Privacy
Demo privacy notice
This demonstration processes synthetic data only. It is not a service and collects nothing about you.
- Synthetic data only
- Every member, clinician, laboratory, tenant, and value is fictional and comes from fixtures checked into the repository. There is no way to enter real health information.
- Local-only deployment
- The stack binds to the loopback interface of one machine. Nothing is published to the internet and no data leaves the host.
- No analytics, trackers, or remote assets
- Pages load no third-party scripts, fonts, images, or pixels. A Content Security Policy with no external hosts is applied to every response.
- The session cookie
- Choosing a demo persona sets one HttpOnly, SameSite cookie that is signed by the server. It holds a fictional persona identity and an expiry — no health data, no token usable elsewhere. Nothing is written to browser storage. Signing out deletes it.
- Public pages
- This page and the landing page are readable without a session and never request member data.
Real data is a separate decision
The privacy roles, agreements, notices, retention rules, and records policies that a real deployment would require are an owner and counsel gate. They have not been established here, and nothing in this demonstration should be read as if they had.