Skip to content
Open the workspace

Privacy

What we collect, and what we don't.

Nothing you draw, type, or measure in the workspace is sent to us — it stays in your browser — and the only data we receive is anonymous usage analytics from our public pages.

Last updated 31 July 2026

Washington State residents: you have additional rights under the My Health My Data Act. See our Consumer Health Data Privacy Policy.

Who we are

DevPT LLC operates 3DPainMap.

3DPainMap (also reachable at pain3d.com and devpt.app) is operated by DevPT LLC, a limited liability company registered in North Dakota, United States. DevPT LLC is the entity responsible for the data described in this policy. If you have a question about privacy, or want to exercise any right described here, write to danstone.pt@gmail.com and a person will answer you.

The short version

Your pain maps never reach us.

We think the honest summary matters more than the detail, so here it is first:

  • Everything you draw, type, or measure in the workspace is stored in your own browser, on your own device. It is not uploaded to us, and we cannot see it.
  • We have no account system. You do not give us a name, an email address, or a password to use the tool.
  • We use Google Analytics on our public information pages only — never on the workspace, the viewer, or the embed. We use it to count visits, not to build a profile of you.
  • We do not sell your data, and we do not use it for advertising or targeted marketing.
  • Because your work is only in your browser, clearing your browsing data deletes it permanently, and we cannot recover it for you.

What you create

Charts, findings, notes, and measurements stay on your device.

The workspace writes everything you create to your browser's local storage on the device you are using. That includes the areas you paint, the findings and any notes you type, the measurements calculated from them, and any patient records you enter. None of it is transmitted to us or retained on our servers, and no analytics runs on those pages at all. The practical consequences are worth stating plainly:

  • We cannot see your work, so we cannot recover it, restore it, or produce it in response to a request — from you or from anyone else.
  • It does not sync. It is not available in another browser, another device, or another profile on the same device.
  • Anyone who can open this browser profile can open your work. On a shared or clinic device, treat it as unprotected.
  • Clearing browsing data, using private browsing, browser storage eviction, or uninstalling the installed app will delete it permanently, with no backup.

What we do collect

Anonymous usage analytics, on public pages only.

We use Google Analytics 4 to understand which of our public pages people find useful. It runs on our information pages — the homepage, how it works, about, pilot, terms, and this policy. It is switched off entirely on the workspace, the read-only viewer, the embed, and the two clinical-system launch endpoints: on those paths no request is made to Google at all. Where analytics does run, Google receives:

  • The page path you visited — deliberately stripped of any query string or fragment before it is sent, so nothing appended to a link travels with it.
  • A page label derived from our own route names, never from the page title, because a page title can contain text you typed.
  • Standard information your browser sends to any website: approximate location derived from your IP address, device and browser type, language, and the site that referred you.
  • Two events we define ourselves: that someone followed a call-to-action link, and that someone submitted the pilot-interest form. Neither carries anything you typed.
  • Google Analytics cookies, used to count a returning visit as the same visit rather than a new one.

The pilot form

Right now, the pilot form does not reach us either.

The pilot-interest form asks for your name, email address, organisation, role, and what you want to use the tool for. In the version of the site currently deployed, that submission is saved in your own browser and is not transmitted to us — so despite the form's wording, we do not receive it and cannot follow up on it. We are telling you this rather than quietly leaving the impression that we hold it. If you want to reach us, email the address on this page directly. When we do connect the form to a real inbox, we will update this policy in the same release, and what we then receive will be exactly the fields listed above, used only to reply to you.

Hosting

Microsoft Azure serves the site and keeps standard server logs.

The site is hosted on Microsoft Azure Static Web Apps in the United States. As with any web host, Microsoft's servers record ordinary technical information when a page or file is requested — including your IP address, the time of the request, and your browser's user-agent string. We use this only to keep the service running and secure. Microsoft processes it as our hosting provider under its own terms.

What we never do

The commitments you can hold us to.

These are written as commitments rather than as description, because they are the ones worth being able to point at later:

  • We do not sell your data, and we do not share it with data brokers.
  • We do not use your data for advertising, retargeting, or marketing profiles.
  • We do not place advertising trackers or social-media pixels on this site.
  • We do not run analytics on the workspace, the viewer, or the embed — the surfaces where your health information lives.
  • We do not ask for, and do not want, your name, date of birth, or contact details in order to use the tool.

Children

Built for adults.

This tool is intended for adults. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, write to us at the address on this page and we will delete it. Chronic pain affects young people too — if you are under 18 and mapping your own pain, please use the tool together with a parent, guardian, or your clinician.

Your rights

How to see, delete, or ask about your data.

Because your charts never leave your browser, most requests are things you can carry out yourself and immediately — we could not act on them faster, because we do not hold the data. For everything we do hold, write to us and we will respond within 45 days.

  • Delete your charts: clear this site's data in your browser settings, which removes everything permanently. We hold no copy to delete.
  • Turn off analytics: use your browser's do-not-track or an ad blocker, or simply use the workspace, where analytics never runs.
  • Ask what we hold about you: write to us. Today the honest answer for almost everyone is aggregate analytics that is not linked to your name.
  • Ask us anything else, or complain: danstone.pt@gmail.com. If you are in Washington State, see our separate Consumer Health Data Privacy Policy, which sets out additional rights.

Changes

We change the behaviour and the policy together.

This product is in active development, and the way it handles data will change — an account system and an encrypted cloud backup are both planned. Our rule is that a change in behaviour and the change to this policy ship in the same release: we will not quietly start collecting something and describe it later, and we will not describe a protection we have not built yet. When something material changes, we will update the date at the top and, where the change affects data already on your device, ask you before it applies.

Contact

Ask us anything about this policy.

Write to danstone.pt@gmail.com and a person will answer you. See also our terms and data notice and our Consumer Health Data Privacy Policy.