We do not receive or store what they collect, and we cannot see your activity on other sites.

Google Fonts

The site typeface is self-hosted at build time, so your browser makes no request to Google for fonts.

Cookies and local storage

The site itself sets no cookie that identifies you. Google Analytics, Firebase, PostHog and the ad networks set their own cookies or browser storage. You can block or delete these in your browser settings, or use a content blocker — nothing on this site stops working without them.

Your choices and rights

Depending on where you live — for example under the GDPR in the UK and EU, or the CCPA in California — you may have the right to ask what personal data is held about you, to have it deleted, or to object to its processing. Because we hold no account and no directly identifying information, we usually cannot link a request to a specific visitor. We can still delete feedback you sent us if you tell us roughly when you sent it and what it said.

To opt out of measurement entirely, use a browser or extension that blocks analytics, or enable “Do Not Track” and a tracker blocker together. To opt out of Google Analytics specifically, use Google's opt-out browser add-on.

Children, transfers and retention

This site is a professional reference and is not directed at children under 13, and we do not knowingly collect their data. Our analytics and hosting providers operate internationally, so data may be processed outside your country. Analytics data is kept only as long as the respective provider's retention settings allow, and server logs are kept for a short period for security and debugging.

Changes and contact

If this policy changes, the date at the top changes with it, and the edit is visible in the public source history. Questions about privacy can go through the contact page.

This policy describes the site at https://hcpcsdata.vercel.app. If you self-host the open-source code, you are responsible for your own deployment's privacy practices.