What halfrx stores about you

Three things are recorded, one of them only if you ask for it, and one thing you type can leave this server. Everything below names the table, the cookie or the endpoint it describes, so it can be checked rather than believed — this page was corrected within the hour when its first version claimed the site set no cookies and the chat set one.

One cookie, and no third party watching

There is no Google Analytics, no Meta pixel, no advertising network and no fingerprinting. Nothing here follows you to another site, because nothing here knows you arrived from one.

Reading the site sets no cookie at all. Using the chat sets one, named halfrx_chat: a random identifier, readable only by the server, valid for one hour, so a follow-up question knows what the previous one was about. It holds no information about you — it is a key, and the thing it unlocks is described below.

What is recorded

A page counter

When a page loads, the browser posts its path to /api/hit, which adds one to a counter for that path on that date. The row holds the path, the date and the number. Not your address, not your browser, not a visit identifier — there is nothing in the table that could be traced back to a person, because a count of visits to /cost on a Tuesday is not about anybody. Obvious bots are dropped by user agent before counting, and the user agent is not stored either. Reading a page sets no cookie and needs no identifier of any kind.

Clicks on paid links, and only those

Where an outbound link earns a commission, it goes through /go/ and the click is recorded as the card's name, the page you came from and the time. Links that earn nothing go straight out and are never counted. Every paid link says so beside itself, and a company under an open FTC action gets no paid link at all — see how the score is built.

Your email, if you ask for a price alert

Subscribing stores the address you type, the card you asked about and a random token used to confirm and to unsubscribe. It is used for that one purpose. It is not sold, not shared, not added to a mailing list and not used to contact you about anything else. Every alert carries an unsubscribe link, and unsubscribing stops it immediately. If you want the row deleted rather than marked unsubscribed, email hello@halfrx.com and it will be.

What leaves this server

The chat is the only feature that sends anything you type to another company. A question asked there is passed to DeepSeek, which generates the answer; the site sends the question and the card data it needs, and nothing else.

Your side of the conversation is also held here while it is happening — in the running process's memory, not in the database and not on disk. At most the last twelve exchanges, for at most an hour, and gone whenever the server restarts. Nothing about it is written down. The rate limiter that stops one visitor flooding the chat also holds addresses in that same memory for a short window, and nowhere else.

If you would rather nothing you type left this server, do not use the chat — every figure it can quote is on a page you can read directly, and the whole catalogue is published at catalogue.json.

What never leaves your browser at all

The appeal letter builder and the prior authorisation pack run entirely in your browser. The state you pick, the denial reason, the diagnosis, the letter that comes out — none of it is sent anywhere, stored anywhere or seen by anyone here. That is deliberate: they are the two places on this site where a reader would be typing something medical about themselves.

Server logs

The web server keeps ordinary access logs — address, path, time, user agent — the way every web server does, for debugging and abuse. They are not joined to anything above and are not used for analytics. Cloudflare sits in front of the site and keeps its own logs under its own terms.

Children

This site is written for adults making decisions about prescription medication and is not directed at children. No age is collected, so none is verified.

Asking for your data, or its removal

The only record that could belong to a person is a price-alert subscription, and it is keyed by the address you gave. Email hello@halfrx.com from that address and it will be returned or deleted. There is nothing else to return: the page counter and the click log contain no identifier that could be matched to anyone.

Changes

If what this page describes changes, this page changes with it, and a material change is logged at corrections the same way a wrong price is. This is the version in force today.

Getting in touch

hello@halfrx.com for anything, or corrections@halfrx.com if a figure here is wrong — a correction reaches the page faster than a complaint does.