Privacy and your data
You are telling us about surgery you had. That is sensitive, and the law in several states treats it as a special category. Here is exactly how we handle it, in plain language.
The short version
- We never ask for your name, ZIP code, exact surgery date, or photos.
- Health details are optional, kept in a separate record, and you can delete just those while leaving your price report helping other people.
- No advertising or analytics tracker ever sees your health data. None.
- One click deletion, no account needed — just the link we emailed you.
What we collect
Always
- The procedure, the total you paid, the currency, the month and year, and your US region or country.
- A salted hash of your IP address, kept 30 days, used only to stop one person flooding the site. We cannot reverse it.
Only if you choose to give it
- Itemised fees, your surgeon or practice, notes, and a value rating.
- Your email, used only to send your manage/delete link and to verify the submission once. Plaintext is deleted after 90 days; a hash remains for deduplication.
- Health information — how you lost the weight, pounds lost, BMI, height band, complications. This sits in its own record with its own permission.
Why a region, not a city or ZIP
Procedure plus city plus month is already a small group of people. Add a ZIP code and a surgeon could work out which of their patients submitted a report. A price report names a US region or a country, never a city. For the same reason we only take the month of your surgery, never the day, and we refuse to publish a median until a group has at least 5 reports in it.
Your consumer health data rights
Washington’s My Health My Data Act, Nevada’s SB 370, and the health-data provisions of several state privacy laws give you specific rights over this information. We extend these to everyone regardless of where you live, because splitting users by state would be both complicated and tacky. The separate notice for this information is consumer health data.
- Separate, affirmative consent. Health data is never collected as a side effect of submitting a price.
- Right to delete. Self-serve and immediate, at manage my submission. You can delete the health record alone or the whole thing.
- No sale, ever. We do not sell health data, we do not share it with data brokers, and we do not pass it to advertising networks. If we ever change the business model in a way that affects this, we will ask you again rather than quietly updating a policy page.
- Right to know. Email [email protected] and we will send you everything attached to your submission.
Analytics and third parties
The submission pages carry no third-party scripts at all — no advertising pixels, no session recording, no tag manager. Elsewhere we use privacy-preserving, cookieless analytics that records page views and nothing about what you submitted. Health fields are never included in any event payload, which is enforced in code rather than by policy.
The exact wording you agreed to
We store a cryptographic hash of this text with every consent, so the record shows what was actually on screen at the time rather than whatever the current version says.
price data publication
I agree that the price information I am submitting may be published anonymously on ContourCost, and combined with other people's submissions to produce statistics. My name and email will never be shown publicly.
health data collection
I am choosing to share health information (such as how much weight I lost, how I lost it, my BMI, and any complications I had). I understand this is optional, that my price submission will be published whether or not I share it, and that I can delete this health information at any time while leaving my price submission in place.
health data publication
I agree that the health information I shared may be shown publicly in anonymised and aggregated form — for example, "most people in this group lost their weight on a GLP-1 medication". Free-text details I write about complications may be published after review, with anything identifying removed.
email contact
I agree that ContourCost may email me a link to manage, edit, or delete my submission, and may email me once to verify this submission is genuine. I will not be added to a marketing list.
Contact
[email protected]. If you ask us to delete something and the self-serve flow fails, we will do it by hand within 24 hours.