Privacy Policy

GuineaPig ("imaguineapig.com," "we," "us," or "our") is committed to protecting your privacy. This policy explains what information we collect when you use our website and how we use it.

No Account Required

GuineaPig does not require you to create an account, log in, or provide any personal information to use our service. You can search for clinical trials without identifying yourself in any way.

Information We Collect

We collect minimal information to provide our service:

• Location searches: When you enter a city, ZIP code, or location to search for nearby trials, that information is used solely to query for relevant results. Location data is processed for your search request only and is not stored on our servers or associated with any identifier.
• Local profile data: If you choose to set a profile (age and sex), this data is stored locally in your browser's localStorage and is never transmitted to our servers. We do not collect health information, medical conditions, or medications.

Information We Do Not Collect

• Personal health information (PHI): We do not collect, store, or process any health or medical information about you, including medical conditions, diagnoses, or medications.
• Account credentials: We do not collect usernames, passwords, or email addresses (unless you voluntarily email us).
• Payment information: We do not process payments or collect any financial information.

Cookies and Tracking Technologies

We use the following cookies and tracking technologies:

• Essential cookies: We use localStorage to save your location preference and optional profile settings (age and sex) locally on your device. This data never leaves your browser.
• Analytics cookies: We use Vercel Analytics to understand aggregate usage patterns including page views, visit duration, and general geographic regions. Vercel Analytics is privacy-focused and does not use cookies for cross-site tracking or sell data to third parties. For more information, see Vercel's Analytics Privacy Policy.

You can control cookies through your browser settings. Disabling cookies will not affect the core search functionality of the site, but your location preference will not be saved between visits.

Server Logs

Like most websites, our hosting provider (Vercel) automatically collects certain information in server logs. This may include:

• IP addresses (anonymized or truncated where possible)
• Browser type and version
• Operating system
• Referring URLs
• Pages visited and time spent
• Date and time of requests

Server logs are used for security monitoring, debugging, and aggregate analytics. They are retained for a maximum of 30 days and are not used to personally identify individual users.

Data Retention

We retain data only as long as necessary:

• Search queries: Not retained. Location searches are processed in real-time and discarded.
• Local profile data: Stored in your browser until you clear it. You can delete this anytime via the "Clear Profile" button or by clearing your browser's localStorage.
• Server logs: Retained for up to 30 days for security and debugging purposes.
• Analytics data: Aggregated analytics are retained by Vercel according to their data retention policies.

Third-Party Data Sharing

We do not sell, rent, or share your personal information with any third parties for marketing or commercial purposes. We do not share data with pharmaceutical companies, clinical research organizations, or any study sponsors.

We may share anonymized, aggregated data with our service providers (hosting and analytics) solely to operate and improve the service.

External Links

GuineaPig contains links to external websites, including ClinicalTrials.gov and individual study contact pages. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any information.

Your Rights Under CCPA

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights regarding your personal information:

• Right to know: You have the right to know what personal information we collect. As described above, we collect minimal data and do not maintain user accounts or profiles on our servers.
• Right to delete: You can delete your locally stored profile data at any time using the "Clear Profile" button in the app.
• Right to opt out of sale: We do not sell your personal information. See our "Do Not Sell My Personal Information" statement below.
• Right to non-discrimination: We will not discriminate against you for exercising your CCPA rights.

Do Not Sell My Personal Information

GuineaPig does not sell your personal information. We have not sold personal information in the preceding 12 months and do not have plans to do so. We do not share personal information with third parties for monetary or other valuable consideration as defined under the California Consumer Privacy Act (CCPA) or other applicable laws.

If you have any questions about this policy or wish to exercise your rights, contact us at hello@imaguineapig.com.

Your Rights Under GDPR

If you are located in the European Economic Area (EEA), the General Data Protection Regulation (GDPR) grants you rights over your personal data, including access, rectification, erasure, and data portability. Since we do not collect or store personal data on our servers (profile data is stored locally on your device), there is no server-side personal data to access, correct, or delete.

You can delete your locally stored profile data at any time. If you have questions about our data practices, contact us at hello@imaguineapig.com.

Data Security

We implement reasonable technical and organizational measures to protect your information. Our website is served over HTTPS, and we use industry-standard security practices. However, no method of transmission over the internet is 100% secure.

Data Breach Notification

In the unlikely event of a data breach that affects your personal information, we will:

• Investigate the incident promptly and take steps to mitigate any harm
• Notify affected users within 72 hours of becoming aware of the breach, where feasible and required by law
• Notify relevant supervisory authorities as required by GDPR and other applicable laws
• Provide information about the nature of the breach, the data involved, and steps users can take to protect themselves

Because we store minimal data and profile information is kept locally on your device, the risk of a breach affecting your personal data is significantly reduced.

Children's Privacy

GuineaPig is not intended for use by children under the age of 18. We do not knowingly collect information from minors. If you believe a child has provided us with personal information, please contact us and we will delete it.

Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date. Your continued use of the site after changes are posted constitutes acceptance of the updated policy. We encourage you to review this policy periodically.

Contact

If you have questions about this privacy policy, want to exercise your privacy rights, or have concerns about our data practices, email us at hello@imaguineapig.com.