Privacy Notice
The short version: Nodule Navigator collects nothing about you. Everything you type into the risk calculator is computed on your own device and never sent anywhere. The detail behind that claim is set out below.
At a Glance
- No personal information, health information, or account is ever collected.
- Risk calculator inputs are computed in your browser and never transmitted or logged.
- No cookies, no tracking pixels, no analytics, no advertising.
- Local storage holds interface preferences only, and never leaves your device.
- Formspree is the only third party, used solely to deliver contact form messages.
- No Protected Health Information is collected, so the site sits outside HIPAA scope.
No personal or health data is collected
Nodule Navigator does not ask for, collect, store, sell, or share your name, date of birth, email address, medical history, diagnosis, imaging, or any other personally identifiable or health-related information. There is no account system, no sign-in, and no user profile — nothing about you is recorded because nothing about you is requested.
The single exception is the contact form, described further down this page. Everything you type there you type deliberately, and it is used only to deliver that one message.
Risk calculator inputs never leave your browser
The malignancy risk calculator asks for values such as age, smoking status, prior extrathoracic cancer, nodule diameter, upper-lobe location, and spiculation. Every one of those values is held in the memory of the page you are looking at.
The Mayo Clinic logistic regression is evaluated entirely in JavaScript on your own device. There is no server call, no API request, and no background upload at any point in the calculation. Your inputs are not transmitted, not stored, not logged, and not retained — closing or reloading the tab discards them permanently, and nothing about them is recoverable by anyone, including this project.
No tracking, cookies, or analytics
This site sets no tracking cookies, embeds no tracking pixels, loads no advertising network, and runs no analytics package. There is no page-view counter, no session recording, no heatmap, no A/B testing service, and no fingerprinting. No cookie consent banner appears because there is nothing to consent to.
Routine web server logs kept by the hosting provider, Vercel, are a normal part of serving any website and are outside this project’s control. They are not used to build any profile of you and are not combined with anything you enter into the site.
Local storage is used only for interface preferences
The site uses your browser’s localStorage and sessionStorage for a small number of interface preferences: whether you dismissed the opening disclaimer permanently, whether the current tab has already shown the splash screen, and whether ambient audio is switched on.
These values are flags about the interface, not facts about you. They are written by your browser, read only by your browser, and never transmitted to any server. Clearing your browser’s site data removes them and returns the app to its default state.
Formspree is the only third party, and only for the contact form
When — and only when — you submit the contact form, the name, email address, and message you typed are sent to Formspree, which delivers the message. Formspree is not loaded, contacted, or notified in any way unless you press send. No other third-party service receives anything you do on this site.
Please do not put personal health information, patient details, or clinical questions about a specific case into that form. Read what the form is for on the contact page before writing in.
HIPAA applicability
Because Nodule Navigator collects no Protected Health Information (PHI), it falls outside the scope of HIPAA-covered entities and business associates. It is an educational resource with no patient-facing, record-keeping, or clinical data function of any kind.
That is a statement about what the software does, not a claim of certification. Nothing here has been reviewed or approved by the FDA or any other regulatory body, and this notice is not legal advice.
Children and changes to this notice
The site is not directed at children and collects no data from anyone, of any age. Because no personal data is held, there is no data to request, export, correct, or delete — a subject access request would return nothing, because nothing exists to return.
If this notice changes, the updated version is published at this address and the page’s entry in the sitemap is re-dated. Material changes would only ever come from adding a feature, and this project’s standing intention is to keep collecting nothing.
Related Pages
A condensed version of this notice also appears alongside the clinical citations on the references and disclaimer page, which carries the full educational disclaimer and every source the content is built on. The terms of use set out the educational scope of the site, and the contact page explains what the message form is and is not for.
Educational use only · Not a medical device
Disclaimer