YOUR EYES. YOUR INFORMATION.

A little clarity about privacy.

Last updated September 7, 2026. This notice describes the data handling implemented in this application.

During your screening

Your calibration, responses, and results are held in memory in your browser tab. eyeclinic does not use a camera or microphone, collect your payment card details, or store screening responses in browser storage. Closing or reloading the tab clears your progress. Standard hosting request logs may include technical information such as your IP address and browser.

When you download a PDF

Your PDF is generated in your browser and saved to your device. This action does not upload your report to our database or public storage. You control where you keep or share it.

When you request an email

Only after you give explicit consent, the app saves your email address, screening date, calibration, viewing distance, correction choice, both-eye results, consent timestamp, and delivery status in PostgreSQL through Payload CMS. Resend processes your email address, report contents, and PDF attachment to deliver your message. Email is not a confidential clinical portal.

Cloudflare Turnstile may process technical browser information to prevent automated abuse when the email form is opened. Short-lived, hashed email and IP rate-limit keys are used for abuse prevention. Expired keys are removed opportunistically after successful report dispatches. Raw IP addresses are not stored in screening records by the application.

Storage and access

Screening records are restricted to administrators and the verified patient account with the matching email. Public registration is disabled. Vercel Blob is used for site media; personal screening PDFs are not uploaded there. Saved screening reports have no automatic expiry in this implementation and remain until deleted by an administrator.

Access and deletion requests

If you received an emailed report, reply to that message to contact the site operator about accessing or deleting the saved screening record. The operator must verify your identity before fulfilling requests. Deleting a database record does not delete copies already delivered to your mailbox, downloaded, or shared by you.

Your choice

Email is optional. You can finish a screening and download your report without submitting an email address or creating an account. There is no marketing subscription or advertising analytics built into this app.