Privacy

Nothing you paste or open is sent or stored

HL7 messages, CDA documents, FHIR resources, TISS files and code searches are processed entirely in your browser, by code that runs in the page itself. This content is not sent to Pipehat or to third parties, is not stored in your browser (neither in cookies nor in local storage) and is not logged.

The pages are published with a Content Security Policy (CSP) that only allows loading files from this site, such as the code tables and the TISS validator, and that blocks any data from being sent by the page (fetch, XHR, WebSocket and forms). You can check this in your browser’s developer tools: when you analyze a message, no network request is made.

The code search keeps the table, the search term and the chosen code in the page address, so that you can copy the link. This information is not sent to us.

No cookies, no tracking and no sign-up

The site does not use cookies, audience analytics or advertising tools, and does not ask you to sign up. Fonts and table data are served by the site itself, without third-party services.

Technical hosting logs

As with any website, the hosting provider may record technical access data, such as IP address, date and time, requested page and browser, for security and operation of the service. These records do not include the content you paste or open in the tools, which never leaves your browser. Hosting provider: Cloudflare (Cloudflare Pages), under the Cloudflare privacy policy (https://www.cloudflare.com/privacypolicy/). The visit statistics we follow come from Cloudflare’s own dashboard, computed from these records, without cookies or scripts in the page.

Your rights and contact

Site owner: Rodrigo Romero. For privacy questions or to exercise your rights under the Brazilian General Data Protection Law (LGPD), write to contato@pipehat.dev.

If this policy changes, the new version will be published on this page with its update date.