Privacy Policy — MedCam Prototype

Last updated: 3 November 2026. SUNDO.live publishes MedCam as an experimental, browser-based photography tool. The site is hosted on Cloudflare Pages. The owner must publish a verified support address and any legally required operator details before monetization. Public journal articles may load the Google AdSense script; the MedCam camera workspace does not load that script. Approval and appropriate regional consent are not yet confirmed.

Local image processing

Camera previews, uploaded image decoding, quality checks, adjusted image generation, UMF parsing/packaging and PDF generation occur within your browser. The supplied app has no endpoint for uploading your medical image and no remote OCR, image AI or external image-processing API.

What is retained

Camera photos and uploads reside in browser memory until the page is closed or cleared; downloaded files are saved wherever your device/browser chooses. The app's service worker caches only program assets, never patient pictures. No account, medical history or patient identity field is requested by this version.

Risks of shareable files

UMF includes the original uploaded/captured image bytes, including any metadata that source may contain, such as EXIF location. Photos may visibly include names, dates, hospital identifiers and other private information. Derived JPG/PNG/PDF copies are re-encoded and do not intentionally copy source EXIF, but visible identifiers can remain.

Direct sharing to other apps

When you explicitly choose Share via apps, MedCam asks your browser/operating system to present its native share destinations for a locally prepared file. MedCam does not automatically post or upload that file. If you select WhatsApp, Messages, email or another receiving app, that provider may store, process, transmit or retain the picture under its own privacy terms. MedCam cannot control or verify delivery to the selected recipient. This feature requires supported browser APIs and user action.

Hosting and logs

This site is hosted on Cloudflare Pages, which necessarily receives ordinary network request data to deliver pages (such as network address, request URL and browser headers). Cloudflare may process technical logs according to its service terms and configuration. We do not claim a specific log retention period because it has not been independently verified for the account. MedCam has no medical-image upload endpoint. The separate admin-only blog CMS stores deliberately uploaded public editorial images and short videos in Cloudflare KV. Google AdSense code is present on eligible published blog pages and can contact Google when those pages are opened; it is not loaded in the camera workspace. Public pages may request a same-origin HTTP Date header to display a clock; no medical image is sent in that request.

Public journal advertising and consent

Eligible published journal pages include a Google AdSense script supplied by the publisher for site connection and future advertising. The browser may contact Google and expose normal request information, including IP address, page URL, device data or cookies, according to Google’s practices and applicable settings. The publisher must configure a compliant consent management process where required, including Google-certified CMP requirements for relevant regions, before enabling personalized ad serving. Do not use medical images or health-related activity for personalized advertising. The MedCam camera workspace does not load this advertising script.

Blog authoring and optional cloud

Admin-only editorial posts, images and short clips uploaded to the separate CMS are stored with Cloudflare D1/KV. The editorial media library must not contain patient records, identifiable prescriptions or other sensitive medical documents. Publicly published material is visible to visitors and search engines. Any future medical-cloud feature would need its own privacy assessment and notice.

Security

The browser requires HTTPS to use camera permissions on a deployed site. Do not upload sensitive images to an unknown website. This prototype is not a certified health-information system.

Read the advertising separation policy and editorial standards.

Optional Google Analytics 4 on editorial pages

Public informational guides and public journal pages offer an optional Google Analytics 4 measurement choice. The Google tag is not requested before you select Accept analytics. You may decline. Your choice is stored in your browser using local storage and can be changed with the Analytics preferences control on those pages. We exclude the camera workspace, medical-image tools, admin dashboard, unpublished content and media URLs. Article pageviews are sent with the public page path and no query string or fragment. Google may receive your network address, browser information, page title and public article URL when you consent; see Google’s Privacy Policy. Analytics consent does not authorize advertising cookies or replace the certified consent platform required for some AdSense visitors. If your browser blocks local storage, preferences may not persist across visits.

The operator must review and update this notice when live ad serving, a CMP, analytics or additional third-party services are enabled.