Privacy
What Paid & Penalized, and the services it uses, can see when you read it or send feedback.
In briefPaid & Penalized
1
No cookies, no accounts, no ads.
2
The host sees IP addresses, as every web host does.
3
Visits are counted without cookies.
4
Searches stay in your browser.
5
Feedback goes through a Google Form. Leave out patient information.
When you read the site
The site is a set of static pages. It sets no cookies, has no accounts and shows no ads. Cloudflare hosts it, and like any web host it receives your IP address, your browser’s details and the addresses of the pages you open, which it keeps in its logs under Cloudflare’s privacy policy (opens in a new tab). Your choice between light and dark mode is remembered by the browser for your visit; it is not shared beyond that visit.
Counting visits
This site uses Cloudflare Web Analytics to count page views. It sets no cookies. The counts show which pages are read, not who read them.
Searching and sharing
The hospital search downloads a list of hospitals and searches it in your browser. What you type isn’t sent anywhere. A what-if you share is stored in the link after its # sign, a part of the address browsers don’t send to servers.
Sending feedback
The feedback link opens a Google Form owned by the project’s Google account. Google receives what you submit, along with your IP address, under Google’s privacy policy (opens in a new tab). The form doesn’t collect email addresses and doesn’t ask you to sign in.
The site and page you came from are filled in for you; you can change or clear them. One optional question asks how to reach you, if you’d like a reply, and another asks which role best describes you. Answers go to a private spreadsheet.
Leave out patient information
Don’t include any patient information in feedback: no names, dates of birth, record numbers or details about anyone’s care.
Other sites
Links to CMS, LinkedIn and other sites take you off Paid & Penalized. Their own privacy policies apply there.