Privacy Policy

Who we are

ElderCareCosts publishes senior-care cost data, licensed provider records, and guides for families. Contact for privacy requests: [email protected]. Or use our privacy request form.

What this site collects

• Usage analytics. On our production website only, we use Google Analytics 4 to understand page views and a small set of conversion events (for example: shortlist form start/complete, phone or outbound clicks, print/CSV/embed tools). We do not put emails, phone numbers, names, addresses, or free-text answers into analytics URLs or event parameters.
• First-party page and form analytics. We also record page views and lead-form step events ourselves, on our own servers. Each event carries an approximate city and state, taken from your network connection, not from anything you type. We do not store your IP address for this. This data stays first-party. We never sell it.
• Cookies and similar tech. GA4 may set cookies or use local storage on the brand host. We load that tag only on eldercarecosts.com / www.eldercarecosts.com, not on Cloud Run preview hosts or localhost. We do not show a cookie consent banner for our US-focused audience; see the cookie posture note below and ADR 0019.
• Server logs. Hosting logs may include IP address, user agent, and requested URL for security and debugging. Logs are not used as a marketing list.
• Shortlist / connection requests. If you submit our lead form, we collect the fields you enter (care type, location, timeline, funding path, contact details, and the communities you select) plus technical anti-spam signals and, when enabled, a TrustedForm-style consent certificate. That data is stored on our servers. It is not sent to analytics as event parameters.
• Corrections and other forms. If you report an error, we keep the page URL, your description, and any contact details you choose to leave so we can follow up.

Purposes

• Operate and improve the site (analytics without PII in events).
• Respond to connection requests you submit.
• Fix data errors you report.
• Meet legal duties and prevent spam/abuse.

Lead data and one-to-one consent

When you ask us to connect you with communities, you choose who may contact you. Consent language names those communities before you submit. We design the flow for TCPA-style one-to-one consent: your number is not meant for a call blitz or for buyers you did not select. See How we make money.

Sharing with providers you choose. We may share your connection request with the specific communities (or their authorized partners) that you selected so they can respond about availability and pricing.

Lead sale is a sale of personal information. Under California privacy law, selling or sharing leads for money is selling or sharing personal information. You can opt out here: Do Not Sell or Share My Personal Information.

No broader lead marketplace until counsel signs off. We will not sell, rent, or broker lead records beyond the one-to-one connection model until an attorney has reviewed this policy and our consent flow.

California privacy (CCPA / CPRA)

If you are a California resident, you may have rights to know, delete, correct, and opt out of sale or share of personal information, and to not be discriminated against for exercising those rights.

• Do Not Sell or Share (opt-out form + hard suppression)
• Know / delete / correct request form
• Email [email protected] with subject “California privacy request”

Categories we may process include identifiers (name, email, phone), internet activity (analytics on the brand host), and care-preference details you submit on forms. We do not use the site to collect detailed medical diagnoses.

Global Privacy Control (GPC). If your browser sends the Sec-GPC: 1 signal, we treat it as an opt-out of sale or share. We note the signal in a site cookie, and if you submit a shortlist request while the signal is on, we automatically add that email and phone to our suppression list so those contacts are never transmitted to a buyer. You do not need to file a separate request for a contact you submit that way. To suppress a contact you have not submitted through a form, use the Do Not Sell form with your email or phone.

We do not knowingly sell personal information of consumers under 16. Cost pages and provider listings stay visible without creating an account.

Cookie posture

Audience focus is the United States. We do not show a cookie consent banner. Analytics cookies (GA4) load only on the brand host and are disclosed here. GPC is the meaningful opt-out signal for sale/share. We do not put PII into analytics. Decision record: docs/adr 0019.

Children's data

This site is for adults researching senior care. We do not knowingly collect personal information from children under 13. If you believe we have, email [email protected] and we will delete it.

Retention and security

We keep lead and correction records as long as needed to respond, meet legal duties, and resolve disputes, then delete or archive them under internal retention rules (to be finalized with counsel). We use standard hosting and access controls. No method of transmission over the internet is perfectly secure.

Third parties

• Google Analytics (usage measurement on the brand host only).
• Hosting and database providers that process data under our instructions.
• Communities you select on a connection request, and consent-certification vendors when that feature is enabled.

Changes

We will update this page when our practices change. Material changes that affect lead sharing will be reviewed with counsel before we expand how connection requests are sold or transferred.

Draft date: July 27, 2026. Status: attorney review required.