Privacy policy

The short version

We keep your email address and what you bought. Your symptom entries stay on your own device unless you explicitly choose to save them with us. We do not sell anything to anyone, ever.

What we collect

Your email address and purchase record, so we can deliver what you bought and refund it if you ask. Payment details are handled entirely by Stripe — we never see or store your card number. Basic analytics about which pages are visited, so we know whether the site works.

Your health information

This matters more than the rest, so it is stated plainly: the symptoms you record are yours. They are not sold, not shared with advertisers, not used to train anything, and not shown to us unless you send them to us for support.

We are not a healthcare provider and this is not a medical record, which means HIPAA does not apply to it. That is not a loophole we are using — it is a reason to be more careful rather than less, and it is why the design keeps your entries on your device by default.

Who else is involved

Stripe for payments. Resend for email. Vercel for hosting. Each sees only what it needs to do its job.

Deleting your data

Email info@30secondcase.com and we delete everything we hold about you. We keep the minimum transaction record the law requires for tax, and nothing else.