Policy

Privacy

RxCopays is a read-only navigation site. We don't ask for your medical information, we don't host patient accounts, and we don't sell data. Here's exactly what we do and don't collect.

What we DO collect

• Server request logs (handled by Vercel): IP address, user-agent string, URL requested. Retained ≤30 days. Used to diagnose errors and block abuse.
• Voluntary /add-resource submissions: whatever you type into the correction form, plus your IP and user-agent for abuse prevention. Held in our database for as long as it takes to verify and publish or reject. No marketing use.

What we do NOT collect

• No health conditions, diagnoses, prescriptions, or patient records.
• No login accounts — there's nothing to log into.
• No third-party analytics pixels by default (no Google Analytics, no Facebook Pixel, no Hotjar).
• No advertising cookies.
• We don't sell, rent, or trade any data.

Outbound links

When you click a copay card, patient-assistance, or grant application link on RxCopays, you leave our site for the manufacturer's or charity's portal. Their privacy policies govern from that point. We mark these links rel="nofollow noopener"so your browser doesn't leak referrer data.

Children

RxCopays is not directed at children under 13 and does not knowingly collect information from them. If you believe we have, email us via privacy@rxcopays.com.

Changes to this policy

If we materially change what's collected, we'll post the change here and bump the “last updated” date below. Continued use after a change counts as acceptance of the new policy.

Last updated: 2026-04-23.