Privacy

Who runs RxTrail

RxTrail is a small, invite-only research tool for people who work with US drug regulatory records. It is run by its owner. For any question about your information, write to vikas2@gmail.com.

What we keep about you

• Your name, email address and profile picture, as Google gives them when you sign in with Google, or your email address when you sign in with an emailed link.
• When you signed in, and the internet address and browser each sign-in came from (kept with that sign-in, to protect accounts from misuse such as repeated sign-in attempts).
• What you save and do in RxTrail: collections, notes and comments, saved comparisons, your preferences, and the reviews you make (for example verifying or rejecting a proposed link).

We do not ask for passwords, and we never see your Google password.

Why we keep it

• To sign you in, and to let in only the people who were invited.
• To keep your saved work for you, private to your account.
• To keep a record of expert reviews: who verified or rejected what, and when. This record is what makes the reviewed information trustworthy, so it is kept even if your access ends.

Where it is kept

• Database: Supabase, in the United States.
• Stored files: Cloudflare R2.
• The website itself: Render, in the United States.
• If you sign in with an emailed link, the email service that delivers the link handles your email address.

Cookies

We use only the cookies that signing in needs (a session cookie that keeps you signed in, and a short-lived one while Google sign-in completes) and one that remembers whether you chose the light or dark look. No advertising or tracking cookies. We do not sell your information or share it for marketing.

How long we keep it, and your choices

• Your account and saved work are kept while you have access. A sign-in lasts up to 30 days; an emailed sign-in link works once, for 15 minutes.
• When access ends, the account is deactivated rather than erased, so the record of reviews stays intact. Ask by email at vikas2@gmail.com to have your account deactivated, or for a copy (export) of what we hold about you and your saved work.

Public records are not personal data

The FDA and other government records shown in RxTrail (labels, approvals, letters and the like) are public documents, shown with their sources. They are not information about you. See also the terms.