Privacy Policy

Short version: we don't collect personal information, we don't store your location, and we don't collect any health or medical data. Your location is used only inside your browser to determine your HHS region — it is never sent to our servers.

1. Who we are

IsItFluSeasonYet.com is a public health reference site that displays CDC flu surveillance data. It is operated by an individual, not a company. Questions about this privacy policy can be sent to hello@isitfluseasonyet.com.

2. Information we do not collect

We do not collect, store, or transmit your name, email address, IP address, device identifiers, browsing history, or any other personal information through our servers. We do not create user accounts. We do not run advertising networks or sell data to third parties.

3. No health or medical data collected

This site does not collect health information of any kind. We do not ask about symptoms, diagnoses, medications, vaccination status, or medical history. No health data you enter or view on this site is stored or transmitted. This applies even when you read content about testing windows, antiviral timing, or vaccine recommendations — that content is general reference information, and your engagement with it is not tracked.

4. Location data

If you allow location access, your browser's Geolocation API provides your coordinates. Those coordinates are used entirely within your browser to reverse-geocode your state (via the Nominatim API — see Section 8) and determine your HHS region. The coordinates are then discarded. Your location is never sent to our servers, never stored, and never logged.

If you type a city or ZIP code into the location input, that text is used only to fetch your region's flu data. It is not stored on our servers.

You can use this site without granting location access. If you decline, the site displays national flu data by default.

5. Cookies

This site does not set any first-party cookies. We do not use cookies for tracking, analytics, or personalization. Third-party services linked from this site (Amazon, Google Fonts) may set their own cookies per their respective privacy policies; those are outside our control.

6. Analytics

This site uses Cloudflare Web Analytics. Cloudflare's analytics are privacy-preserving by design: they do not use cookies, do not fingerprint browsers, and do not track individuals across sessions or sites. Cloudflare provides aggregate counts of page views and referrers. No personal data is collected or shared through this analytics integration.

7. Flu data — Delphi CMU Epidata API

Flu activity data is fetched directly from the Delphi CMU Epidata API, a public, free, no-key-required API that mirrors CDC FluView ILINet surveillance data. Your browser makes a direct request to this API. The request contains no personal information — only the HHS region code needed to retrieve the relevant data. Delphi's own privacy practices govern their service.

8. Reverse geocoding — OpenStreetMap Nominatim

When you grant location access, your browser sends your latitude and longitude to the Nominatim reverse-geocoding service (nominatim.openstreetmap.org) to determine your state. This request is made directly from your browser. Nominatim's use of your coordinates is governed by the OpenStreetMap Foundation Privacy Policy.

9. Web fonts — Google Fonts

This site loads fonts (Source Serif 4, Inter) from Google Fonts. When your browser requests these fonts, Google may log the request per their own privacy policy. The fonts are loaded over a standard HTTPS connection. No personal information specific to this site is transmitted with the font request.

10. Contact form — Formspree

The contact form on this site is processed by Formspree. When you submit a message, your name, email address, and message content are sent to Formspree and forwarded to us by email. Formspree's privacy policy governs how they handle form submissions. We retain contact messages only as long as needed to respond and do not use them for marketing.

11. Affiliate links — Amazon Associates

Some product links on this site are Amazon Associates affiliate links. When you click one of these links and visit Amazon, Amazon may set cookies and collect data per their own privacy policy. We receive aggregate reporting on link clicks and purchases but do not receive any personal information about individuals who click affiliate links.

12. Children's privacy

This site is not directed to children under 13 and does not knowingly collect information from children. If you believe a child has provided personal information through this site, contact us at hello@isitfluseasonyet.com and we will address it promptly.

13. Your rights — CCPA and GDPR

Because we do not collect personal information, most data subject rights under CCPA, GDPR, and similar laws have limited applicability here — there is simply no personal data to access, correct, delete, or port. If you believe we hold any personal information about you (for example, from a contact form submission), you can request access to or deletion of that information by emailing hello@isitfluseasonyet.com.

14. Changes to this policy

This privacy policy may be updated from time to time. Material changes will be noted with a new effective date at the top of this page. Continued use of the site after changes constitutes acceptance of the updated policy.

15. Contact

Privacy questions or requests can be directed to hello@isitfluseasonyet.com or through the contact form.