Privacy notice

DRAFT — pending review by counsel. Effective date: to be set at approval.

1. Scope

This notice covers this public site and the login-gated portal (340b.openpharmos.org), both published by OpenPharmOS. This site collects an email address only if you voluntarily submit the request-access form below; the portal identifies you by the email address Cloudflare Access verifies at sign-in.

2. What this site collects, and why

GET /request-access collects an email address (required) and an optional free-text message. Submitting it writes one row to the administrator's database so they can follow up by hand — no email is sent automatically, and no account is created. This site sets no cookie, ever, and otherwise collects nothing about you beyond a rate-limit counter keyed to a one-way hash of your IP address (not your IP address itself), which expires automatically within an hour.

The portal side — what account data is collected once you're signed in, who else processes it (Cloudflare, Cloudflare Workers AI, and Stripe if billing is ever enabled), retention, and your rights — is covered in the portal's own copy of this notice, linked from its footer once you're signed in.

3. Third parties

Cloudflare operates the infrastructure this site runs on. No other third party — no analytics vendor, no advertising network, no font or CDN provider, no email-sending service — ever receives your data. The strict content-security policy on this site (default-src 'none', no third-party origins) is a structural guarantee of this, not just a policy statement.

4. Your choices and rights

Contact the administrator (via the request-access form, or the portal's feedback form if you already have access) to correct inaccurate data or request erasure. A self-service data-subject-request workflow is planned but not yet built. Jurisdiction-specific rights (e.g. under a state privacy law or the GDPR) are pending counsel review of which regimes apply.

5. Changes to this notice

An updated notice will be posted at this same location. There is no separate acceptance step — using this site after a change constitutes notice.

Informational resource only — not legal advice.