Privacy policy

Your medication list never reaches us

Interaction Checker is a static website. The interaction checker runs entirely in your browser: the drug data is downloaded to your device as ordinary page assets, and the matching happens there. There is no server that receives your list, no account, and no database of users. We could not look at your medications even if we wanted to, because nothing about them is transmitted to us.

Your list is saved in your browser's local storage so it is still there when you come back, and it is encoded in the page address when you use "Copy link" so you can share or bookmark it. Clearing the list or clearing your browser data removes it. If you share a link, whoever you share it with can see the list in the address.

The one optional request that leaves your device

If you look up a drug that is not in our bundled list, the checker offers to search all FDA labels. That request goes directly from your browser to the U.S. FDA's public openFDA service at api.fda.gov and includes only the name you typed. It is subject to the FDA's own privacy policy. We do not see it, and it never happens unless you choose that option.

Pill images

Pill image pages load pictures from img.interaction-checker.com, which is part of this site and is served by Cloudflare, the same host as every other page. Those requests carry no cookies and no information about your list; they are ordinary image loads, the same as the site's icons.

Analytics

We use Plausible Analytics and Google Analytics 4 to understand how the site is used: pages visited, the referring site, country, device and browser type, and a few coarse events (such as which support link was used). Plausible is cookieless and keeps no personal data. Google Analytics is provided by Google, which processes this data on our behalf under its data processing terms; it sets the cookies listed in our cookie policy and does not store IP addresses. We run it with Google signals and ad personalization turned off and do not use it for advertising, and we keep Google Analytics data for 14 months. See Google's Privacy Policy and how Google uses information from sites that use its services.

The list you build in the checker is never reported to either: adding, removing, or reordering items sends nothing. Like any page view, opening a page records its address, so opening a drug or pair page, or a link someone shared with you, records the substances named in that address. Turn Analytics off in the cookie preferences (Your privacy choices in the footer of every page) and neither tool counts your visits. We run no advertising scripts.

Support payments

Optional support payments are handled by Ko-fi and Stripe on their own websites. We do not see your card details. Ko-fi sends us your display name, email address, message and amount so we can thank you and keep accounting records. Nothing from Ko-fi loads on this site until you click the support link.

Higher API limit requests

If you ask for a higher API or MCP rate limit with the form on the API page, we store the email address and message you enter, the time, your country as reported by Cloudflare, and a one-way hash of your IP address that lets us limit repeat submissions without keeping the address itself. We use them only to answer your request, never for marketing, and delete them within 24 months, or sooner if you ask.

Cookies and local storage

The site sets one cookie of its own, ic_consent, which only records the choice you made in the cookie notice; while Analytics is on, Google Analytics sets two more, _ga and _ga_T25YDEVLZE. It uses your browser's local storage for three things: the list you build in the checker, so it is still there when you return, the same cookie choice, and your light or dark theme if you switched it. Details are in the cookie policy.

Server logs

The site is served by Cloudflare, which keeps standard, short-lived request logs (such as IP address and requested page) for security and reliability. Those logs are not used to identify you and are not combined with anything else. Requests to the public API (/api/v1) and the MCP server (/mcp) are additionally counted per IP address for rate limiting and logged with the path, status, and timing; the substances in a request are not logged.

Your rights

Unless you sent us a higher limit request (above), we hold no personal data about you, so there is nothing for us to access, correct, export, or delete. If you did, email us and we will give you a copy, correct it, or delete it. If you believe we hold something else, email us and we will look into it. Residents of the EU, UK, and California have rights under the GDPR, UK GDPR, and CCPA respectively; you may also contact your local data protection authority.

Contact

Interaction Checker is built by Elowin Labs LLC. Questions about this policy: hello@elowinlabs.com. See also the terms and medical disclaimer.