Privacy Policy

Last updated: July 14, 2026

This policy explains what CTICases collects when you use cticases.com, why, and the choices you have. Data collection is kept to the minimum needed to run a free educational archive.

What is collected

• Your email address — collected when you create an account. Sign-in is passwordless: a one-time code is sent to your email, and no password is ever stored.
• Your saved cases (favorites) and any case reports you submit via the flag button.
• Basic technical data — your IP address and request metadata are processed transiently to deliver pages, prevent abuse, and enforce rate limits. No advertising or tracking profiles are built.
• Local preferences — your light/dark theme choice is stored in your browser's local storage, not on any server.

Health information about you is never collected, and your data is never sold or rented.

Cookies

A single essential session cookie keeps you signed in. It is strictly necessary for the account features to work, so it is set only after you sign in. No advertising or cross-site tracking cookies are used.

Third-party services

CTICases relies on a small number of providers to operate:

• Cloudflare — hosting, database, and bot protection (including the Turnstile "are you human?" check on sign-in). Requests pass through Cloudflare's network.
• Loops — sends the one-time sign-in codes by email.
• YouTube (Google) — case videos play in an embedded YouTube player; YouTube may set its own cookies when a video loads, under Google's privacy policy.

Legal basis (EEA/UK users)

Where the GDPR / UK GDPR applies, email and account data are processed to provide the service you request (contract), and technical data is processed to keep the service secure and available (legitimate interests). The site is intended for academic and healthcare professionals and is not directed at children.

How long data is kept

Account data is kept until you delete your account. Sign-in codes expire within minutes, and expired sessions and rate-limit counters are cleared automatically.

Your rights

• Delete everything, yourself: sign in, open your dashboard, and choose Delete account. This permanently erases your account, favorites, and reports.
• Access or correct your data, or ask questions about this policy, via the contact form.

Changes

This policy may be updated as the site evolves. Material changes will be reflected by the "last updated" date above.

Contact

Questions about privacy? Use the contact form.