Privacy Policy

Interim policy for the ClaraCover proof of concept. Last updated October 26, 2026.

What we collect: as little as we can

  • Browsing this site requires no account and sets no tracking cookies. We use Cloudflare Web Analytics, which is cookieless and does not identify individual visitors. When you click a partner link, the concierge button, the support link, or a button in the lookup tool, we count the click (which button, which day) in our own records, with nothing about you attached: no cookie, no identifier, no page history. The lookup tool sets one small cookie, described below; it is not a tracking cookie.
  • The email list is strictly opt-in. If you sign up, your address and your answer to the one audience question are stored with our email provider (MailerLite) and used only to send you the guide and our newsletter. Unsubscribe anytime; we never share or sell addresses.
  • The lookup tool works inside your browser. The test codes, diagnosis codes, and state you type are never sent to us or to anyone else; the tool's only question to our server is whether this browser may run another lookup. Asking the same question twice does not use a second lookup: your browser keeps a scrambled fingerprint of the questions it has already answered, on your device only, and the codes themselves are not saved. You can print an answer or email it to yourself; both happen on your own device, through your browser and your own mail program, and we never receive the answer. Your first 5 lookups need nothing from you: a cookie in your browser counts them, and our servers store nothing. To keep going we ask for your email address and send you a confirmation link. When you click it, we store on our own server a random identifier (set in a cookie in your browser for one year), a one-way scrambled version of your address that cannot be turned back into the address, your answer to the audience question, and the date you confirmed. The address itself is stored with our email provider (MailerLite), where it is placed in a "Lookup tool" group and used the same way as the email list above: the guide, the newsletter, unsubscribe anytime. We keep the unconfirmed address for 24 hours while the link is valid, then it is deleted automatically. We never record which codes you looked up, when, or how often. To be removed entirely, email hello@claracover.com and we delete the server record and the MailerLite entry.
  • The Medicare cost comparison works entirely inside your browser. The amounts you type and any claims file you give it are read by the page on your own device and are never uploaded — the file-reading software is served from our site and the math happens locally. One button is the exception, and it says so right next to it: "Email me my summary" sends us two things, with your click as the consent — your email address and the summary totals shown on screen (the option names and dollar amounts). Never the claims file, and never a claim, code, date, or provider from it. We email the summary to you through our email provider (Resend) and keep no copy of it ourselves; your address is stored with MailerLite, placed in a "Cost comparison" group, and used for the summary and our newsletter — unsubscribe anytime, and removal works the same as above. The quieter button, "Email it to yourself instead," opens your own mail program and nothing reaches us. Close the page and everything you entered is gone.
  • The concierge form asks only for the test codes and diagnosis codes on your doctor’s order, your state, an optional Medicare Advantage plan name, and an email address so we can send the answer back. We tell you explicitly not to send your name, Medicare number, or any account numbers.
  • A paid claims review is the one service where we see a person's Medicare records, because that is the job. You share them only after we have spoken and agreed on how; we tell you not to email them. We keep them until the written review is delivered, then delete every copy, and we never share them with anyone or use them for anything else. The request itself comes to us by ordinary email from your own mail program.

If you tell us a price you were quoted

  • We ask for five facts only: the test, the lab company, your state, the price, and the month. We use them to build a public record of what labs charge.
  • We ask you not to send the form itself, because ABN forms carry your name and Medicare number. If one arrives anyway, we record the five facts and delete the message and any attachment right away.
  • If you report by email, we delete your email after recording the facts. A published price is never tied to a person.

How we handle concierge requests

  • The form is run by Tally (tally.so), which stores your submission for us. We answer by email from hello@claracover.com.
  • We delete your form submission, and our emails with you, within 30 days after we answer.
  • We may keep the question itself — the codes and the state — with your email address removed, so we can check and improve our answers. Nothing we keep can be tied back to you.
  • Sending a concierge request does not add you to our email list, and we never use the codes you send for marketing.
  • Want it gone sooner? Email hello@claracover.com and we will delete your request right away.

Services that help run the site

  • The lookup tool's confirmation email is sent through Resend (resend.com), which sees your address and the message.
  • The email form on the lookup tool is protected by Cloudflare Turnstile, which checks that a person, not a program, submitted it. It does not track you across sites.
  • If you choose to support the site, the payment is handled by Stripe. We never see your card details.
  • None of these is used for advertising.

What we never do

  • No selling or sharing of personal information.
  • No advertising networks or third-party trackers.
  • No collection of Medicare numbers, health records, or identity documents.

We may update this policy as the service grows; the date at the top of this page shows the latest version.

Questions: hello@claracover.com