The short version
FindMySite has no user accounts, advertising, or product analytics in its current code, and it keeps no record of your searches. The only data it stores is an email address you choose to give for the optional “tell me when it's live” list described below. It does not set its own tracking cookies or save searches in local browser storage. Search requests and ordinary technical connection data are nevertheless processed by Cloudflare, ClinicalTrials.gov and PubMed, and external map and font services receive requests as described below.
Search information
A disease, indication, asset, sponsor, status, country, or city that you submit is sent over HTTPS to FindMySite's same-origin Cloudflare Worker. The Worker validates the request and forwards the permitted query to the public ClinicalTrials.gov API. Search terms can therefore appear in request URLs, operational logs, and the short-lived edge cache.
Optional email list
Study cards show “Publications” and “Regulatory” as coming. If you enter your email address there, FindMySite stores that address, which of the two you asked about, and the date, in a Cloudflare key-value store. It does not store your IP address, browser details, or the search you were running. We use the address only to tell you when that feature is available, we do not share or sell it, and we will not add you to other lists. To have it removed, email admin@physiolayer.com from that address and it will be deleted. Cloudflare processes the request and stores the data on our behalf.
Technical data and service providers
Cloudflare delivers and protects the service and may process IP addresses, request metadata, browser/device information, security signals, and traffic logs. ClinicalTrials.gov receives the forwarded source query. When study cards are shown, the Worker also sends their NCT numbers (never your address) to ClinicalTrials.gov and to the US National Library of Medicine's PubMed service to find suggested publications; the answers are cached at the edge for up to six hours and are not linked to you. OpenStreetMap receives a request when an interactive facility map is rendered. Clicking an external study or policy link takes you to that provider.
Storage and retention
Study records are aggregated in browser memory and are cleared by a refresh or closed tab. FindMySite does not intentionally persist them in an application database; the only stored data is the optional email list above. The Cloudflare Worker may cache an official API response at the edge for up to five minutes. Cloudflare can retain operational and security logs according to the account configuration and Cloudflare's policies; upstream providers apply their own retention practices.
Security
FindMySite uses HTTPS in production, restrictive browser security headers, an allow-listed source gateway, and bounded query parameters. No internet service can promise absolute security, so FindMySite should not be used to transmit sensitive information.
Your choices and rights
You can avoid submitting a search or loading a facility map. Your location may give you rights to request access, correction, deletion, restriction, or objection concerning personal data. FindMySite is operated by Physiolayer, which is based in India. Write to admin@physiolayer.com for a privacy or legal request. FindMySite is intended for professional research planning and is not directed to children.
Changes to this notice
This page will be revised when FindMySite's data practices or service providers materially change. The effective date at the top identifies the current version.