Privacy Policy

Effective Date: May 2026 Last Updated: May 2026

Introduction

This Privacy Policy explains how CranialLab ("we," "us," "our") collects, uses, and protects information about you when you visit craniallab.org and app.craniallab.org (the "Site"). CranialLab is operated by Stillwater Osteopathic Medicine LLC, based in Madison, Wisconsin.

By using the Site, you agree to the practices described in this Policy.

Information We Collect

Information You Provide

We collect information you voluntarily submit to us, including:

Contact form submissions — your name, email address, and the content of your message
Email signup — your email address, when you subscribe to receive updates about new content
Donations — when you donate, our payment processor (Stripe) collects your payment information directly. We do not see, store, or have access to your full credit card or bank details. Stripe may share with us limited information such as your name, email, and donation amount.
Direct emails — any information you choose to share when emailing us at contact@craniallab.org

Information Collected Automatically

When you visit the Site, certain information is collected automatically through the basic analytics built into our hosting platforms:

Hostinger basic analytics (for craniallab.org) — aggregate visitor counts, page views, top pages, referring sources, and general device/browser information
Vercel basic analytics (for app.craniallab.org) — aggregate page views, top pages, referring sources, and country-level location

We do not currently use third-party analytics tools such as Google Analytics, Meta Pixel, or similar trackers.

Standard server log data — including IP address, browser type, device type, operating system, and timestamps — may also be recorded by our hosting providers for security and operational purposes.

Information We Do Not Collect

We do not knowingly collect:

Sensitive health information about you or your patients
Information from children under 13 (see "Children's Privacy" below)
Government-issued identification numbers

How We Use Information

We use the information we collect to:

Respond to your inquiries and communications
Send updates about CranialLab if you have subscribed to our email list
Process and acknowledge donations
Operate, maintain, and improve the Site and the Explorer application
Analyze aggregate usage patterns to inform product decisions
Comply with legal obligations
Detect, prevent, and address technical issues, fraud, or abuse

We do not sell your personal information to third parties.

We do not use your personal information or any CranialLab content you generate (such as exported screenshots or videos) to train artificial intelligence or machine learning systems.

How We Share Information

We share information only as needed to operate the Site and only with the following categories of recipients:

Hostinger — hosting and basic analytics for craniallab.org, and the email signup and contact form services on that site
Vercel — hosting and basic analytics for the Explorer application at app.craniallab.org
Stripe — payment processing for donations
Legal compliance — when required by law, subpoena, court order, or to protect our rights, your safety, or the safety of others
Business transfers — in the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction

We require service providers to handle your information consistent with this Policy.

Cookies

The Site may use a small number of cookies and similar technologies necessary for the Site to function and for the basic hosting-platform analytics described above. We do not currently use third-party advertising or marketing cookies.

You can control cookies through your browser settings. Disabling cookies may affect Site functionality.

If you are visiting from a region that requires cookie consent (such as the European Economic Area or California), the Site should display a cookie banner allowing you to manage your preferences.

Your Rights

Depending on where you live, you may have the following rights regarding your personal information:

Access — request a copy of the information we hold about you
Correction — request that we correct inaccurate information
Deletion — request that we delete your information, subject to legal exceptions
Opt-out of email — unsubscribe from marketing emails using the link in any email or by contacting us
Data portability — request your data in a portable format (where applicable)

To exercise any of these rights, email us at contact@craniallab.org with the request and reasonable proof of identity.

California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect and the right to opt out of the sale or sharing of personal information. We do not sell your personal information.

European Economic Area, UK, and Switzerland (GDPR)

If you are located in the EEA, UK, or Switzerland, our legal basis for processing your personal information is typically your consent (for marketing emails), our legitimate interest in operating the Site, or our contractual obligation (when processing donations). You have the rights described above plus the right to lodge a complaint with your local data protection authority.

Data Retention

We retain personal information only as long as necessary to fulfill the purposes described in this Policy, comply with our legal obligations, resolve disputes, and enforce our agreements. Email signup data is retained until you unsubscribe. Contact form data is typically retained for [12–24] months. Donation records are retained as required by tax and accounting regulations.

Data Security

We use reasonable technical and organizational measures to protect your information against loss, unauthorized access, disclosure, alteration, or destruction. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Children's Privacy

CranialLab is intended for medical students, educators, and practitioners. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at contact@craniallab.org and we will delete it promptly.

International Users

CranialLab is operated from the United States. If you access the Site from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

Third-Party Links and Embedded Content

The Site may contain links to third-party websites or embedded content (such as YouTube videos). This Policy does not apply to those third-party services. We encourage you to review their privacy policies before providing any information.

Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted with a revised "Last Updated" date. Material changes will be communicated through the Site or by email if appropriate.

Contact

For questions about this Privacy Policy or to exercise your privacy rights, contact:

CranialLab Email: contact@craniallab.org Operated by: Stillwater Osteopathic Medicine LLC, Madison, Wisconsin