Privacy Policy, CCPA & GDPR Notice — Blood Test Interpreter

      Your blood test data — the short version:
      We do NOT collect, store, or transmit your blood test values
We do NOT sell, share, or disclose your health data
We do NOT use advertising cookies or tracking technologies
All blood test analysis runs entirely in your browser — nothing leaves your device

    

What we do collect — disclaimer consent records:

When you click "I Understand & Continue" on the Medical Disclaimer, our server logs: your IP address, the date and time of acceptance, your browser type, and the language of the disclaimer you accepted.
This record is kept solely to document that the required medical disclaimer was accepted before using the analyzer — a legal compliance requirement.
This data is never sold, shared, or used for any other purpose.
To request deletion of your consent record, contact us at support@bloodtestinterpreter.com with your approximate acceptance date.

1. Information We Collect

A. Blood Test Data — Not Collected

Blood test values you enter into the analyzer are processed locally in your web browser using JavaScript. They are never transmitted to, received by, or stored on any server — ours or anyone else's. We do not collect names, email addresses, health records, or any other personal health information.

B. Disclaimer Consent Log — Collected

When you click "I Understand & Continue" on the Medical Disclaimer page, the following data is recorded on our server:

Data Element	Example	Purpose	Retention
IP Address	203.0.113.x	Document who accepted the disclaimer	Until deletion request
Server Timestamp	2026-06-19T14:32:07Z	Document when disclaimer was accepted	Until deletion request
Client Timestamp	2026-06-19T14:32:07.441Z	Browser-side confirmation of time	Until deletion request
Disclaimer Version	June 19, 2026	Record which version was accepted	Until deletion request
Language	en / es	Record which language was presented	Until deletion request
Browser (User Agent)	Chrome/126	Technical verification	Until deletion request

Under GDPR Article 6(1)(c) and (f), this processing is based on legal obligation (documenting informed consent for a medical tool) and legitimate interest (protecting users and the operator from harm arising from uninformed use).

2. Cookies & Tracking

This application uses no advertising cookies, no analytics trackers, no advertising pixels, and no cross-site fingerprinting. We use sessionStorage temporarily (within your browser tab only) to remember that you accepted the disclaimer during your current visit — this data is automatically deleted when you close the tab and is never sent to our servers.

We also use localStorage to store the date and language of your most recent disclaimer acceptance on your own device. This is stored only in your browser and is never transmitted to us.

3. Third-Party Services

All fonts, icons, and libraries are fully self-hosted. No requests are made to Google, Cloudflare, Font Awesome, or any other third-party CDN during your visit. The only external connections occur when you voluntarily click one of the clinical reference links in the Sources footer — those navigate to the cited medical institution's public website in a new tab.

4. How Your Data Is Used

Blood test data: Not used for anything because we never receive it. All analysis occurs in your browser.

Consent log data: Used solely to maintain a legal record that the medical disclaimer was presented and accepted before analyzer access was granted. This record may be referenced in the event of a legal dispute to demonstrate informed consent. It is not used for marketing, profiling, advertising, or any other commercial purpose.

5. California Consumer Privacy Act (CCPA) Notice

For California Residents:

Blood Test Interpreter collects a limited consent record (IP address, timestamp, browser, language) when you accept the Medical Disclaimer. Your blood test values are never collected. All CCPA rights apply to the consent record data described above.

Your CCPA Rights

Right to Know: You may request what personal information we have collected about you. We will provide your consent log record upon request.
Right to Delete: You may request deletion of your consent log record. Contact support@bloodtestinterpreter.com with your approximate acceptance date and IP address.
Right to Opt-Out of Sale: We do not sell personal information. There is nothing to opt out of.
Right to Non-Discrimination: We will never discriminate against you for exercising any CCPA right.
Right to Correct: You may request correction of inaccurate consent log data. We will update or delete as appropriate.

Sensitive Personal Information

Blood test values may constitute "sensitive personal information" under the CCPA. We explicitly confirm: these values are never transmitted, stored, or processed by us. All analysis occurs exclusively within your browser. We do not use sensitive personal information for any purpose beyond providing the on-screen interpretation you requested in the moment.

For users in the EU, EEA, and UK:

Blood Test Interpreter collects a limited consent record (IP address, timestamp, browser, language) when you accept the Medical Disclaimer. Your blood test values are never processed by us. All GDPR rights apply to the consent record data.

Data Controller

Under GDPR Article 4(7), the data controller is:

Controller: Victor Johnson, Founder — Blood Test Interpreter
Contact: support@bloodtestinterpreter.com
Nature of Service: Free, non-commercial public health education tool

See the Legal Notice (Impressum) for full responsible-party disclosures.

Legal Basis for Processing

The consent log record is processed under:

GDPR Article 6(1)(c) — Legal Obligation: Documenting that legally required medical disclaimer was accepted before granting access to a health-information tool.
GDPR Article 6(1)(f) — Legitimate Interests: Maintaining evidence of informed consent to protect users from uninformed use and to defend the operator against claims of failure to warn.

Blood test data is not processed by us at all — no legal basis is required for data we never receive.

Your Full GDPR Rights (Articles 15–22)

Right of Access (Art. 15): You may request a copy of your consent log record. Contact us at support@bloodtestinterpreter.com.
Right to Rectification (Art. 16): You may request correction of inaccurate data in your consent record.
Right to Erasure / "Right to be Forgotten" (Art. 17): You may request deletion of your consent log record. We will honor this unless retention is required by applicable law.
Right to Restriction of Processing (Art. 18): You may request that we restrict use of your consent record to storage only, pending resolution of a dispute.
Right to Data Portability (Art. 20): You may request your consent record in a portable format (CSV). Contact us to receive it.
Right to Object (Art. 21): You may object to processing of your consent record on legitimate interest grounds. We will assess and respond within 30 days.
Rights Related to Automated Decision-Making (Art. 22): No automated profiling or decision-making is performed on consent log data.
Right to Withdraw Consent: Where consent is the basis for processing, you may withdraw it at any time without affecting prior processing. Contact us to request deletion.

International Data Transfers

Consent log data is stored on servers operated by Replit, Inc. (United States). If you are located in the EU/EEA, this constitutes an international transfer. Replit's infrastructure is covered by standard contractual clauses (SCCs) and applicable US data transfer frameworks. Blood test values are not transferred at all — they never leave your device.

Data Retention

Consent log records are retained indefinitely for legal compliance purposes unless a deletion request is submitted. Records are deleted within 30 days of a verified deletion request.

Right to Lodge a Complaint

If you believe your GDPR rights have been violated, you have the right to lodge a complaint with your national data protection supervisory authority. In Germany this is the Bundesbeauftragter für den Datenschutz und die Informationsfreiheit (BfDI); in the UK it is the Information Commissioner's Office (ICO).

7. HIPAA Compliance

This application is designed to comply with the Health Insurance Portability and Accountability Act (HIPAA) privacy standards. No Protected Health Information (PHI) is collected, transmitted, or stored by the application. Blood test values are processed exclusively in your browser and never reach our server. The consent log record (IP, timestamp, browser, language) does not contain health information and is not subject to HIPAA. All fonts, icons, and libraries are self-hosted — your IP address is not shared with any third-party vendor during normal use.

8. Changes to This Policy

This policy was updated on June 19, 2026 to reflect the addition of server-side consent logging. If we make further material changes to data practices, this page will be updated with a new effective date and a clear description of what changed. Material changes will be announced prominently at least 30 days before taking effect, in compliance with GDPR Article 13 notification requirements.

9. Contact & Data Requests

For questions about this Privacy Policy, to request access to or deletion of your consent record, or to exercise your CCPA/GDPR rights, contact:

Victor Johnson — Founder, Blood Test Interpreter
Email: support@bloodtestinterpreter.com
See the Legal Notice (Impressum) for full contact details

We will respond to all data requests within 30 days.

Effective Date: June 19, 2026 | Blood Test Interpreter Version 1.0 | Responsible Party: Victor Johnson

Legal Notice Back to App

Privacy Policy