Privacy

We store nothing about you unless you ask us to email you. If you do, we store your email address and which drug you asked us to watch — and nothing else. There is a chat bubble, run by us on a sister service; what you type into it goes there, and only if you open it and type.

One exception, and it is new. The site now runs Google's advertising tag, so we can tell whether the advertising that pays for this works. It loads on every visit, sets Google's cookies, and reports the address of each page you open here, which on this site names a drug. The section on advertising below says so plainly. What has not changed, and will not: nobody buys your data from us, because we do not sell it.

We do count page views, on our own server, to see which pages get used. That count includes the page — which is a drug name — but no name, no account, and nothing stored on your device. What you search for is still not recorded against you. The section below says exactly what that measurement sees.

Three things, all of them only if you act:

• Your email address, if you sign up for price alerts or ask us to watch a price. Stored with a random token that lets you unsubscribe in one click without logging in.
• What you asked us to watch — the drug, the quantity, and the ZIP code if you gave one. We also record the price at the moment you started watching, because otherwise “the price dropped” has nothing to be measured against.
• Discount cards you pressed Save on. The card's network, BIN, PCN and group number, which counter it was priced at, and what it said that day — all of it already on the voucher in front of you, kept so it is there next time without searching again. Not the member ID: that field is a blank line you fill in at the counter with your own telephone number, and it never reaches us.

There is no name field and no password. Page views are counted separately from all of this and are never joined to it: a watch has your email on it, a page count does not, and nothing links the two.

• Your searches, as yours. Which drug you looked up is a health signal, so nothing records that you looked one up: there is no search history, no profile, and no identifier that would let one visit be joined to another. A drug page is counted the way a turnstile counts — the total goes up by one, and who went through is not part of the number.
• The assistance screener conversation. It asks about household income and insurance status, and none of your answers are written to our database at all. The conversation lives in your browser's session storage and is gone when you close the tab.
• Photos you upload to the pill or prescription reader. The image is held in memory long enough to be read and is then discarded. Nothing is written to disk, nothing reaches the database, and there is no URL that could serve it back.
• Your browsing, for an advertising company. No Google Analytics, no Meta pixel, no session recording, no heatmaps, and no analytics service that is somebody else's business. Our page counts run on our own server, described below. The exception is Google's advertising tag, described under advertising.
• The ZIP code you type into the price search. It is in the address bar while you use the page, and it is deliberately stripped before anything is counted — a ZIP is a place, and a place beside a drug is a different kind of fact from either one alone.

Two things are kept in your browser and never sent to us: your recent searches, so the box does not make you retype a long drug name, and the assistance conversation.

Both use session storage rather than local storage, chosen deliberately — screening for financial help is often done on a borrowed or shared computer, and that should not still be sitting there tomorrow. Closing the tab clears them.

A third is your ZIP code, and that one uses local storage so it survives closing the tab. It is the town you are standing in rather than a list of your medicines, and the alternative is asking where you are on every visit. Clearing your browser data clears it.

If you press use my location, your browser asks your permission and then gives us a latitude and longitude. We match it against our own table of ZIP centroids, on our own server, and keep only the five digits — which you can see and change. No geolocation company is involved. We do not work out where you are from your IP address: that would need no permission from you, which is exactly why we do not do it.

A fourth is Google's advertising cookies, set by the tag described under advertising so a click on one of our ads can be matched to what happened next. They follow Google's retention, and clearing your browser data removes them.

A fifth is the chat bubble's visitor id: a random identifier that the BusyBot widget writes to local storage the first time any page here loads, whether or not you open the chat, so that if you do chat and come back it can show you the earlier conversation. It is sent to BusyBot with each page load. It carries no name and nothing you typed into this site, and clearing your browser data removes it — the next visit simply gets a new one.

We run Umami, an open-source analytics tool, on our own server. It is not a service we send your visit to — the software and the data are ours, and no third party receives either.

What it records for a page view:

• The page path — “/metformin”. We are direct about this because it is the point: it is a drug name, and it is how we learn which medicines people actually come here for.
• Not the query string. The full address of a price page carries your ZIP code; the measurement is configured to drop everything after the ?, so it never sees one.
• Where you arrived from, plus your browser, operating system, screen size, language and country. Ordinary, coarse, and the same for a great many people.
• That a search was run — a single mark, with the drug, the quantity and the ZIP all left off it. The same bare fact is reported to Google as a conversion when we are running ads, so their bidding can tell a useful click from a wasted one; it carries no medicine name and no amount. The page you land on already records the drug; this counts only that the box was used at all, because we could not otherwise tell whether people who arrive here find what they came for.
• Whether you arrived from one of our ads — recorded as a single mark, with nothing attached to it. When Google sends somebody here it puts a click identifier in the address, which is a string it can tie back to one click. We do not keep that string. We count that the visit happened, so we can tell how much of our traffic we paid for, and that is all the question needed answering.

It sets no cookie and writes nothing to your browser — the one thing it reads there is an opt-out flag, described below. Nothing it uses can follow you to another site.

One thing it does do, and we would rather say it than have you find it: views made in a single visit are grouped, so that fifty pages read by one person can be told apart from fifty people reading one page each. That grouping is worked out on our server from your IP address and browser rather than from anything kept on your device, it is never joined to an email address or a saved list, and it is not something we can turn back into a person.

Two ways to switch it off. The script honours your browser's Do Not Track setting: if that is on, nothing is sent at all. And if you would rather opt out just here, running localStorage.setItem('umami.disabled', 1) in your browser console on this site stops it permanently for that browser.

• Anthropic processes text you type into the search box when it is a full sentence rather than a drug name, any photo you upload, and your answers in the assistance screener. It is sent to be read and turned into a search; it is not used to build a profile of you, and we send no identifier alongside it.
• BusyBot, the chat bubble in the corner, is a service we also run, on its own domain (app.busybot.chat). Its script loads on every page, and loading it tells that server which page it was loaded on — the way any script from another domain does — along with your IP address and the visitor id described above. Nothing you have typed into this site's search, forms or screener is passed to it. If you open the chat and type, what you type is sent there to be answered, so treat it like the contact form: do not put anything in it you would not email us.
• Our web server keeps standard access logs, which include IP addresses — this is ordinary web server behaviour and is used for security and debugging, not analysis of individuals.
• Sites we link to — a pharmacy, Amazon, a discount card — will see that you arrived from here, as with any link on the web. We do not send them anything about you beyond the click.
• Google. The site runs Google's advertising tag so we can measure whether our advertising works. It sets cookies and reports the address of each page you open here, which on this site names a drug. That is the trade we make to pay for a free site, and it is written here rather than left for you to find in a network tab.
• healthtrader, an advertising network currently serving on this site. Their code runs in a sandboxed frame, so it can see that you are here and set its own cookies, but it cannot read the page around it — which means it cannot see which drug you looked up. See advertising.
• Nobody buys anything from us, ever. We do not sell or rent personal data, there is no arrangement under which anyone could, and that is the promise that does not move. Everything this site hands to a company that is not us is named on this page, above — nothing is left for you to find in a network tab.

Alerts are sent from our own domain. Every message carries a one-click unsubscribe link and the standard unsubscribe headers, and we only email you about a price you explicitly asked us to watch. There is no newsletter, no promotional mail, and no third party sending on our behalf.

A message sent from the contact page is emailed to contact@kenyrx.com with your name and address on it, so that a person can reply. It is not written to our database; the mailbox is the only copy. Your connection address is included in the email and used to stop one address flooding the form, and is kept nowhere else.

If a Cloudflare Turnstile check is shown on the form, Cloudflare sees the request in order to tell a person from a bot, under its own privacy policy. When it is not shown, nothing about the form leaves our server except the email.

Click unsubscribe in any email and you are out immediately, no account or reply needed. If you would rather everything was deleted outright — the address and every watch attached to it — email contact@kenyrx.com and it will be, without questions.

The site is free and will stay free, and advertising is how it pays for itself. There are 4 places on this site where an advertisement can appear: below the prices on a drug page, beside them in the right-hand column, at the foot of a guide or blog post, and under the list on the browse pages. The home page carries none.

Currently being served, read live from the same table the site draws from:

• healthtrader — a third-party ad tag, in 1 place. This one is their code, not ours, and it can set its own cookies and see that you are on this site. It runs inside a sandboxed frame that cannot read this page, so it cannot see which drug you looked up, and it cannot reach anything we have stored in your browser.

Three things do not change. Advertisements are visibly labelled as advertisements. They are never placed inside the price ranking — that list means “cheapest first”, and an advertisement inside it would make the ranking a lie. And this page names whoever is being served for as long as they are being served, because it is generated from the record rather than written from memory.

The date at the top is the last time this page changed. If we ever begin collecting something new, it will be described here before it starts, not after.

See also our terms and medical disclaimer.