Privacy Policy

Who we are

CareAtlas is run by the site operator ("we"). For any privacy question or request, write to [email protected]. You can also use the other channels on our contact page.

Cookies and browser storage

We use a session cookie to keep you signed in. When you sign in with a provider such as Google, an additional cookie protects that sign-in and lasts at most 10 minutes. On eligible public pages, Google Analytics 4 may also set first-party analytics cookies, including _ga. The two kinds of site statistics we use, and your controls over them, are described below.

The emergency card and the trip-mode checkmarks in your plans are stored only on your device (your browser's local storage), and offline copies of pages are cached by your browser; none of this is sent to us.

Our own visit and acquisition measurements

Our first-party statistics are separate from Google Analytics. We count views of allowed public pages, the page language, general traffic source, visible reading time (up to 30 minutes per page), scroll depth, device category and approximate country supplied by our CDN. For daily unique counts, a hash of the IP address, browser user agent and a daily rotating salt is held only in server memory for that day; raw IP addresses are not saved in these statistics. Bots and crawlers are excluded.

To understand which public content leads to use of our planning service, a browser tab keeps a random visit ID, first public landing page, start/activity times and a limited source description in session storage. A visit ends after 30 minutes without activity or at 24 hours, and a new visit receives a new ID. The original source is preserved across sign-in redirects within that visit. We send only the referring site's origin (no path or query), short permitted utm_source/utm_medium tags and whether an advertising click identifier is present; the identifier itself is never sent. Other query parameters, searches, private plan/account URLs, form answers and medical information are not included. A direct entry to an excluded private page can remain unattributed.

The server stores a SHA-256 hash of the random visit ID, the public landing page and language, an allowlisted source/category, and the first time a visitor opens the new-plan form, edits it, successfully creates a draft or clicks a CareAtlas contact channel. Contact clicks are not proof of a consultation. When checkout opens, this limited attribution can be linked to the order and its server-confirmed payment/refund status. This association is not anonymous. No order or medical details are sent to GA4. Attribution-session records are retained for 90 days from their start, and order-attribution records for 90 days from checkout; a daily cleanup deletes expired records. Existing daily aggregate totals can remain. Deleting an account also removes attribution records linked to its deleted orders.

GPC and Do Not Track disable visit measurement and checkout attribution. You can also use the control above to exclude this browser for internal testing. That preference is saved in local storage until you restore measurement or clear it, and in a first-party exclusion cookie lasting up to one year; the cookie contains only the exclusion flag, not a visitor ID. Exclusion covers our visit/acquisition measurements and GA4, without affecting sign-in, payments or necessary order records. Restoring measurement starts a fresh visit and still respects browser privacy signals. It does not retrospectively remove existing records.

Google Analytics 4

We use Google Analytics 4 (GA4, measurement ID G-CS24TKFDQK) to understand visits to selected public marketing and information pages. We exclude account and sign-in pages, private plans, planner and payment forms, search pages and medical tools from our GA4 measurements.

Our integration sends page views explicitly. It removes query strings and URL fragments from the page URL, uses a general page category instead of the page's actual title, and sends only the origin of an external referring site (scheme, domain and port, without its path or query). Our integration does not send email addresses, order data, order or plan identifiers, or form contents to GA4.

GA4 uses first-party cookies such as _ga to distinguish browsers and measure visits. Google processes cookie identifiers, device and browser information, language and approximate location to produce usage statistics. Cookie identifiers can distinguish a browser, so these measurements are not completely anonymous. Google's handling of data is explained in its Privacy Policy.

We disable Google Signals and advertising personalization. Our GA4 integration respects Global Privacy Control (GPC) and Do Not Track (DNT): it does not collect analytics when either signal is enabled. Browser privacy settings and blocking tools can also prevent analytics requests. You can manage or delete analytics cookies in your browser, or use the Google Analytics opt-out browser add-on.

Comments

Comments on articles are optional. We collect only the nickname and comment text you enter — no email, no account needed. Comments are reviewed before publishing; once approved, your nickname and text are public. To prevent spam and abuse we store a hashed IP address (a one-way hash with a daily-rotating salt) with each comment and use it for rate limiting. Please don't include health details, contact details or passport information in a comment. To have a comment removed, ask us through the channels on our contact page and we will delete it.

Accounts and the AI planner

If you create an account we store your email address, your name (optional), your country and language (optional), your planner preferences and the plans you generate. You can delete your account and all of this at any time from the Account page.

You can also sign in with a provider — Google, Apple, Microsoft, Facebook, LINE or Yandex, where offered on the sign-in page. The provider then shares your name, your email address (and whether it is verified) and an account ID with us; we store the email and account ID to recognise you next time. We do not get your password there, and we never post or act on your behalf. The provider's own privacy policy covers your sign-in with them. You can remove a linked provider on the Account page.

If you choose to sign in with an email link, we send a one-time link and a 6-digit code to your address. We store only a scrambled (hashed) copy of them, and they expire after 15 minutes.

When you generate or refine a plan, your planner choices (treatments, cities, dates, travel preferences and anything you type into the planner) are sent to the AI provider we have configured to write the plan. Your name and email address are not sent. Please keep what you type general — the planner gives direction and rough timing, not medical advice.

Planner credits are paid through Waffo Pancake, our payment provider and merchant of record. Your card and payment details go directly to Waffo; we keep the order record (amount, status, date) and, when available, the limited attribution described above.

Authorised CareAtlas staff can see your plans — your planner answers, the generated plan and its earlier versions, and your follow-up chat with the planner — together with your account email and orders. They use this only to provide the 1-on-1 consultation included with the Medical Travel Plan and to answer your support requests, and every time a staff member opens a plan it is logged. Plans can contain health-related information, so please share only what you are comfortable with; deleting your account deletes your plans and chats.

Contacting us

You can reach us by email, WhatsApp, Telegram, LINE or WeChat. We use your messages only to reply to you. These services are run by your email provider, Meta (WhatsApp), Telegram, LINE and Tencent (WeChat), which process your messages under their own terms and privacy policies.

Please don't send passport copies or medical records in your first message. We share your details with a hospital only after you agree to it in the conversation.

We delete conversations 12 months after our last contact with you.

If you report an error on a page, we store your report and, only if you choose to leave it, your email address.

Contacting hospitals directly

Hospital contact details on CareAtlas lead to each hospital's own official channels. When you contact a hospital directly, the hospital handles your data under its own policies; we do not see those messages.

Hosting

The site is hosted and delivered through our hosting provider and its content delivery network, which process technical data such as IP addresses to serve pages and protect the service.

Protecting the site from abuse

To protect the site from abusive scraping, we temporarily keep request counts per IP address in memory, and we log blocked requests with a hashed IP (a one-way hash with a daily-rotating salt), the user agent, the path and the reason. These logs are kept for a limited time (at most 90 days).

Your rights

You can ask us to access, correct or delete the personal data we hold about you. We answer deletion and other requests within 30 days.

Children

CareAtlas is intended for adults. If you are under 18, please contact us through a parent or guardian.

No selling of personal data

We do not sell, rent or trade your personal data.