Consumer Health Data Privacy Policy
Last updated . This policy covers consumer health data under Washington's My Health My Data Act, Connecticut's consumer health data law and Nevada's SB 370.
What health data we collect
Only what you choose to type into a form. Depending on the form, that can include:
- Contact form and CADASIL "help with money" form: your name, email, a subject, and your message. Your message may mention a diagnosis, symptoms, caregiving, or money trouble.
- Share your story: your name, email, your story, a comfort level, your relationship to the person affected, whether you agree to us sharing your story, and whether we may contact you.
- Volunteer, partner and media forms: your name, email, optional phone and organization, and your message, which may mention health.
With every form we also store the page you sent it from, the time, and a salted one-way hash of your IP address (never the address itself), used only to stop spam.
Health information that never leaves your device
The adaptive tools on this site (such as the symptom log, diagnosis prep, family meeting guide and the site's memory of what you've told it) save your answers only in your own browser's storage. We never receive them. The "Clear my data" button in the footer erases them. See the Cookies & storage page for the full list.
Where it comes from
Directly from you, when you submit a form. We do not buy health data or get it from anyone else.
Why we collect it
- To read and answer what you sent us.
- To publish your story, only if you tick the box agreeing to that.
- To stop spam (the hashed IP and timing checks).
Who we share it with
We share it only with the service providers that run the site for us, under their terms as processors:
- Supabase stores form submissions (United States).
- Vercel hosts the website and processes requests to it.
- HighLevel (our contact manager) receives contact, volunteer, partner and media form messages so we can follow up. Story text is never sent to it.
We have no affiliates that receive this data. We do not sell consumer health data, and we do not share it for advertising.
Your rights, and how to use them
You can ask us to:
- tell you whether we hold your health data, and give you a copy;
- tell you who we have shared it with;
- delete it;
- withdraw consent you gave, such as consent to publish your story.
Email privacy@goodyearfoundation.org, or use the contact formwith the subject "Privacy request". Tell us the email address you used. We answer within 45 days and do not charge for it. If we turn your request down, we'll tell you why and how to appeal; appeals go to the same address.
Changes
If what we collect or who we share it with changes, we update this page first and change the date at the top.