Privacy Policy

1) Introduction & Scope

This Privacy Policy explains how OncoForge (“we”, “us”, “our”) collects, uses, discloses, and protects information in connection with oncoforge.org and related services (the “Service”). By using the Service, you agree to this Policy and our Terms & Conditions.

2) Who We Are

OncoForge provides educational resources on anti-cancer agents (with linked studies), carcinogens/potential carcinogens, prevention topics, saved legacy notes, alternative therapy summaries, and myth-busting content. We are not a HIPAA-covered entity and the Service is not a medical device or clinical decision support tool.

3) Information We Collect

• Information you provide: account details (e.g., email), profile info, protocol drafts (your user-entered agents/amounts/notes), support requests, feedback.
• Automatically collected: device and usage data (IP address, browser type, pages viewed, timestamps, referrer/UTM), approximate location (derived from IP), cookies and similar technologies.
• From third parties: limited information from service providers (e.g., payment processors if applicable), analytics, error reporting, and authentication providers.

4) How We Use Information

• Provide, operate, secure, and troubleshoot the Service (including preventing abuse/fraud).
• Maintain and improve features (e.g., saved notes, search, navigation).
• Personalize content presentation and remember preferences (e.g., layout, session state).
• Communicate about updates, security alerts, and administrative messages.
• Comply with legal obligations and enforce our Terms.
• With your consent, for optional features (e.g., newsletters, beta features).

5) Legal Bases (EEA/UK/Switzerland)

Where GDPR or similar laws apply, we process data under the following legal bases: performance of a contract (providing the Service), legitimate interests (security, analytics, improvement), consent (where required), and legal obligations.

6) Cookies & Similar Technologies

We use cookies and similar technologies for essential operations, analytics/performance, and remembering preferences. You can control cookies through your browser settings; disabling certain cookies may impact functionality. If we implement a cookie preferences tool, your choices will be honored for that device/browser.

7) Analytics, Measurement & Links

We may use privacy-respecting analytics and error logging to understand feature usage and reliability. We also include links to third-party studies and resources; their privacy practices are governed by their policies. Affiliate links may be present; purchases you make are handled by those third parties.

8) AI/Automated Features

Portions of the Service may use AI or automated systems (including beta features). Outputs can contain errors or omissions and are provided for educational use only. We do not use automated decision making to determine your eligibility for services or make legal/clinical determinations about you.

9) How We Share Information

• Service providers: hosting, security, analytics, email delivery, payments (if any) receive information to operate on our behalf under confidentiality obligations.
• Legal/Compliance: to comply with law, enforce our Terms, or protect rights, safety, and security.
• Business transfers: in connection with a merger, acquisition, or asset sale; we will continue to protect your information as described here or notify you of changes.
• With your direction: for example, when you export a PDF to share with your clinician or otherwise share your own content.

10) Non-HIPAA Notice

We are not a HIPAA-covered entity and information you provide may not be protected by HIPAA. Please do not upload sensitive health information unless you understand and accept these limitations. Always consult your clinician before acting on any information from the Service.

11) Data Retention

We retain information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data category and usage. Backups and logs may persist for a limited period.

12) Security

We use reasonable technical and organizational measures to protect information, but no method of transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of your credentials and for activity on your account.

13) International Transfers

We may process and store information in countries other than your own. Where required, we implement appropriate safeguards (e.g., Standard Contractual Clauses) for cross-border transfers.

14) Your Privacy Rights

• EEA/UK/Switzerland (GDPR): access, rectification, erasure, restriction, portability, objection, and withdrawal of consent (where processing is based on consent).
• California (CPRA/CCPA): right to know/access, deletion, correction, opt-out of “sale”/“sharing” (as defined by law), and non-discrimination for exercising rights.
• Other regions: rights may vary under local law; we will honor applicable requests.

To exercise rights, contact support@oncoforge.org. We may verify your request and identity as permitted by law. Authorized agent requests must include proof of authorization.

15) Do Not Track & Preference Signals

Some browsers offer “Do Not Track” or preference signals. We will honor legally required opt-out mechanisms to the extent applicable to our data practices and features at the time.

16) Children’s Privacy

The Service is not directed to children. Do not use the Service if you are under the age of 18 (or the age of majority in your jurisdiction). If you believe a minor has provided us information, contact us to request deletion.

17) Third-Party Sites & Services

Our links to third-party sites and resources are provided for convenience. We do not control their privacy practices. Review their policies before providing information or using their services.

18) Changes to this Policy

We may update this Policy from time to time. The updated Policy applies to your continued use after posting. If you do not agree, stop using the Service.

19) Contact Us

Questions or requests? Email admin@oncoforge.org.
Last updated: October 15, 2025