Legal
Privacy
What we store, what we never store, and how to make us delete it. Short, because there is not much of it.
Last updated 2026-08-27. Written to describe what the site actually does today, not what it is planned to do. Where a capability does not exist yet, this page says so.
The short version. There is no account system, no subscriber database, and no tracking of you across sites. If you ask for a watch we hold your email address, the ZIP you typed and the medication you named — in a mailbox, because the alerting system is not built yet. Everything else on this site is anonymous.
A list of medications is health data, and we treat it as such. Under Washington’s My Health My Data Act and Nevada’s SB 370, information about a person’s efforts to research or obtain health services can be “consumer health data”. Telling us which medication you want watched is exactly that. We ask for it only when you volunteer it, we use it only for the thing you asked for, and we do not sell it, share it, or use it for advertising — ever, and not as a matter of current policy that could quietly change.
What happens when you request a watch, today. Your email address, ZIP and the medication you named are sent to the operator’s mailbox through a third-party email provider, and that is where they stay. There is no database, no profile, and no automated email to you. The alerting system is still being built, and until it exists a watch request is a note on a list. We would rather say that plainly than let you assume something is monitoring your prescription.
Analytics: what we run and where we refuse to run it. We use Vercel Web Analytics on informational pages. It sets no cookie, stores no persistent identifier, and cannot follow you to other sites. We chose it over Google Analytics deliberately: on this site the page address itself reveals which medication someone is reading about, and we are not willing to hand that to an advertising company. Vercel already serves every page here, so it learns nothing that hosting a website does not already involve.
No analytics at all on the pages where you type your address. The watch page and the fill-report page carry no analytics script of any kind. This is enforced by an automated check that fails our build if a script ever appears on them, so it cannot lapse by accident during some future change.
Fill reports. If you report having filled a prescription, we store the pharmacy chain, the first three digits of the ZIP, the strength and the date. Never the full ZIP, never your name, and never anything that ties the report back to you on a public page.
Children. This site is not directed at children and we do not knowingly collect their information. A parent watching a child’s medication is watching a drug strength, which tells us nothing about the child.
Seeing or deleting what we hold. Email privacy@refillscout.com and we will tell you what we have and delete it. Because there is no database, deletion today means removing the message containing your request; we will confirm when it is done. You do not need an account, a reference number, or a reason. If a future version of this site holds your data in a real store, this page will be updated before that happens, not after.
What we will never do. Sell or rent your address. Share which medication you watch with an advertiser, a data broker, a pharmacy or a manufacturer. Put an advertising pixel on this site. Email you anything you did not ask for.
Built from the FDA drug shortage database, fetched 2026-08-26; the feed’s own last update was 2026-08-25. Snapshot 021d4dfd5d742d95. You can check us against the FDA source, and read what we get wrong.