Privacy & Cookies

Information, purposes and recipients

Browser storage and its lifetime

Tool answers and saved coordination/cycle records use localStorage on your device. These persistent records have no automatic time-based expiry. They remain until changed or reset through the relevant tool controls, manually removed from browser storage, or removed by the browser, subject to storage availability. A reset can leave an empty coordination record. The tools use browser storage rather than setting application cookies; hosting or security services may use separate cookies.

Working tool copies and CSV screening information also use memory in the active document. Closing or reloading that document ends its in-memory copy. If persistent storage is unavailable, new work may remain only in tab memory while an older device copy remains. Reports and downloaded or shared files can outlive the tab. The public tools have no app accounts; privacy requests are handled by the operator, including verification of authority when someone acts for another person.

Provider processing locations

Cloudflare and Google operate internationally. Information processed for hosting, security and privacy-request email may be processed outside the United States. Cloudflare Web Analytics measurements, where enabled, may also be processed internationally. See Cloudflare’s privacy policy and Google’s privacy policy for their processing.

Compliance tool saves in your browser

The public tools have no sign-in or account. Checklists and assessments save answers, scores, review choices and earlier answer revisions in your browser. The breach tool can save incident details and organization/contact information. The policy builder can save practice details, officer contacts, systems, vendors, program choices and review dates. Tool answers are saved on your device rather than in a cloud answer account. Free text can contain sensitive information; avoid entering patient-identifying details.

Some tools automatically initialize or migrate a browser record before you enter answers. Saved versions and tab coordination protect resets and competing changes. If browser storage is unavailable, a tool may work only in tab memory while an earlier browser copy remains. Follow its storage and recovery warnings.

Another person using the same browser profile may reopen saved intake or answers. Tool saves have no automatic time-based expiry. Review dates and screening reminders do not delete them. Use the relevant tool's reset/recovery controls or browser storage controls to manage saved information, and take care on shared devices.

Screening rosters and public datasets

The exclusion tracker reads CSV rosters and quick-check names in the active tab's memory. Names, dates of birth, NPI values, roles, file details and screening matches are not included in its persistent cycle record. That browser record saves participation, screening cadence and completion information. Closing or reloading the tab loses its in-memory roster; exported files or reports can last longer.

When you screen a roster, the tracker requests a fixed public Medi-Cal exclusion dataset from the California Health and Human Services open data API. The request does not send the entered roster or individual search names. If the request fails or is incomplete, the tool uses its bundled snapshot. The OIG LEIE snapshot is loaded from this site. CHHS and the hosting provider receive ordinary request metadata for those requests. Disabling optional analytics does not stop screening or dataset access.

Reports, exports and resets

Copy, print, download and report controls run locally. A Seven Elements workspace export creates a file with questionnaire details, scores, review records and an organization name you supply. Policy and breach reports can include entered details. Screening copies, print/PDF output and calendar files may also preserve information outside this tab.

Closing the site or resetting a tool does not remove downloaded files, clipboard copies, print/PDF output or copies you share. Each tool's reset applies only to its own saved records. Some resets leave an empty coordination record rather than removing every storage entry. Privacy preferences does not reset tools, read answers or remove files.

Hosting, links and email

We use Cloudflare to host and deliver this site and help protect it from malicious traffic. Cloudflare processes network and request information, which can include IP addresses and traffic information. Hosting and security processing continues when optional analytics is disabled. Hosting and security records follow the provider's applicable service policies and operational or legal retention needs; there is no single retention period stated here for every request record. CHHS controls its own request records for the dataset service.

Reference links open external resources when followed. Email links open your mail application. Privacy-request emails are received in Gmail and retained until manually deleted. There is currently no fixed retention period for these emails. Deleting an email normally moves it to Gmail's Trash, where it remains recoverable for up to 30 days unless permanently deleted sooner.

We do not currently use this site's information for promotional campaigns, sell it or share it for targeted advertising. Service providers still process information for the services described here.

Privacy preferences

Where enabled for this site, Cloudflare Web Analytics uses a JavaScript beacon that can send page-use and performance measurements to Cloudflare. Cloudflare documents measurements such as page views, page paths, referring sites, country, browser and device type. See Cloudflare Web Analytics and its data dimensions.

Cloudflare says this product does not use cookies or local storage to collect usage metrics and does not fingerprint visitors for displaying analytics. This describes the analytics product; the site storage and hosting/security processing explained in this notice remain separate. See Cloudflare's description.

Cloudflare documents seven days of unsampled beacon data followed by sampled storage, and access to the previous six months of data. These are not promises that all analytics data or provider backups are deleted after six months. We have not established a complete deletion period for those records. See Cloudflare's analytics FAQ.

Privacy preferences does not change how this site handles Do Not Track or Global Privacy Control signals. This panel offers no analytics switch.

Privacy preferences provides information and does not turn analytics on or off or record a tracking choice. It does not change tool saves, screening, resets, reports or exports. Other sites have separate settings. Contact [email protected] about analytics or a privacy request.

Questions and requests

Email [email protected] to ask about information you have sent to us or request a copy, correction or deletion. Identify Goulter Compliance Advisory and the request you want to make. Please do not send unnecessary sensitive information.

Before providing or changing information, we may ask for information needed to verify your identity or your authority to act for someone else, including a child. We will explain what information the response covers and any information we cannot provide or remove. Browser-held tool answers and downloaded files are not automatically included in a request to us. We can explain the relevant device controls; removing a cloud or email record does not remove those local copies.

Return to Goulter Compliance Advisory