Overview
§ 1This Privacy Policy describes how the Human Disease Atlas ("we," "us," or "the Site") collects, uses, and protects information when you visit disease.workingspace-avi.workers.dev.
The Human Disease Atlas is an educational, non-commercial project built by pharmacy students. We are committed to being transparent about what limited data is processed when you use this website, and to protecting your privacy to the fullest extent possible.
Data We Collect
§ 2The Site itself collects no personal data directly. However, as with any website, some technical data may be automatically processed by the infrastructure. Here is a complete breakdown:
Cloudflare Workers (the hosting platform) may automatically log IP addresses, request timestamps, user-agent strings, and visited URLs for security and performance purposes. This is handled by Cloudflare, not us.
When you use the on-site search or the Research Portal, your search terms are sent to third-party APIs (PubMed, PubChem, OpenFDA, ClinicalTrials.gov). We do not store or log these queries ourselves.
The Site has no user accounts, login system, or registration. No name, email, password, or profile data is ever collected by us.
We do not ask for, collect, or process any personal health information, medical records, symptoms, diagnoses, or health-related personal data from users.
| Personal Name / Email | Not collected |
| Location Data | Not collected by us; may be inferred by Cloudflare for routing |
| Health Information | Not collected |
| Financial / Payment Data | Not collected (site is free) |
| Device Fingerprinting | Not performed by us |
| Behavioural Tracking | Not performed by us |
How We Use Data
§ 3Since we collect no personal data, there is no personal data for us to use, sell, or share. Any infrastructure-level data processed by Cloudflare (such as access logs) is used solely for:
| Security | Preventing abuse, DDoS mitigation, and protecting server integrity |
| Performance | Routing requests efficiently and maintaining uptime |
| Debugging | Diagnosing technical errors and service interruptions |
Third-Party Services
§ 4The Research Portal connects directly to the following third-party APIs. When you submit a search query, your request is sent to these services, and their privacy policies apply to how they handle that request.
| Cloudflare Workers | Hosting & infrastructure. Processes access logs. See: cloudflare.com/privacypolicy |
| PubMed (NCBI) | Literature search API. Operated by the U.S. National Library of Medicine. See: nlm.nih.gov/privacy |
| PubChem (NCBI) | Chemical compound data API. Same operator as PubMed. |
| ClinicalTrials.gov | Clinical trials database. Operated by the U.S. National Library of Medicine. |
| OpenFDA | Drug label data API. Operated by the U.S. Food & Drug Administration. |
| Google Fonts | Font delivery CDN. Google may log font requests. See: policies.google.com/privacy |
We do not control or take responsibility for how these third-party services handle data. Users are encouraged to review their respective privacy policies.
Cookies & Local Storage
§ 5| First-Party Cookies | The Human Disease Atlas does not set any first-party cookies of its own. |
| Third-Party Cookies | Google Fonts CDN may set performance or caching cookies. These are technical and contain no personal data. |
| Local Storage | The site may use browser localStorage to store UI preferences such as language selection or last-visited region. This data never leaves your browser and is not transmitted to us. |
| Session Storage | May be used temporarily during navigation for performance; cleared when you close your browser tab. |
| Tracking Cookies | None. We do not use advertising, analytics, or tracking cookies of any kind. |
Data Retention
§ 6As the Human Disease Atlas does not directly collect personal data, we do not retain personal data. Any infrastructure logs held by Cloudflare are subject to Cloudflare's own retention policies.
| Personal Data | Not retained — we do not collect it |
| Search Queries | Not retained by us; forwarded directly to external APIs |
| Server Access Logs | Retained by Cloudflare per their policy (typically up to 30 days) |
| Browser Storage | Stored locally on your device; deleted when you clear browser data |
Your Rights
§ 7Depending on your country of residence, you may have certain data privacy rights. While we collect no personal data, we respect and support these rights in principle:
Children's Privacy
§ 8The Human Disease Atlas is designed as an educational reference for pharmacy and medical students, who are typically adults aged 18 and over. The site is not intentionally directed at children under the age of 13 (or under 16 in the EU/UK).
We do not knowingly collect any personal information from children. If you are a parent or guardian and believe that a child under 13 has provided personal information through this site, please contact us and we will take steps to address it.
Security
§ 9The Human Disease Atlas is served over HTTPS, ensuring that all data exchanged between your browser and the server is encrypted in transit. The site is hosted on Cloudflare Workers, which provides enterprise-grade security infrastructure including DDoS protection, TLS encryption, and access control.
| Encryption in Transit | HTTPS / TLS — enforced for all connections |
| Hosting Security | Cloudflare Workers infrastructure with DDoS mitigation |
| Data at Rest | No personal data is stored, so there is no personal data to secure at rest |
| API Communications | All Research Portal API calls are made over HTTPS |
While we implement appropriate security measures, no method of transmission over the internet is 100% secure. We encourage users to practice safe browsing habits.
Medical Data Notice
§ 10This site is a static educational reference. You are not asked to enter symptoms, diagnoses, prescriptions, or any personal health data anywhere on the platform. No health data is shared with any third party.
The pharmacological and clinical content displayed on this site is general educational information only — it is not personalized medical advice and does not relate to your individual health situation. Always consult a licensed healthcare professional for personal medical guidance.
Contact & Policy Updates
§ 11If you have any questions, concerns, or requests related to this Privacy Policy, please contact the site owner:
| Contact Person | Avinandan Khanda — Developer & Site Owner |
| Institution | Dr. B.C Roy College of Pharmacy and Allied Health Sciences |
| Response Time | Typically within 7 business days |
| Languages | English |
Policy Updates: This Privacy Policy may be updated from time to time to reflect changes to the site's features, hosting infrastructure, or applicable laws. The effective date at the top of this page will be updated accordingly. Continued use of the site after any update constitutes acceptance of the revised policy.
| Document Version | 1.0 |
| Effective Date | 2026 |
| Jurisdiction | India; with recognition of international standards (GDPR, CCPA) |
| Last Reviewed | 2026 |