Privacy policy

This sandbox is a free developer tool built and run by Greenice. This page explains what we collect when you use it and why.

Last updated 2 September 2026.

Synthetic data only — don't send us real patient data

Every patient, coverage, and claim in this sandbox is a synthetic test fixture. There is no PHI-handling infrastructure behind it, so please don't submit real patient data (PHI) through the API or anywhere else on this site.

What we collect

• Your email address, when you sign up — used only to send your one-click sign-in link and to identify your tenant. No password is ever collected.
• API request and response logs for calls made with your bearer token — headers and bodies, shown to you in the inspector. This is the product: the sandbox exists to give you a record of what you sent and what came back.
• IP address, to apply per-token rate limits and prevent abuse of a shared, free service.

Cookies

We split cookies into two kinds and treat them differently, per the ePrivacy Directive (2002/58/EC, Art. 5(3), as amended by 2009/136/EC) and the GDPR (EU 2016/679):

• Strictly necessary — always on, no consent asked. cp_session and cp_token keep you signed in; nothing else is set alongside them. Cookies that are strictly necessary to provide the service you've asked for are exempt from the consent requirement under ePrivacy Art. 5(3), and our legal basis for them is legitimate interest (GDPR Art. 6(1)(f)) — running the account you signed up for.
• Analytics — only after you say yes. We use Google Tag Manager (container GTM-KGL2CQ2P), which carries two tools: Google Analytics (pages visited, rough traffic volume) and Microsoft Clarity (session behavior — clicks, scrolling, and anonymized session recordings, so we can see which parts of the sandbox get used and where people drop off). Neither is strictly necessary, so ePrivacy Art. 5(3) requires your opt-in consent before either loads — the cookie banner on your first visit does exactly that, and nothing in this bundle runs until you click "Accept." Our legal basis is your consent (GDPR Art. 6(1)(a), conditions set out in Art. 7). You can decline, and you can change your mind at any time via "Cookie settings" in the footer — withdrawing consent is as easy as giving it (Art. 7(3)).

We apply this consent gate to every visitor, not only those in the EU/UK, rather than try to detect where you're browsing from. No advertising or cross-site tracking cookies are set, by us or through GTM.

Who else sees it

We use a small number of subprocessors to run the service:

• SendGrid — delivers the sign-in email to your address.
• Google Cloud Platform (Cloud Run, Firestore) — hosts the application and stores tenant records and request logs.
• Google Analytics and Microsoft Clarity, via Google Tag Manager — only if you accept the cookie banner; see Cookies above.

We don't sell your data or share it with anyone else. Because everyone shares the same hosted instance, other signed-in tenants cannot see your requests, your token, or your email — each tenant's data is scoped to their own account.

How long we keep it

Account and request-log data is kept for as long as your account exists, so the inspector's permanent links keep working. If you'd like your account and its data deleted, get in touch (see below) and we'll remove it.

Children's privacy

This is a developer tool for building healthcare integrations and isn't directed at children. We don't knowingly collect data from anyone under 16.

Changes to this policy

If this policy changes, we'll update the date above. Continued use of the sandbox after a change means you accept the update.

Contact

Questions about this policy, or a deletion request? Reach us at greenice.net/contact-us.