Privacy policy
Short version: we keep an email address and a list of medication names if you ask for alerts, plus ordinary web-server logs. Nothing else. No cookies of our own, no analytics, no advertising, no selling of data.
Effective 6 September 2026.
Who is responsible
This site is an independent, privately operated project. Privacy questions and requests: see the contact page.
What we collect, and why
- Alerts If you subscribe, we store your email address, the medication names you typed, the time you subscribed, and whether you have confirmed or unsubscribed. We use this for one purpose: to send you the confirmation email and, afterwards, an email when an FDA recall matches one of your medications. Subscription is double opt-in - nothing is sent until you click the confirmation link.
- Server logs Like every website, our web server records each request: the address requested, the time, your IP address and browser identifier. We use these logs to keep the site running and to detect abuse. They are rotated and deleted automatically by the server and are not linked to any subscription record.
- Searches When you check a medication, the name you type is part of the page address and therefore appears in the server log above. Separately we keep a plain tally per search term - the term, how many recalls it matched and how many times it was searched - with no IP address, browser or time beyond the date, so that terms which keep finding nothing can be added to the register. Nothing in it identifies a person.
What we do not do
- We set no cookies of our own and use no analytics, advertising or tracking scripts. The site's content-delivery network may set a purely technical cookie to protect against automated abuse.
- We never sell, rent or share your email address or medication list, and we do not use them to profile you.
- We do not ask for, and you should not send us, any other health information.
Who processes the data
Subscription records are stored in a database on the server that hosts this site. Emails are delivered through a third-party transactional email service (Amazon SES); it receives your address and the message in order to deliver it. Traffic to the site passes through a content-delivery network (Cloudflare), which sees requests in transit in order to serve and protect the site. Recall data itself is public FDA data and contains nothing about you.
How long we keep it
Your subscription record is kept for as long as your alerts are active. When you unsubscribe, the record is marked so that we never email that address again; if you would rather we erase the record entirely, ask us and we will delete it. Server logs are deleted on the server's normal rotation schedule.
Your choices and rights
- Every email we send has a link to manage your medication list and to unsubscribe with one click; you can also request your personal manage link on the manage page.
- You can ask us at any time what we hold about your address, to correct it, or to erase it. Depending on where you live you may have further rights under laws such as the GDPR or the CCPA; we honour them for everyone.
Children
The site is not directed at children under 16 and we do not knowingly collect their email addresses.
Changes
If this policy changes, the new version will be posted here with a new effective date. We will not start using your data for a different purpose without telling you first.