Privacy Policy

The short version

• We never ask who you are. No account, no login, no name, no email address. We have no way to contact you and no way to connect what you do here to who you are anywhere else.
• The matching runs in your browser. Your profile is compared against trial criteria on your own device, not on our servers.
• We do record what people search for. The cancer type, the biomarker names, and the eligibility filters you set are logged as anonymous usage data, so that we can continue to improve our results. Details below.
• Your location goes to a mapping service. If you enter a ZIP or city to find nearby sites, we send it to OpenStreetMap to turn it into coordinates.
• ChatGPT app: your queries are sent to our API to retrieve matching trials, but we do not store them.

We do not sell data, run advertising, or track you across other websites.

What we collect on the web app

Matching runs on your device

The matching engine runs locally in your browser tab. Your profile is compared against trial eligibility criteria on your own device, and the profile itself is cleared when you close or navigate away from the page. We do not keep a copy of it and we cannot reconstruct one.

What a search records

Separately from matching, we log what was searched for so that we can continue to improve our results. When you run a search we record:

• the cancer type you selected
• the biomarker gene names you entered (for example EGFR)
• the eligibility filters you set, such as stage, ECOG, age and prior therapy
• how many trials matched, and which trials you opened

What is not attached to those records: your name, your email, any account, and your IP address. Instead of an IP address we store a shortened one-way hash of it, plus a session identifier that expires when you close your browser.

One identifier does persist: our analytics provider stores a random anonymous ID in your browser’s local storage, which survives closing the browser, so repeat visits from the same browser can be counted as repeat visits. It contains no personal information and is not linked to any identity. Clearing your browser storage resets it.

Location

If you enter a ZIP code, city or address to find trial sites near you, that text is sent to OpenStreetMap to convert it into map coordinates. It is not stored with your search. We record only whether a location was used, never the location itself.

Page analytics

Page views are recorded in three places: our own database, PostHog (configured without user profiles, without session recording and without autocapture), and Vercel Analytics. These records include the page visited, referrer, browser user agent, approximate country or city derived from your IP, and the IP address itself in our server logs. See Vercel's privacy policy.

What we collect in the ChatGPT app

When you use OncoMatch through the ChatGPT app, your queries, including cancer type, biomarkers and clinical profile details, are sent from OpenAI's servers to our API. We use this information only to retrieve matching trials and return results. We do not store, log, or retain these queries on our side.

Data is transmitted over secure HTTPS connections. OpenAI processes the data you submit through ChatGPT according to their own policies. We do not control how OpenAI processes or retains data once it is submitted through ChatGPT. See OpenAI's privacy policy.

Third-party services

• Supabase hosts our trial database and stores anonymous feedback. Data is stored in the US.
• Vercel hosts the OncoMatch application and collects anonymous analytics. Standard server logs may include IP addresses.
• PostHog provides product analytics and receives the page-view and search events described above. It is configured with no user profiles, no session recording and no autocapture.
• OpenStreetMap converts a ZIP code, city or address you enter into map coordinates so we can find nearby trial sites.
• OpenAI processes queries when you use the ChatGPT app. Subject to OpenAI's privacy policy.

Children

OncoMatch covers childhood cancers, including neuroblastoma, osteosarcoma, rhabdomyosarcoma and DIPG, so young patients are part of who this site is for. It is written for patients, families and clinicians rather than for children to use on their own, and we would expect a parent, guardian or clinician to be the one searching.

We do not collect personal information from anyone, of any age. There are no accounts, no logins and no email addresses, so there is nothing for us to collect from a child.

Medical disclaimer

OncoMatch is a trial discovery tool, not a medical device or clinical decision support system. It does not provide medical advice, diagnose conditions, or determine eligibility for any trial. Always discuss trial options with your oncologist before contacting a study site.

Contact

Questions about this policy: info@oncomatch.org