Privacy

Short version: health information never reaches us, because the pages that handle it have nowhere to send it.

What never leaves your browser

The pre-visit form, and the "are you in pain right now" question in the questionnaire, are handled entirely by code running on your device. There is no submit endpoint behind them. The pre-visit form keeps a draft in your tab's session storage so a refresh does not wipe your work; closing the tab discards it. Nothing about your symptoms, medical history, medications or allergies is transmitted, logged, or stored by us, and we have not built the ability to do so.

What we do collect, if you give it to us

If you submit the questionnaire with your email address, we receive:

• the passport country you selected
• how long you plan to stay
• which treatment categories you ticked
• whether a second trip is possible for you
• the verdict the tool gave you
• your email address

That is the entire list. We do not ask for your name, date of birth, passport number, symptoms, or medical history, and we would not know what to do with them if you sent them.

Analytics

We count page views and a small number of events — questionnaire completed, calculator run, email submitted — without cookies and without building a profile of you. Event data records which verdict was shown, never who it was shown to.

Getting rid of your data

Every email we send has a one-click unsubscribe, which deletes your record rather than flagging it. If you would rather do it by hand, email hello@shanghaidentalnavigator.com and it will be done.

Why it is built this way

Handling other people's medical information across borders carries obligations that a one-person operation should not casually take on — and holding data you have no use for is a liability, not an asset. The simplest way to look after your health information properly is to never receive it.