Privacy
What we collect, and what we deliberately do not
Short version: your kidney stone history, your quiz answers, and every value from your 24-hour urine report stay in your own browser. They are never sent to us, never stored on a server, and never reach an analytics tool. We could not look them up if we wanted to. The only personal data we hold at all is an email address, and only if you chose to give us one.
Last updated 18 August 2026
Who is responsible
This site is run by Romain Latry as an individual, who is the data controller for anything described below. It is intended to become a registered association before the end of 2026; this page will name the entity when that happens.
Contact: hello@livekidneystonefree.com
Your health information
It never leaves your device
The 24-hour urine organiser and the stone history quiz both run entirely in your browser. Values you type are held in your browser’s local storage, on your own machine. There is no account, no database, and no upload.
Practical consequences worth knowing:
- Clearing your browser data deletes your saved tests. Use the export button first if you want to keep them.
- Your results do not follow you to another device or another browser.
- Anyone with access to your computer and browser profile can see them.
- We cannot recover them for you, because we never had them.
Analytics
No cookies, no recording, nothing on health pages
We use PostHog to count how many people reach which pages. It is configured well away from its defaults:
- Nothing at all is measured on the 24-hour urine organiser, the quiz, or any account page. Not even the fact that you visited.
- No session recording. We do not replay your screen, your clicks, or your typing. The feature is switched off, not merely unused.
- No automatic capture. Most analytics tools record every click and form interaction by default. Ours records only a short list of named events, and any property we did not explicitly declare is discarded before sending.
- No analytics cookie. Nothing is written to persistent storage, which is why this site has no cookie banner. We cannot tell a returning visitor from a new one, and we have decided that is an acceptable price.
- Do Not Track is respected. If your browser sends the signal, nothing is recorded.
The complete list of events the site can send, which is all of them:
- clinician.contacted
- digest.opened
- directory.listing.claimed
- directory.state.viewed
- outbound.clicked
- page.viewed
Data is processed in the European Union. This list is generated from the same file the code reads, so it cannot drift out of date without the page changing too.
The research participation list
If you join the research participation list, we store three things: your email address, your country, and your US state if you gave one. That is the entire record.
We deliberately do not ask how many stones you have had, what type they were, or anything else about your health — even though it would make the list more useful to a researcher. Location is enough to know whether a nearby study is worth telling you about, and it means this list contains no health data at all.
- We never pass your address to anyone — not to researchers, not to universities, not to anyone else. We email you about a study; you decide whether to contact them.
- We do not sell or rent the list, and we will not.
- Contacts are stored with Resend, our email provider, and nowhere else.
- Every email carries an unsubscribe link. Unsubscribing deletes the record.
If you simply write to us, we keep your message so we can answer it.
Your rights
Where the GDPR applies you have rights of access, correction, erasure, restriction, portability, and objection. In practice there is very little to exercise them against, because the health information this site handles never reaches us. For anything we do hold — an email you sent us — write to hello@livekidneystonefree.com.
See also the editorial policy, which covers how content is produced and how commercial relationships are disclosed.