1. What we never collect
There is no field to enter it.
Name, phone, email, date of birth, home address, diagnosis, relationship to the elder, health status, photographs, bank or payment details.
If a phone number, email address, or national ID number appears in the free-text part of a report, we reject it rather than store it. Saying we do not collect something and then keeping it would be a lie.
2. What we do collect
| Cost reports | Facility code, care type, month of payment, itemised amounts, room occupancy, long-term care grade, free-text note |
|---|---|
| Waiting reports | Number of days waited |
| Corrections | What was wrong, what is correct |
| Access record | We do not keep raw IP addresses. We store only a one-way value salted with the current date, solely to stop one person submitting hundreds of times. After a day it can no longer be linked to the previous day's entries. |
3. How it is used
Costs you report are shown to the next person looking at the same facility.
With fewer than three reports we publish no figure — we say the data is thin. A median is only calculated once thirty people have reported. Publishing an "average" based on one or two reports would be an invention.
We do not sell it, share it, or use it for advertising. Gyeot takes no commission from anyone.
How we count visits
We count visits, but we do not follow anyone. To know which gaps to fill first, we need to know what people looked for. We kept that, and removed the part that follows people around.
| Never | No cookies · no raw IP addresses · no user IDs · no session paths (we cannot tell that one person viewed page A and then page B) · no device fingerprinting |
|---|---|
| Counted | Page views · which districts are viewed · searches that returned nothing · taps on a phone number · referrer (domain only) · mobile or desktop |
| Visitor counts | A one-way daily token salted with a secret that is regenerated every day and never stored. We can never tell whether yesterday's visitor came back today. We do not need to |
| Search terms | Counted — unless a phone number, email address, or national ID appears, in which case we discard it |
| Do Not Track | If your browser sends Do Not Track, nothing is counted at all |
| Admin cookie | Only for the person administering the site. Never for visitors |
4. How long we keep it
| Reports | Until removed. Costs older than three years are marked as dated and excluded from the median |
|---|---|
| Access record | Deleted after 30 days |
| Daily totals | Kept indefinitely — they contain no people. Only "N visitors on 25 August" remains, and who those visitors were is already gone |
5. Removal
Because we hold no name or contact details, we cannot tell which report is yours. Tell us which facility and which report, and we will remove it.
Contact projectteamforyou@gmail.com
6. Where it is held
| Site | Cloudflare Pages |
|---|---|
| Reports | Railway · PostgreSQL |
| Not used | No third-party analytics or tracking. No cookies are set for visitors. None |
Changes to this notice are recorded in the corrections log — the same place where we record our own mistakes. We do not change it quietly.
Last updated 25 August 2026 — added how we count visits