Consumer Health Data Privacy Notice
This notice explains how MindCheck Tools handles information that may be treated as consumer health data under laws such as Washington's My Health My Data Act. It supplements our Privacy Policy.
Last reviewed:
The most important distinction
Questionnaire answers, scores, journal entries, safety plans, and locally saved tool data are not collected by MindCheck Tools. Screening and scoring happen in your browser. Tools that intentionally save entries in your browser say so before use.
Visiting a mental-health or substance-use page can itself suggest an interest in a health topic. Ordinary hosting requests therefore deserve careful treatment even though they do not contain your answers or score. This notice describes that limited request and service data conservatively.
Categories collected and why
- Website request data: requested path, IP address, user-agent or browser information, time, response status, and security events. Vercel processes this information to deliver the page, prevent abuse, diagnose failures, and protect the service. A health-topic path may indicate an interest in that topic.
- Consented public-page analytics: on routes that are not classified as sensitive, Google Analytics may receive a sanitized page URL, page title, the referring site's origin, device/browser information, network information, approximate region, and analytics cookie identifiers. This happens only after an affirmative analytics choice and is used to understand aggregate site use.
- Resource-email subscription: if you independently subscribe, we collect the email address and your affirmative subscription choice. We intentionally exclude the source page, tool name, answers, score, diagnosis, and crisis information. Subscription forms are suppressed on sensitive interactive routes.
- Messages you send: we receive the contents of messages you choose to send. Please do not email screening answers, diagnoses, or other sensitive health details.
Sources
Request and analytics data comes from your browser, device, and network when you visit the site. Subscription and contact information comes directly from you when you choose to submit it. We do not buy health data, enrich visitor profiles with broker data, or infer a diagnosis from site activity.
Sharing and service providers
We do not sell consumer health data. Limited information is processed by:
- Vercel: website request and security information, including the requested path, for hosting, delivery, reliability, and abuse prevention.
- Google Analytics: the limited public-page analytics described above, only after analytics consent. Google Analytics is disabled on sensitive routes.
- Loops: an email address submitted with affirmative resource-email consent. No tool name, source page, answer, score, diagnosis, or crisis information is included in the provider payload.
- Email delivery providers: message contents and routing metadata when you choose to contact us by email.
No MindCheck Tools corporate affiliate receives consumer health data. External links, including disclosed affiliate links, use a no-referrer policy and do not append answers or scores. The destination may collect information after you choose to visit it under its own privacy policy.
Advertising status
Advertising is currently disabled. At the last review, Google's European-regulations message was published, the AdSense site review was still "Getting ready," and no ads were eligible to serve. Application code keeps the AdSense runtime off unless the publisher enablement, certified-CMP readiness, and strict-CSP readiness gates are all enabled. If advertising is activated, it remains excluded from sensitive routes, requires an affirmative advertising choice, and requests non-personalized ads. Non-personalized advertising can still use identifiers for functions such as frequency capping and aggregated reporting; details must be presented by the applicable consent layer before activation.
Your choices and requests
- Use Privacy Choices to deny or withdraw optional analytics and advertising. Global Privacy Control also keeps those optional services off.
- Clear or reset browser-local tool data on the device where it is stored. MindCheck Tools cannot retrieve or delete data that remains only in your browser.
- Email privacy@mindchecktools.com with the subject "Consumer Health Data Request" to ask whether we hold covered data about you, request access or deletion, request a list of the third parties and affiliates with which covered data has been shared or sold, or withdraw consent. You do not need to create an account. We may request limited information needed to authenticate the request.
We will respond without undue delay and within the period required by applicable law. If we deny a request, you may appeal by replying with the subject "Consumer Health Data Appeal." We will explain the outcome and, when required, how to contact the appropriate regulator.
Retention and security
Browser-local health entries remain on your device until you reset the tool, clear site data, or the browser removes them. Hosting/security log retention follows Vercel's configured service limits and legitimate security or legal needs. Analytics retention follows the configured Google Analytics property setting. Newsletter addresses remain while subscribed or until no longer needed, subject to limited suppression, security, backup, and legal records.
Sensitive routes use no-store and no-referrer response controls, bypass optional analytics, advertising, affiliate calls to action, and service-worker caching, and remove query strings or fragments from browser history.
Changes and contact
We will update this notice before collecting, using, or sharing an additional category of consumer health data or using it for a materially different purpose when notice or consent is required. Questions and requests can be sent to privacy@mindchecktools.com.
For official information, see the Washington Legislature's My Health My Data Act and the Washington Attorney General's guidance.