Privacy

Read without a public account

You can browse the public reference without creating an account or submitting a health profile. The site has no public symptom questionnaire, tongue-image upload or personalised diagnosis feature. Opening a page still requires ordinary network communication with the hosting infrastructure; that is different from voluntarily submitting a correction.

This page describes the current functions, including the optional analytics mechanism. It does not promise that hosting providers never process technical data. Access-log collection and retention depend on the hosting configuration; a specific production provider or fixed retention period is not asserted here.

What stays in your browser

Saved content identifiers and your analytics preference use this browser’s local storage. The saved list is not uploaded for cloud synchronisation and is not an account. A page can show the appropriate language edition from the same saved identifier, but another browser or device will not automatically share the list.

Use Clear saved pages on the Saved page to remove the list. Clearing site storage in the browser also removes saved items and the locally remembered analytics choice. In private browsing or where storage is blocked, persistence may be limited. Local storage is not a private medical record and should not be treated as one.

Searches and submitted corrections

A typed query filters published content. Submitting the homepage search puts the query in the destination URL, so it may remain in browser history or ordinary infrastructure logs. The application does not include search text, the saved list or correction text in its optional analytics payload.

When you send a correction, the submitted page path, report text and optional source URL are stored in the editorial database with a reference, status and creation time. The report is available to authorised editors rather than published as a public comment. The current editorial queue does not apply an automatic deletion deadline; resolution marks the report’s status rather than deleting its text.

Do not submit contact details, patient records, identifying health information or a request for diagnosis. If you accidentally included sensitive material, send a further correction with the reference and page, asking the editor to review it; do not repeat the sensitive text. The form does not promise an immediate response.

Optional analytics and external sites

Analytics starts off. If an endpoint is configured and you choose to allow it, the application sends a controlled view event for a published article, with its page path and language. It does not load an arbitrary third-party tracking script. The receiving service necessarily receives the network request; withholding application fields is not a claim that a network request has no technical metadata.

You can decline or withdraw below. Withdrawal stops later events and aborts the current request where possible; it cannot undo a request a recipient has already received. If no service is configured, allowing the preference does not create one.

Following an original-source or teaching-resource link opens another publisher’s site, which has its own privacy rules. Videos are provided as resource links rather than automatically loaded third-party players. Homepage ingredient photographs and site fonts are served locally.

Administrator sessions

The editorial area is separate from public browsing. An administrator who signs in receives a session cookie to authenticate editing; the session expires after eight hours and signing out invalidates it. This is not a visitor membership feature or a mechanism for syncing your saved pages.

The controls below concern optional public-content analytics only. They do not disable a necessary administrator sign-in session, erase a submitted report or change a third-party site’s settings.