Privacy Policy

Last updated: June 2025

Overview

Civic Data (“we”, “our”, or “the site”) is a public data reference tool. We collect minimal data necessary to operate the site and do not sell personal information to third parties.

Information we collect

Automatically collected data

When you visit the site, standard web server logs are generated. These may include your IP address, browser type, pages visited, and timestamps. This data is used for site performance monitoring and security. It is not used to identify individual users and is not shared with third parties except as required by law.

Analytics

We may use privacy-focused analytics (such as Plausible Analytics or Google Analytics) to understand aggregate traffic patterns — which pages are visited and how users navigate the site. If Google Analytics is used, it is configured to anonymise IP addresses. We do not use analytics data to build individual user profiles.

Search queries

Searches you perform on this site are processed server-side against the OpenFDA API. We do not store a log of individual search queries tied to your identity. Search result pages are marked “noindex” so they do not appear in search engines.

Cookies

This site does not use tracking cookies or advertising cookies. If analytics are enabled, a minimal session cookie may be set. No third-party advertising networks place cookies through this site.

Third-party services

Recall data is fetched from the OpenFDA API, a US government service. Your search queries may be forwarded to OpenFDA as part of data retrieval. OpenFDA's privacy practices are governed by the HHS Privacy Policy.

The site is hosted on Vercel. Vercel processes request data as part of infrastructure delivery. See Vercel's Privacy Policy for details.

Data retention

We do not store personal data beyond what is automatically retained in standard server logs, which are purged on a rolling basis. We do not maintain user accounts or profile databases.

Your rights

Because we do not collect or store personal data beyond standard server logs, there is no personal data profile to access, correct, or delete. If you have concerns about data processed by third-party services listed above, refer to their respective privacy policies.

Changes to this policy

If this policy changes materially, the updated date at the top of this page will be revised. Continued use of the site after changes constitutes acceptance of the updated policy.

See also: About · Data Sources