Privacy

Who operates this site

Rakesh Pai operates Open Health Signals, an independent project. The controller for the mailing list and the contact form is Rakesh Pai. Rights requests go to contact@openhealthsignals.org.

What is collected

The subscribe form asks for an email address and a consent checkbox. The list stores that address, the time you consented, and the IP address of the request. The contact form stores the name, email, message, interest type, and any organization, role, or link you choose to add.

The lawful basis is consent. The address is not active until the confirmation link is opened.

Who processes it

• Cloudflare hosts the site on Cloudflare Pages, serves it through its CDN, and runs Turnstile on the contact form.
• Supabase stores the mailing list, contact messages, and the owner sign-in.
• Resend sends the confirmation email and, after you confirm, the briefing. Resend is not the list.

The list is not sold. It is not shared with advertisers or data brokers. A bounce or a complaint from Resend marks the address so it is not mailed again.

Cookies

Cloudflare may set strictly necessary security cookies, such as __cf_bm, to protect the site and to run Turnstile. The site does not use analytics cookies or advertising cookies. No cookie banner is shown, because these cookies are strictly necessary.

How long it is kept

• A subscription that is never confirmed is deleted after 30 days.
• After you unsubscribe, only a suppression record is kept: the address, the unsubscribed status, and the time. The request IP and the confirmation token are removed.
• Contact messages are deleted after 12 months.

Deletion runs on a database schedule (purge_personal_data). Access and erasure requests that do not use the signed unsubscribe link are honored within ten business days.

Your rights

You can ask for access, correction, erasure, restriction, objection, or a portable copy of the address we hold. Email contact@openhealthsignals.org. The signed link in each issue, and the one-click POST a mail client sends to that link, unsubscribe the address immediately. The public snapshot and the newsletter archive do not contain subscriber addresses.

Consumer health data

Washington’s My Health My Data Act, and similar laws in other states, treat some inferences about health interests as consumer health data. Subscribing to a briefing about inflammatory-disease drug safety can indicate an interest in that topic. This section is the consumer health data privacy policy for that information.

• Categories: email address, consent time, and the IP address of the subscribe or unsubscribe request. We do not ask for a diagnosis, the medicines you take, or any other health detail.
• Purpose: to send the briefing you asked for, and to keep you off the list if you unsubscribe, bounce, or complain.
• Sources: you, when you submit the form or open a link.
• Sharing: Cloudflare, Supabase, and Resend, only to host the site, store the list, and send the email. No sale. No sharing for advertising.
• Rights: you may confirm whether we hold this data, access it, withdraw consent, and ask for deletion. Email contact@openhealthsignals.org, or use the unsubscribe link to withdraw consent immediately.

Do not put personal health information in the contact form. To report a side effect to the FDA, use MedWatch.

Public data on the dashboard

Data provided by the U.S. Food and Drug Administration (https://open.fda.gov). This site is not affiliated with or endorsed by the U.S. Food and Drug Administration. Publication lists show titles and links only. For research and informational purposes only. Not medical advice. Do not stop or change any medication without talking to your doctor.