Privacy policy

1.Who runs this site

Nuclide ([legal entity and address]) runs nuclide.cc and is the controller for the small amount of personal data the site touches. The code that this policy describes is public at github.com/casadesante/Nuclide.

2.The short version

• The site is a set of static pages served by Vercel. Nuclide runs no server and no database for nuclide.cc.
• Google Analytics counts visits and page views, but only after you press Allow on the bar at the foot of the page. Until then, and if you choose No thanks, it is not loaded at all. It is the only analytics on the site.
• There is no sign-in, no account and no email list. The site never asks you for your name, your address or anything about your health.
• Everything you choose on this site (reading mode, region, watched pages, saved views) stays in your own browser and is never sent to us.
• No advertising, no advertising trackers, no sale or sharing of personal data for marketing.

3.Hosting

The site is built as a static export and served by Vercel. Like any web host, Vercel logs each request (the address requested, the time, your IP address and browser type) for security and performance, and uses that log to run and protect the service. We add nothing to those logs and do not use them to identify visitors. See Vercel's privacy policy for how long they are kept.

4.Analytics

The site can use Google Analytics (gtag.js, property G-2TTJ25WSN8) for one thing: to see which pages are read and how often, so we know what to build next. It is gated behind your choice. The pages we publish contain no Google script at all; the first time you visit, a small bar at the foot of the page asks whether to count your visit, with two answers, Allow and No thanks. Until you answer, nothing is loaded and no cookie is set.

If you press Allow, the browser writes nuclide:analytics = granted to local storage and inserts the standard Google loader followed by a plain gtag('config') call, then and on every later visit while that choice stands. No advertising features are switched on and no extra parameters are passed (the snippet sets no IP anonymisation option; how Google Analytics 4 handles IP addresses is described in Google's documentation). Through it Google receives the pages you view, the time, the page you came from, your device, browser and language, and a rough location derived from your IP address, and it sets the _ga cookies listed below so that repeat visits can be told apart.

If you press No thanks, the browser writes denied, the loader is never inserted and no cookie is set. If your browser sends the Global Privacy Control signal, we read it as No thanks and do not show the bar at all; a choice you make on the site afterwards takes precedence. Changing from Allow to No thanks stops further measurement on the spot (Google's ga-disable flag) and expires the _ga cookies the page can reach.

You can change your choice at any time here, or with the Analytics choice link in the footer of every page, which brings the bar back:

Beyond that, you can block googletagmanager.com with a content or tracker blocker, use your browser's tracking protection, or install Google's own opt-out add-on. How Google uses data from sites that use its services is at policies.google.com/technologies/partner-sites, and Google's privacy policy is at policies.google.com/privacy.

5.Accounts

There are none. The site has no sign-in control, no registration and no database behind it, so there is nothing to log in to and no account record to hold. Every page is the same for every visitor, and nothing you do here is tied to a person.

Because there is no account, there is also no password to be stolen, no profile to be sold and no list of readers anywhere. What you choose on the site (reading mode, region, watched pages) stays in your own browser, as the next section describes.

6.Your choices and saved items

Reading mode and region. The local storage keys nuclide.layer and nuclide:region hold your reading level, site language and the region you chose for approvals and access, on this device only. They are never sent to Nuclide or anyone else and do not follow you to another browser or device.

Saved items. The pages you press Watch on and the table views you save are browser-only in the same way. The Saved page checks for changes by fetching Nuclide's own static data files for the pages on your list; export and import move the lists between browsers as a file you keep.

Clearing. Remove watched pages and saved views on Saved, or use your browser's site data controls for nuclide.cc to remove everything in the table below from the device.

7.The weekly issue

Nuclide publishes a weekly issue of what changed in the corpus, and it is a page you read, not a mailing. There is no email box anywhere on the site and no list to join: the issues sit in the open at the archive as static pages with no scripts and no tracking, and the same material is in the changelog and the feeds. Nuclide holds no email addresses because it never collects any.

8.Cookies and browser storage

Nuclide's own code sets no cookies; the only cookies come from Google Analytics, and only once you have pressed Allow. Everything else is local storage, session storage or the service worker cache, all of it on your device.

To clear any of it, use your browser's site data or cookie controls for nuclide.cc.

9.Health information

The reading mode you choose on Nuclide is kept only on your device, in the storage listed above, and is never sent to Nuclide or to Google. No health information leaves your device through this site, and because there is no account there is nowhere for it to be stored.

Two limits are outside our control and worth knowing. First, the address of a page you read (for example a page about one indication or agent) is part of an ordinary page view, so it is visible to Vercel in its request log and, if you have allowed analytics, to Google Analytics as a page view. Second, if you type a condition, a drug or a place into a tool that queries ClinicalTrials.gov, Europe PMC or OpenStreetMap, that query goes to that service from your browser (next section).

10.Other services your browser may contact

Besides Vercel and Google, some features fetch from other services directly from your browser, only when you use them:

• ClinicalTrials.gov: the trial finders send the condition, drug and place you enter to its public API.
• OpenStreetMap Nominatim: the trials-near-you finder turns the place name you type into coordinates.
• Europe PMC (ebi.ac.uk): the latest-papers panels query it for a record's name.
• GitHub: the header fetches the repository's star count about once an hour.
• jsDelivr: the maps load public country outlines from this content network.

Each of these sees your IP address and the request, as any website you visit does, and each has its own privacy policy. Links that leave nuclide.cc open in a new tab; those sites' policies apply once you are there.

11.No advertising, no sale of data

Nuclide shows no advertising, loads no advertising trackers and does not sell, rent or share personal data for marketing or any other purpose. The only measurement is Google Analytics as described above. Nothing about you is used to train models or shared with data brokers.

12.Your rights

Under the EU General Data Protection Regulation and the UK GDPR you can ask to see the personal data an organisation holds about you, have it corrected or deleted, restrict or object to its use, receive a copy in a common format (portability), and complain to your supervisory authority. Under the California Consumer Privacy Act you can ask what is collected, have it deleted or corrected, opt out of sale or sharing (we do neither), and not be treated differently for asking.

Most of these you can do yourself:

• Your choices and saved items: they are only in your browser, so clearing the site's data there, or using the controls on Saved, deletes them completely; we hold no copy to delete or hand over.
• Your account: there is none to ask about. The site has no sign-in, keeps no account and holds no email address, so there is no personal record here to see, correct or delete.
• Analytics: change your choice with the control in the analytics section or the Analytics choice link in the footer; Google's controls are at myaccount.google.com.
• Anything else: open an issue at GitHub or email [contact email]. We answer within the time the law allows, normally one month.

13.Children

Nuclide is not directed at children under 16 and we do not knowingly collect personal data from them. If you believe we hold any, contact us and we will have it removed.

14.International transfers

Vercel and Google are companies based in the United States, so request logs and analytics data may be processed there. Each publishes the legal safeguards it relies on for data moved out of the EU, the UK and other places with transfer rules; we cannot verify those arrangements for you here, so please see Vercel's and Google's policies for the current terms.

15.Changes to this policy

This policy changes when the code changes. The date at the top of the page is the date this page was last built, and every earlier version is in the page's history on GitHub.

16.Contact

Open an issue at github.com/casadesante/Nuclide/issues or write to [contact email]. Security matters are covered in the repository's security policy.