Privacy
Short version: this is a static website with one small exception. There are no accounts, no logins, and no profile of you anywhere. The only things we collect are what you type into the email form and — if you buy a featured listing — what you give Stripe at checkout.
What we collect
If you submit the email form: your email address, the ZIP code you enter if you enter one, and which page you submitted from. That goes to Resend, our email provider, and never to a clinic.
The form posts to our own server rather than to somebody else’s embedded widget, so two more things exist briefly: the IP address your browser connected from, which our host writes to its request log, and the time you pressed the button. Neither is added to the mailing list, and we use them for one thing — stopping people abusing the form. Our application log of a signup stores a one-way hash of your address, which cannot be turned back into it, plus which page it came from and whether a ZIP was given. The application does not print your address in its logs. Confirmation and unsubscribe links contain signed, encoded contact information; they are not encrypted, and the host may record those URLs in request logs.
Our host can infer an approximate location from your IP address. The finder does not use that estimate to choose your search location.
If you buy a featured listing: checkout happens on Stripe’s own pages. Your card details never touch this site — we never see them. Stripe tells us the facility name, the email and phone you gave it, and the ZIP you bought. We use those to set up and verify the listing.
If you use the ZIP finder: distances and sorting are calculated in your browser. Your browser requests a static ZIP file named for the first three ZIP digits. Search links contain the full ZIP in the URL; opening or sharing one can expose that ZIP to the recipient and to normal hosting request logs. We do not send your search to clinics or call an external geocoding service.
If you press “Use my location”: your browser asks permission to obtain your position. Its own location service may process information to provide that position. The finder uses the returned coordinates on your device to calculate distances; our code does not send them to a server or put them in a shareable URL.
What we do not collect
We never collect scan results. No calcium scores, no reports, no PDFs, no images, no dates of service, no clinician names. There is nowhere on this site to upload one and we do not want them. Nothing here is a medical record and this site is not a covered entity.
What we do with your email address
We send you the guide you asked for. That email carries one link that adds you to the list for occasional site updates — new markets going live, mostly. Resend processes your address to deliver the guide. We create or update your mailing-list contact only after you confirm that link. Asking for the guide again does not change an existing subscription or unsubscribe preference.
We do not sell your address to clinics as a patient lead. Not for money, not as a favour, not bundled into an advertising package. Passing a prospective patient’s details to a healthcare facility for anything of value is the patient-brokering line we do not go near, and it is also the fastest way to make a directory untrustworthy. If a clinic asks us for your details, the answer is no.
Every email carries an unsubscribe link, and supports your email app’s one-click unsubscribe. No login is needed. If our email provider is unavailable, the website shows an error and email apps can retry; you can also email hello@calciumct.com and we will delete you entirely rather than merely unsubscribe you.
Cookies and analytics
This site sets no cookies. Not for advertising, not for analytics, not to recognize you on a second visit. We run no cross-site tracking.
We use Vercel Web Analytics to count page views. It is cookieless: it stores nothing on your device, sets no identifier that follows you between sites, and does not build a profile of you. What we see is aggregate — how many people opened a page, and which site sent them. We cannot see who you are, and we cannot connect a page view to an email address you may have given us. We count taps on Call and online booking links per clinic. When you search by ZIP code, analytics records only the first three digits of that ZIP — a ZIP prefix, not the full code — and how many results came back. It does not record the full ZIP, and it does not attach that prefix to a call or a booking tap. We do not record your name, email or exact location in analytics. Vercel processes that data as our hosting provider.
The email form sets no cookie either. It posts to our own endpoint, so there is no third-party widget on the page to set one.
If we change analytics provider, or ever turn on display advertising, this page will say so — naming the provider and what it sets — before it goes live.
Who processes your data
Three companies, and what each one holds:
| Who | What they hold | Why |
|---|---|---|
| Vercel | Hosting. Request logs including IP addresses, briefly. Cookieless aggregate page counts. | Serving the site and stopping form abuse. |
| Resend | Your email address, your ZIP if you gave one, and which page you signed up from. | Sending the guide and any updates you opted into. |
| Stripe | Advertisers only: payment details, business name, contact details, the ZIP bought. | Taking payment for a featured listing. |
No one else. We do not use an advertising network, a data broker, a CRM, or a session recorder, and there is no pixel on this site.
Outbound links
Clinic phone numbers and booking links leave this site. Once you are on a facility’s own website or phone line, their privacy practices apply, not ours.
Children
This site is not directed at children and we do not knowingly collect information from anyone under 13.
Changes
If this policy changes materially, the date at the bottom of this page changes and the change is described here.
13 October 2026. The analytics section said a ZIP search was recorded in full, with the tap. Analytics has kept only the first three digits, and only on the search itself. This corrects that sentence. What the site collects did not change.
Questions: hello@calciumct.com.
Last updated .