Public exploration stays public
You can browse, filter, compare, and download public Atlas results without an account. The professional workspace requires sign-in. This Privacy page stays public either way.
Your data and your choices
Privacy without the fine print.
Atlas is built to help people understand public-health evidence—not to turn its visitors into a data product. We do not sell user data, run ads, or use Atlas activity for advertising.
Our commitments
Use less data. Explain it clearly.
What Atlas does today
- Product analytics
- After you allow optional analytics in Privacy settings, Atlas sends allowlisted product events to Amplitude using a session-only browser SDK. Events expire after 90 days. Atlas does not send chat content, prompts, health information, email addresses, or account identifiers to Amplitude. Those events come from pages that use the analytical shell, including the public Atlas, Account, and sign-in. The signed-in professional workspace does not start that analytics SDK. A choice saved in Privacy settings still applies when you return to those pages.
- Public Atlas requests
- Your browser requests public Atlas data from the Atlas API so the site can display counties, scores, maps, and downloads. Service operations use redacted logs and server telemetry to keep the service reliable.
- Assistant and Ask Atlas
- When reviewed-literature chat is enabled, a question from the public Atlas Assistant or from Ask Atlas in the professional workspace is sent to the Atlas API to answer it. Up to five conversations are stored in this browser for up to 30 days. You can clear that local history from the Atlas Assistant workspace. Ask Atlas uses that same browser store and does not keep a separate saved-chat library. When literature chat is not enabled, Ask Atlas does not send a question. This page does not state how long the API keeps a question.
- Accounts and feedback
- Sign-in is required for the professional workspace. You can save an optional profile after you sign in, from Account or from professional Settings. Profile details do not change Atlas evidence or scores, and they do not change who can read public Atlas results. In-product feedback is available from the Atlas header, the geographic explorer, and this privacy page footer. Optional contact email is only for follow-up on that report. Account deletion removes feedback contact fields and account linkage while retaining the submitted message text. The professional workspace does not store saved views, saved investigations, or an artifact library.
What we will not put in product analytics
Optional product analytics do not include private health information, medical history, diagnosis or treatment information, chat prompts or answers, feedback text, raw search text, email addresses, credentials, or tokens.
Analytics are optional. You can decline or withdraw consent from Privacy settings. Declining analytics does not limit public Atlas exploration.
Optional analytics choices
Optional analytics are off by default. You can allow them or keep them off from Privacy settings in the footer. We honor browser Do Not Track by keeping optional analytics off, and we will not show a consent wall or limit public Atlas exploration when you decline.
A choice is stored only in your browser, expires after six months, and can be changed at any time. If Atlas cannot save that choice, optional analytics stay off.
Your data controls
Signed-in users can start Export my data and Remove all data from Account and from professional Settings. Those controls cover the account profile connected to your sign-in. Account deletion also removes feedback contact fields and account linkage for that account while retaining submitted feedback text. They do not include browser-only chat history or unlinked Amplitude sessions. The professional workspace does not store saved views, saved investigations, or an artifact library. Completion is targeted within 30 days. Public Atlas datasets and methodology are unaffected. Deletion is irreversible.
Questions or concerns
This is the Atlas privacy commitment and current data-use summary. The implementation inventory, retention policy, consent controls, and processor list are kept with the public notice so visitors can interpret optional analytics and account data rights.