Accounts
Creating a free account is optional for the first few searches in a visit and required after that. When you sign up, Med-Code stores your name, email address and a one-way hash of your password (never the password itself). If you tell us you are a doctor or other prescriber, it also stores the credential, specialty and NPI you enter, and optionally your practice and state. NPIs are public identifiers published by CMS.
This information is used to run your account and to understand who uses Med-Code. It is kept in Med-Code’s database until you ask for the account to be deleted. Logging in sets a cookie that keeps you signed in for up to 30 days; it is necessary for the account to work and is not used for advertising.
Searches
When you search, Med-Code’s server sends the search to the FDA’s openFDA service to retrieve matching products. Search text is not sent to analytics: analytics records only the kind of search (for example “NDC” or “name”), and page addresses are recorded without the search terms.
Analytics
Med-Code uses Google Analytics to understand how the site is used — which pages are visited and which features are used, such as copying a code or applying a filter. It does not record which code was copied. Google signals and ad personalisation from analytics are turned off.
Advertising
Med-Code shows ads served by Google Ad Manager. Ad services may use cookies or similar technologies to deliver and measure ads, and — if you allow it — to personalise them.
Your choice
A banner lets you accept or reject analytics and advertising cookies. In the European Economic Area, the United Kingdom and Switzerland these are off until you accept. Elsewhere they are on unless you reject them. You can change your choice at any time with “Cookie settings” in the footer. Your choice is stored in your browser’s local storage.
Server logs
Like most websites, the server that hosts Med-Code may record standard request information (such as IP address, browser type and the page requested) for security and troubleshooting.
What Med-Code does not do
- No newsletters or marketing email.
- No sale of personal information.
- No collection of health information. Please do not send patient information through any channel.
Third-party services
- Google Analytics and Google Ad Manager — see how Google uses information from sites that use its services.
- openFDA (U.S. Food and Drug Administration) — receives search requests from Med-Code’s server, not from your browser.
Changes to this policy
This policy will be updated if these practices change; the date above shows the latest version.