Skip to main content

Legal

Privacy Policy

How we collect, use, and protect your information.

Last updated: January 1, 2026 GDPR & CCPA compliant

Summary: DrugCovered does not collect, store, or sell personal information. We do not require registration. We log anonymized usage data (IP hashes, not raw IPs) for analytics only.

1. Introduction

This Privacy Policy explains how DrugCovered ("we," "us," or "our") — operated at drugcovered.com — collects, uses, and protects information when you visit or use our website.

We are committed to respecting your privacy. This policy is designed to comply with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and applicable U.S. privacy laws.

2. Information We Collect

2.1 Information You Provide Voluntarily
  • Contact form submissions: If you submit our contact form, we collect your name, email address, and message. This information is used solely to respond to your inquiry.
  • Drug and ZIP code searches: When you use our comparison tool, you may enter drug names and a ZIP code. We do not link this to your identity. See Section 2.2 for how comparison data is stored.
2.2 Automatically Collected Information
  • Comparison log (anonymized): When you run a plan comparison, we log the search parameters (drugs and ZIP code) along with a one-way hash of your IP address (ip_hash). We do not store your raw IP address. The hash cannot be reversed to identify you and is used only for aggregate analytics (e.g., counting unique comparisons, identifying popular drug searches).
  • Server logs: Our web server may temporarily record standard HTTP access logs (including IP addresses) for security and debugging purposes. These logs are retained for no more than 30 days and are not used for marketing or profiling.
  • Analytics: We use Google Analytics to understand how visitors use our site (pages visited, time on site, geographic region). Google Analytics uses cookies and may collect your IP address, which Google anonymizes. See Section 4 for more on cookies.
2.3 Information We Do Not Collect
  • We do not collect names, email addresses, or any personally identifiable information through the comparison tool.
  • We do not collect health records, Medicare ID numbers, Social Security numbers, or financial information.
  • We do not require account registration to use any feature of this site.
  • We do not build individual user profiles.

3. How We Use Information

We use the information we collect to:

  • Operate and improve the plan comparison tool
  • Understand which drugs and ZIP codes are most commonly searched (in aggregate, not individually)
  • Respond to contact form inquiries
  • Monitor site performance, security, and uptime
  • Comply with legal obligations

We do not sell, rent, lease, or trade any information — including anonymized comparison data — to third parties for marketing purposes.

4. Cookies

We use a small number of cookies:

Cookie Purpose Duration
_ga, _gid Google Analytics — tracks aggregate site usage statistics. No personal data is stored. 2 years / 24 hours
dc_prefs Stores your drug list and ZIP code locally so you don't have to re-enter them on return visits (optional). 30 days

You can disable cookies in your browser settings. Disabling Google Analytics cookies will not affect site functionality. You can also opt out of Google Analytics tracking at tools.google.com/dlpage/gaoptout.

6. Data Retention

  • Comparison logs (anonymized): Retained for up to 24 months for aggregate analytics, then deleted.
  • Contact form submissions: Retained for up to 12 months or until the inquiry is resolved, then deleted.
  • Server access logs: Retained for up to 30 days, then purged.

7. Your Privacy Rights

7.1 GDPR Rights (EU/EEA Residents)

If you are located in the EU or EEA, you have the right to:

  • Access: Request a copy of any personal data we hold about you.
  • Rectification: Request correction of inaccurate data.
  • Erasure ("right to be forgotten"): Request deletion of your personal data.
  • Restriction: Request we limit processing of your data.
  • Data portability: Receive your data in a portable format.
  • Object: Object to processing based on legitimate interests.
7.2 CCPA Rights (California Residents)

California residents have the right to:

  • Know what personal information we collect and how it is used
  • Request deletion of your personal information
  • Opt out of the sale of personal information (we do not sell personal information)
  • Non-discrimination for exercising your privacy rights

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Children's Privacy

DrugCovered is intended for use by adults (18 and older). We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child, please contact us immediately at [email protected].

9. Security

We implement reasonable technical and organizational measures to protect the information we hold, including HTTPS encryption for all site traffic, hashed storage of any IP-derived data, and limited staff access to logs. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last Updated" date. Continued use of the site following changes constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related questions, requests, or concerns, please contact us: