The short version
There is no sign-up here, no user account, and no tracking of you across other sites. We do not sell data, do not pass it to advertisers, and do not build a profile of you. Search, filtering and comparison all run inside your own browser — what you searched for and what you compared is never sent to any server and never reaches us.
The only personal data that reaches us is what you type into the contact form yourself.
What is collected, why, and by whom
| What | When | Why | Where it goes |
|---|---|---|---|
| Name, email, role, practice or business (optional), message | Only if you fill in and send the “Talk to us” form | To reply to you. Legal basis: your consent. | Relayed by an external form service (FormSubmit) to our inbox. We do not store it in a database and do not add you to any mailing list. |
| Page viewed, referrer, country, device type — in aggregate | Only after you accept in the banner | To know which pages get read. Legal basis: your consent. | Cloudflare Web Analytics. No cookies, no browser fingerprinting, no stored identifier. If you did not accept, the tool is never loaded at all. |
| Language preference (Hebrew/English) | When you pick a language | So the site opens in the language you chose. Strictly necessary. | Kept in your browser only (localStorage, key madaf.lang).
Never sent to a server. |
| Your choice in the cookie banner | When you accept or decline | So we do not ask again. Strictly necessary. | Kept in your browser only (madaf.consent). Never sent to a server. |
| IP address, browser type, request time | On every page load — as on any website | To serve the page and defend against attacks. Legal basis: legitimate interest. | Logged by Cloudflare Pages, which hosts the site. We do not consult those logs to identify visitors. |
| A product-page link, or product-page text you pasted | When you use “Check a product by link” in the tool | To read what the product page publishes and return a preliminary score. Legal basis: performing the service you asked for. | Sent to a server function of ours running on the Cloudflare network. That server fetches the product page on your behalf (the retailer's site sees the server's address, not yours). The link and text are used for that check only; the result for a link is cached by Cloudflare for up to 6 hours so the same page is not read over and over, with no identifying detail of yours attached. Pasted text is not stored at all. |
| Your IP address, to an NIH server | When a product card with a label image opens | To display the original label image. | Your browser requests it directly from api.ods.od.nih.gov — the US National
Institutes of Health label database — and their server sees your IP address. This happens
only for cards whose image comes from there, and only when they are opened. Some cards'
images are stored on our own server, and then no third party is involved at all. |
What is not collected
- No health data. We never ask what you take, and we do not know which products you looked at.
- No search terms, filters or comparisons — all computed in the browser, none of it leaves it.
- No advertising cookies, no social-network pixels, no remarketing.
- No payments. The site is free and charges nothing, so no card details exist here at all.
Cookies and other storage
This site sets no cookies. It uses two items of local browser storage
(localStorage), both strictly necessary, neither of which is ever sent to a server:
| Key | Type | Contents | Lifetime |
|---|---|---|---|
madaf.lang | Strictly necessary | “he” or “en” | Until you clear site data in your browser |
madaf.consent | Strictly necessary | “yes” or “no” | Until you clear site data in your browser |
The Cloudflare measurement tool, loaded only with consent, also sets no cookie and stores no identifier on your device.
Changing your mind: every page has a “Cookie settings” link in the footer that brings the banner back so you can accept or decline again. Declining disables nothing on the site.
If we ever add an advertising or measurement tool that does set cookies, it will be blocked until you explicitly consent, and the table here will be updated before it goes live.
Who the data is shared with
The complete list, with no exceptions:
| Party | Role | What it sees |
|---|---|---|
| Cloudflare, Inc. | Hosting and content delivery | IP address and request headers on every load |
| Cloudflare Web Analytics | Page-view counting | Aggregate figures, only with consent |
| FormSubmit | Relaying the contact form to email | Only what you wrote in the form, only when you sent it |
| NIH Office of Dietary Supplements | Source of label images | IP address, when a label image loads |
None of them receives data from us for advertising purposes, and we sell data to no one. Some of these services operate outside Israel, so sending the form or loading an image involves a transfer of data abroad.
How long data is kept
Contact-form messages stay in our inbox as long as they are relevant to the correspondence, and no longer than two years from the last exchange, unless you ask for deletion sooner. We keep no user database, so there is nothing to delete beyond the correspondence itself.
Your rights
Under the Israeli Privacy Protection Law, 5741-1981, including Amendment 13 which came into force in August 2025, you may:
- Inspect the data we hold about you;
- Correct data that is wrong, incomplete or out of date;
- Request deletion of the data;
- Withdraw consent you gave — for cookies, through the footer link on every page; for anything else, by writing to us.
To exercise any of these: [email protected]. We reply within 30 days. If you are not satisfied with the answer, you may approach the Israeli Privacy Protection Authority at the Ministry of Justice.
Minors
The site is intended for adults. We do not knowingly collect data about anyone under 18. If such data has reached us, write to us and it will be deleted.
Security
The whole site is served over HTTPS. There is no user database, no accounts and no passwords, so there is no store to breach. Contact messages carry the same risks as any email — do not send personal medical information, identity numbers or payment details through the form.
Changes to this policy
If the policy changes, the date at the top of this page changes with it. A material change — such as adding a tracking tool — will also be shown in the banner before it takes effect.