Privacy & Cookies

The short version

• This website sets no cookies and runs no analytics or advertising scripts at the time of writing.
• There are no accounts, no newsletter, and no contact forms — so there is nothing for us to store about you.
• Our hosting provider keeps standard server logs, which include IP addresses.
• If analytics are ever added, nothing will load until you have accepted them in the banner, and this page will be updated first.

Who is responsible

RootCausa (rootcausa.com) is an independent project. For any question about this policy, or to exercise the rights described below, write to privacy@rootcausa.com.

What this website collects

Nothing that we choose to collect. There is no form, no login and no tracking pixel on any page.

Hosting logs. The site is served by Firebase Hosting (Google). Like any web server, it records each request — IP address, time, the page requested, the browser’s user-agent string — for delivery, security and abuse prevention. These logs are held by Google under its own retention rules and may be processed outside the European Economic Area. The legal basis is our legitimate interest in running a site that stays online and secure (Art. 6(1)(f) GDPR).

Search. The search box runs entirely inside your browser against a file downloaded with the page. What you type is never sent to us or to anyone else.

Cookies and local storage

Today the site sets no cookies at all.

Your answer to the consent banner is kept in your browser’s local storage under the key rootcausa.consent. It never leaves your device and is only read to decide whether to show the banner again. Clearing your browser’s site data removes it, and you can change your answer at any time with the Cookie settings link in the footer.

If analytics are switched on

We may add Google Analytics 4 to understand which articles are worth writing more of. If that happens:

• No analytics script loads until you press Accept in the banner. Declining means nothing is loaded — not a reduced version, nothing.
• The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via Cookie settings. Withdrawing also clears the analytics cookies we can reach.
• IP anonymisation is enabled and Google’s advertising features and signals are switched off, so the data is not used to build advertising profiles.
• Google acts as our processor and may process data in the United States under its standard contractual clauses and the EU–US Data Privacy Framework.
• This page will be updated before any such change goes live.

The mobile app

RootCausa — Symptoms Tracker is a separate product with its own privacy policy, published with its app store listing. The app works fully offline: your health log stays on your device, there is no account to create, and there is no server for your entries to be sent to. Health data is never sold, and never used for advertising.

Third parties

There are none embedded in these pages: no fonts, scripts, images or videos are loaded from another domain. Links to external sites are always visible as links, and those sites have their own policies.

Your rights

If you are in the EU or UK, you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, and to data portability. Because this site holds no personal data beyond the hosting logs described above, most requests are answered by explaining exactly that.

Write to privacy@rootcausa.com and you will get an answer within 30 days. You also have the right to complain to your national data protection authority.

Changes

This policy was last updated on 2 September 2026. Material changes will be noted here, and the consent banner will ask again where consent is required.