Privacy

Last updated 16 October 2026

FHIRCraft is a personal, open-source project. You can use the FHIR tools it links to without an account. Signing in exists for one thing: deciding who can open the GTO Practices Portal mirror. This page says exactly what that keeps.

What FHIRCraft receives from Google

You sign in with Google, and Google is the only way to sign in. When you do, Google tells FHIRCraft three things, and FHIRCraft keeps those three things:

• Your email address, which Google has verified. The site's administrators read it when deciding whether to approve your account. They are the operator and anyone the operator has made one, and they also see your name and when you joined and last signed in.
• Your name as it appears on your Google account, shown in the page header while you are signed in.
• Google's identifier for your account, a number that lets FHIRCraft recognise you next time even if your address changes.

FHIRCraft never sees your Google password, and asks Google for nothing else: not your contacts, files, calendar or mail. Google may also send a profile picture address and language setting with your sign-in; FHIRCraft discards them.

What else is stored, and why

• Your account: the three things above, plus when you first and last signed in and, if it happens, when an administrator approved you.
• Your sign-in sessions: a one-way hash of a random token, when the session expires, and the first 200 characters of your browser's user-agent string, kept so that sessions can be told apart if one ever has to be ended by hand.
• Your portal access, if you are approved: a one-way hash of another random token, tied to your session, so the portal mirror can tell that you are allowed in.

There is no password, no profile, no history of what you read, and no analytics. The site loads no advertising, tracking or analytics code of any kind.

Cookies

Three, all strictly necessary, all inaccessible to page scripts, and none set by a third party:

• __Host-fc_session on fhircraft.cc keeps you signed in. It lasts up to 30 days and is deleted when you sign out.
• __Host-fc_oauth on fhircraft.cc exists for at most ten minutes while a Google sign-in is in progress, and is deleted when it finishes.
• __Host-fc_portal on practices.fhircraft.cc lets you into the portal mirror. It stops working the moment you sign out of fhircraft.cc or your approval is withdrawn.

Where it lives, and who else is involved

Accounts and sessions are stored in a database run by Cloudflare, which also hosts the site; every request to it passes through Cloudflare's network. Google handles signing in, and also serves the site's typeface through Google Fonts, so your browser fetches it from Google. The GTO Practices Portal mirror runs on a machine the site's operator owns: it receives the pages you ask for, but never your cookies, your name or your address. Nothing is sold, and nothing is shared with anyone else.

FHIRCraft's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How long it is kept, and deleting it

Sessions end after 30 days, or when you sign out. Your account is kept until you ask for it to be deleted, and deleting it removes your sessions and portal access with it.

To have your account deleted, or to ask what is held about you, contact the operator through github.com/wei6bin. You can also remove FHIRCraft's access from the Google side at any time, under Third-party connections in your Google account.