Site privacy · Updated 2026

Privacy Policy

How this website handles data — which, given what we sell, we think we ought to get right

1. Who we are

This site is operated by Optimus Global Solutions, Tel Aviv, Israel. You can reach us at Optimusglobalsolutions@gmail.com. Full operator details are on our About & Contact page.

2. Your questionnaire answers stay on your device

This is the most important part of this policy. The document generator runs entirely in your browser using JavaScript. The business details you enter — your business name, contact email, address, the health data categories you collect, who you share with, and whether you sell data — are stored only in your own browser's localStorage and are used only to assemble your documents on your own device.

They are never transmitted to us, to any server we control, or to any third party. We have no database, no accounts, and no server-side logging of your answers. If a court or regulator asked us to produce your questionnaire answers, we could not do so, because we never had them. You can erase them at any time by clearing your browser's site data for this domain.

3. Analytics

We use Google Analytics 4 (measurement ID G-56NXQKB9VG) to understand how many people visit, which pages they read, and where visitors drop off. This sets cookies and processes data such as your approximate location (derived from IP address and not stored by us in precise form), device and browser type, pages viewed, referring site, and interaction events — for example, that a questionnaire was started or completed, that a checkout was opened, or that a document was downloaded.

These interaction events record that an action happened, not what you entered. No questionnaire content, business name, email address or health data category is ever sent to Google Analytics or any other analytics service. Google processes this data as described in its own privacy documentation, and may transfer it internationally.

You can opt out entirely by using Google's official Analytics Opt-out Browser Add-on, by enabling your browser's "Do Not Track" or tracking-prevention features, or by blocking analytics cookies with a browser extension. Nothing on this site stops working if you do — the generator functions identically with analytics blocked.

4. Cookies and local storage

We use two categories of client-side storage, and no others:

• Analytics cookies — set by Google Analytics as described above. These are the only cookies this site sets.
• Local storage (not cookies) — wmhmda_answers holds your questionnaire responses so you don't lose progress if you refresh; wmhmda_paid records that this browser has completed a purchase so your export buttons stay unlocked; and wmhmda_license plus wmhmda_license_checked_at store your licence key and the time it was last checked, so you don't have to re-enter the key. All of these live only on your device. They are never sent to us, and we cannot read them.

We do not use advertising cookies, retargeting pixels, social media trackers, session recording, heatmaps, or fingerprinting.

5. Payments

Purchases are processed by Gumroad, which acts as merchant of record. When you click through to checkout you leave this site and enter their environment. They collect the billing information necessary to process your payment and to meet tax and invoicing obligations — typically your name, email address, country, and payment details.

We never see or store your payment card details. We receive order and payout information from Gumroad, which includes your email address and purchase details, so we can provide support and meet our own record-keeping obligations. Gumroad's handling of your data is governed by its own privacy policy.

Licence key checks. After purchase, Gumroad emails you a licence key. To confirm that a key is genuine before unlocking your downloads, your browser sends that key (and our product identifier, but nothing else, and no personal details about you) directly to Gumroad's licence-verification API. This happens once when you enter the key, and at most once every 24 hours afterwards to check it is still valid. If you never enter a licence key, no such request is ever made.

6. Email contact

If you email us, we receive and retain that correspondence in our email account so we can respond and keep a record of support history. We do not add you to a mailing list — there is no newsletter, and we do not send marketing email.

7. What we do not do

• We do not sell, rent, or trade personal information to anyone.
• We do not share your data with advertisers or data brokers.
• We do not run behavioural advertising or retargeting.
• We do not create user accounts or profiles.
• We do not collect consumer health data about you. The health data categories in the questionnaire describe your business's practices, and even those stay on your device.

8. Data retention

Because we hold so little, retention is simple. Questionnaire answers are retained by your browser until you clear them — we hold no copy. Analytics data is retained according to the retention period configured in Google Analytics. Order records from our payment processor are retained as long as required for tax, accounting and legal purposes. Email correspondence is retained while it remains relevant for support or record-keeping.

9. Your rights

Depending on where you live, you may have rights to access, correct, delete, or port personal data we hold about you, to object to or restrict certain processing, and to complain to a supervisory authority. Given the design of this site, the practical position is:

• Questionnaire data — you already have complete control; clearing your browser's site data deletes it permanently, and we cannot access it at any point.
• Analytics data — you can opt out using the methods in section 3, and request deletion via us or via Google.
• Order and email data — email Optimusglobalsolutions@gmail.com and we will action requests within a reasonable period, and within any timeframe required by applicable law. Note that some order records must be retained for tax and accounting purposes even after a deletion request.

We will not discriminate against you or degrade your experience for exercising any privacy right.

10. International transfers

We operate from Israel, and our service providers (Google, Gumroad, and our hosting provider) operate internationally. Using this site involves your data being processed in countries other than your own, including the United States.

11. Children

This is a business-to-business compliance tool and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

12. Security

The site is served over HTTPS and, by design, holds almost no personal data — which is itself the strongest protection we can offer. Payment security is handled by our payment processor. That said, no method of internet transmission or storage is completely secure, and we cannot guarantee absolute security.

13. Changes to this policy

We may update this policy as the site changes. The "Updated" date at the top reflects the most recent revision. Material changes will be reflected here rather than communicated individually, since we have no mailing list to notify.

14. Contact

Questions about this policy, or any privacy request, can be sent to Optimusglobalsolutions@gmail.com. See also our Terms of Purchase & Legal Disclaimer and About & Contact page.