Privacy

No ads, no selling. To see how Hearth Record is used, we use Google Analytics, through Google Tag Manager. It sets a cookie in your browser and tells Google which pages you open, how you use them (how far you scroll, which links you follow out), where you came from, your device and browser, and your rough location from your IP address. We don’t know who you are, and Google Analytics doesn’t tell us. Google explains what it does with that information in How Google uses information from sites or apps that use our services.

It isn’t used on the pages of treatment and health centers, on search results, on sign-in and account pages, or in the iPhone app.

Without an account, Hearth Record’s own servers store nothing about you. Your browser, or the iPhone app, also keeps a few things of Hearth Record’s own on your device, such as the list you came from, and those never leave it.

• Your account: your email address, and when the account was made and last used. No names: names from Google or Apple are never stored.
• How you sign in: which way (an emailed link, Google or Apple), and that way’s own identifier for your account.
• What you save: the places and products you watch, your shortlists and comparisons, your saved searches and your alert settings.
• Your sessions: each is a random token we keep only as a hash, with when it expires.
• Abuse protection: sign-in attempts, counted by a hash of the email address and a hash of the IP address, and deleted within a day.
• A sign-in link while it waits: the address it was sent to and a hash of the link, deleted within the hour after the link expires, 15 minutes after it was sent.
• The alert emails we send you: which day, and what each told you, kept for 30 days so nothing is sent twice.

The outside services are Cloudflare, which hosts Hearth Record and sends its email; Google, for Google Analytics on the website, as above; Google and Apple, only when you choose them to sign in; and Apple again, which delivers the iPhone app’s notifications if you turn them on. When you ask for an emailed sign-in link, Cloudflare’s Turnstile checks that you’re a person and not a robot.

We never sell or share your email address or anything you save.

A sign-in link when you ask for one. And, if you watch something or save a search, at most one alert email a day, only when something changed. Every alert email has a one-click unsubscribe, and each record or search in it can be muted on its own. No marketing, ever.

The Hearth Record app for iPhone shows organizations and products only. Each place appears under the name its licensing agency registers it by. Beyond that, the app shows no one’s personal information: no name of an owner, licensee, staff member, inspector or anyone else; no street, phone or map position of a home where care is given, only its city and ZIP code; and none of the words inspectors, complainants or consumers wrote. Every record in the app links the agency’s own record, which has them. The app keeps what this page says and nothing more. It has no analytics, no advertising and no tracking of any kind.

• On your iPhone: copies of the records and lists you opened, each with when it was read, so they open without a connection, except those of treatment and health centers, which are never kept, and none of your searches; the site’s own stylesheet, script and fonts; while you aren’t signed in, your shortlists, up to four of a kind, in a file on the phone; and your sign-in, in the iPhone’s Keychain, on that phone alone. Signing out takes your sign-in off the phone. Deleting your account takes the copies and the shortlists off it too, and deleting the app takes them all.
• When you sign in: what an account keeps, above: your email address, the identifier Apple or Google gives your account if you sign in with them, and what you save, your watch list and your shortlists among it, the same on every device you sign in on. A watch list in the app is kept with an account. A sign-in in the app lasts 180 days, renewed while you use it.
• If you turn notifications on: Apple’s token for your iPhone, its time zone, your quiet hours and whether notifications may name what changed, until you turn them off or sign out; and the day each notification went and how many changes it counted, kept for 30 days so that no more than one a day is sent.
• Who else is involved: Apple delivers the notifications. Their few words pass through Apple’s service, and unless you turn names on, they name nothing you watch.

From your account page you can download everything we hold about you, as a JSON file, or delete your account. Deleting removes your account and everything you saved, right away.

In the app, You has the same two: Download my data, and Delete my account.

Accounts are for people 18 and over.

Write to hearthrecord@mouliqe.com, and a person will answer. If this page changes, its date changes, and anything that changes what we keep is said here first.