Privacy policy

Effective date: [LAUNCH DATE — set before go-live]

This policy is short because we collect almost nothing. That is deliberate (operating plan Section 4.8), not an oversight.

What we collect

• Your ZIP code — transiently. The only input on this site is a five-digit ZIP code. It is processed in your browser to determine your state, then passed to HealthSherpa in the redirect URL if you continue. We never store it. Our analytics records only the state derived from it, never the ZIP itself.
• Privacy-configured analytics. We use analytics with Google Signals and ad-personalization disabled to count page views and ZIP submissions at the state level. No advertising or remarketing pixels of any kind run on this site.

What we never collect

No names, phone numbers, or email addresses. No accounts or logins. No health information of any kind. No forms other than the ZIP field. Because we hold no personal health information, this site is not a HIPAA covered entity — and more importantly, there is simply nothing here to breach, sell, or subpoena.

When you leave this site

Entering your ZIP code redirects you to HealthSherpa, a CMS-approved Enhanced Direct Enrollment partner. Anything you enter there — household details, income, application information — is governed by HealthSherpa's privacy policy, not this one. HealthSherpa's security posture is held to the same federal standards as HealthCare.gov.

Questions

Questions about this policy can be directed to the contact listed on our About page.