Skip to content
Colour theme

Form MMC-5 · Records disclosure

The link is the record

What is kept about you.

The Monday Morning Clinic keeps its records the way it keeps its waiting room: nearly empty. The record of a visit lives in the link you carry, the server keeps only what you hand it, and nothing stored identifies anybody. The register below states each record, where it lives and how it is deleted.

01 · The record you carry

The diagnosis is computed from the address.

A share code carries your ticked answers, a wording seed and, if you typed anything, a 12-bit fingerprint of it, which is a bucket number and not the text. Anyone holding the link can decode the answers: that is the design of a shareable record, stated rather than discovered. Opening a note increments nothing, and printing one stores nothing.

02 · Kept on a server

Two records, each created by your own hand.

The words you type

Kept when you submit the form, with your severity rating and the ISO week, as the sentence under the field says at the moment you decide what to write. The words are sent once to a language model, which writes the clinical observation then frozen into your note. A text that trips the crisis or harassment screen, or a visit rated 9 or 10, makes no request and is not kept. The stored row has no employer column and shares no key with the contribution record below.

Your counted answers

Visiting, sharing and printing store none of your ticked answers. They are kept when you press the button at the foot of your own note, which lists its contents before it is pressed, and they join the published statistics only once 30 notes exist. The button is suppressed on a note rated 9 or 10, where the page has stopped joking.

A company name

Reaches the public register only through that same button, and is published only once 8 people have named it independently and it matches an organisation in the global business register. A person’s name cannot get there.

03 · Kept on this device

Your history stays where you are.

Your chart lives in this browser’s own storage and is readable by no other device. The theme cookie exists once you choose a theme and stores that one word. A thirty-second marker lets a note you just generated recognise the browser that produced it, and is destroyed the first time it is read.

04 · What is counted

Five events, carrying buckets.

Anonymous analytics see page views and five product events: intake started, intake submitted, note shared, card downloaded, contributed. An event carries at most a triage band, a count of ticked boxes and a yes or no. The free text, the share code and any employer name are never attached to any of them. There is no account, no intake log, no visit count per note and no share count.

05 · The deletion register

Each record, and the control that removes it.

The words you typed
The line under the clinical note, on the note itself. Anyone holding the link can delete them; the observation they produced goes with them.
Your counted answers
The same button that added them, on the same note, which withdraws the contribution and its company report together.
Your chart
The clear control on the chart page, or clearing this site’s data in the browser.
The link itself
Wherever you posted it. The clinic cannot recall a link, because it does not know who holds one.

This page states what exists, counted from the code that ships it. If you would rather check than trust, the content audit documents how every figure on this site is derived.