Empty-bin analysis

Data handling notice

This notice describes how this tool treats any file loaded into it, including files that may contain protected health information (PHI) or other confidential records.

1. No data in the page. The page contains program code only. No patient, supply or staff records are embedded in it, published with it or stored with it.
2. Local processing only. A file you load is read from your own device by your browser and processed entirely in the memory of this browser tab.
3. No transmission. The tool makes no network requests with your data. It contains no upload, analytics, tracking or logging code, and the hosted page runs under a content-security policy that blocks outbound connections.
4. No storage. Loaded data is not written to cookies, local storage, IndexedDB, a server or a database. The only item the browser keeps is a session key that unlocks this page’s program; it holds no records and is cleared when you select Lock or close the tab.
5. Not shared with the host. Data is not sent to host or any third party. The single exception is a CSV export you start yourself, which scans through the page host only to save the file to your device, after you confirm.
6. Automatic disposal. Loaded data is discarded from memory when you select Clear data or Lock, reload the page, or close the tab. Nothing remains to recover afterward.
7. Outside requests. The page loads its typefaces from Google Fonts. That request carries no loaded data.
8. Your responsibilities. Browser extensions with permission to read web pages can see what is on screen while data is loaded, as with any web page. Exported files, screenshots and printouts leave this tool's protection and must be handled under your organization's policies, as must the device you use.

This is a factual description of the tool's technical behavior, not a certification of compliance with HIPAA or any other law. Whether its use is permitted for a given dataset is determined by your organization's privacy and compliance officers.