Privacy commitment

No advertising pixels. No behavioural or health-based ad targeting. No selling or sharing of browsing data. No cross-site tracking or fingerprinting. No account, so there is no profile to attach a reading history to. The one measurement tool the site does run is described below, along with what it is forbidden to do.

The trial search downloads one file listing the recruiting trials, then filters that file on your device using ordinary page scripts. Nothing is installed and nothing persists after you close the tab. The condition you search for, the state you pick and the substance you select are never sent to us, never logged and never stored. That is deliberate: a list of people searching for PTSD trials is exactly the asset this site has decided not to build.

If you ask to be told when a trial opens, the form sends your email address and up to three short labels: a condition, a US state and a substance, each chosen from the page you asked from. No name, no age, no diagnosis, no free text. The server checks every field against a fixed list and discards anything else, so a modified form cannot smuggle extra data in.

Where it is held. That address and those labels are stored by Brevo, our email provider, on servers in the European Union under GDPR. We do not keep a second copy. Nothing about your alert is stored in the website itself, which is why this site has no user database and no login.

A stated interest in trials for a condition is health-adjacent information, and we are not going to pretend otherwise. What makes it defensible is that you initiated it, it exists for exactly one purpose, and it is the least we can hold and still do the job. It is never sold, never shared with anyone, never used for advertising, and never combined with anything else about you. One click unsubscribes and one email deletes it.

If you would rather we held nothing at all, do not use the alerts. Everything else on this site works without them.

Google Analytics 4, and what it is allowed to do. This site counts page views so we can see which parts of the register are actually used. Until September 2026 it carried no analytics at all, and this page said so; that changed, and rewriting the sentence rather than leaving it standing is the only honest way to make the change. What Google receives is the page address, a timestamp, a truncated IP, and the coarse properties any web request carries such as the browser and the country. What it does not receive is anything you type: no name, no email, and none of your trial search.

It is not joined to advertising. Google Signals and ad personalisation are switched off in the tag itself, in the site’s own source code rather than in a console setting, and every advertising consent category is refused for every visitor everywhere. This matters more here than on an ordinary site: the addresses of these pages name conditions, so a page view can be health-adjacent on its own. Signals is the mechanism that would join that to a signed-in Google advertising profile, and it is refused rather than merely unused.

Your choice, and the signal we honour. In the EU, the UK and Switzerland nothing is written to your device until you agree, which is what the notice at the bottom of the page is for. If your browser sends a Global Privacy Control signal, analytics storage is denied wherever you are and you are not shown the notice at all, because asking again is precisely what that signal exists to prevent. Declining, or never choosing, leaves the site working exactly as it does otherwise.

Server logs. Our host, Vercel, writes standard web server logs for every request, as every web server does. Those records include an IP address, a timestamp, the path requested and a browser user-agent string. We do not analyze them, build profiles from them, or connect them to anything else. Vercel retains them on its own schedule and we cannot shorten it. Saying “nothing is tracked” would be easier and it would not be true, so this is the accurate version.

The contact form emails what you type to the person who runs the site, through SendGrid, our mail provider. It takes a name, an email address, an optional organisation, a topic chosen from a fixed list and your message, and the server accepts those fields and discards anything else, so a modified form cannot add a diagnosis field of its own. No copy is kept in any database here; the record of it is the mail itself.

There is no condition field and no symptom box, and that is a decision rather than an omission. We cannot assess anyone for a trial, and a form shaped like an intake questionnaire would collect exactly the health information this page promises not to hold, from the people least able to afford the mistake. Please do not send medical details.

Washington’s My Health My Data Act and comparable state laws define consumer health data broadly enough to include inferences drawn from browsing. We do not collect it, do not infer it, and do not sell it. We honour Global Privacy Control signals.

Unless you have set a trial alert or emailed us, there is no record of you at all, so most requests resolve immediately. If you have, we hold your address and one topic, and we will show you it or delete it on request. Ask through the contact form, choosing “something else”, and put privacy in the message.