Privacy Policy

1. Information We Collect

Plan search details you enter. To show plans and subsidy estimates we ask for your ZIP code and county, household income, coverage start date, and for each household member their age, sex, relationship, tobacco use and, where it affects eligibility, pregnancy. Some of these details relate to health; we use them only to look up plans and subsidies for you.

Contact form. Your name, email address, topic and message.

Usage and device information. Pages visited, clicks, referring site, browser and device type, approximate location derived from your IP address, and error reports. See section 4.

2. How We Use and Store Your Information

Plan search details are kept in your browser's session storage and sent to our server only to request plans and subsidy estimates from the federal Health Insurance Marketplace API (CMS) or, in states that run their own exchange, from HealthSherpa. We do not keep them on our servers after answering the request, with one exception: if you create a share link, the plan and the search details behind it are stored for 90 days so the link works for whoever opens it.

Contact form messages are used to reply to you. We do not use any of your information for advertising, and we do not sell it.

3. Data Sharing

We do not sell, rent, or trade your personal information, and we do not share it for targeted advertising. We share it only with service providers that help us run Policymage: CMS and HealthSherpa (to return plan and subsidy results), Resend (to deliver contact form messages), and the analytics providers listed in section 4.

4. Cookies & Analytics

We use cookies and similar technologies with these providers:

• PostHog for product analytics, error reports and session recordings (a replay of how pages were used). Recordings mask everything typed into form fields and hide subsidy amounts. Your ZIP code, ages and income are removed from page addresses before they are sent, and we do not send them as analytics data.
• Google Analytics for page view statistics, with the same details removed from page addresses.
• Ahrefs Web Analytics for aggregate traffic statistics.

5. Your Choices

We honor Global Privacy Control. If your browser or an extension sends that signal, none of the analytics tools above load and no analytics cookies are set. You can also block or delete cookies in your browser settings. To ask about, or request deletion of, information connected to you, contact us using the address in section 9.

6. Third-Party Links

Our platform may contain links to external websites, including official health insurance marketplaces and insurer websites. We are not responsible for the privacy practices of these third-party sites.

7. Data Security

We implement industry-standard security measures to protect any information transmitted through our platform. However, no method of electronic transmission is 100% secure.

8. Children's Privacy

Policymage is not intended for children under 13. We do not knowingly collect information from children under 13 years of age.

9. Contact Us

For questions about this privacy policy, please contact us at [email protected].