Privacy Policy
Last updated: August 28, 2026
1. Introduction
Cardiac Rhythm Simulator is operated by ShadeTree.IT LLC. This Privacy Policy explains how we collect, use, disclose, store, and protect information when you access or use our website, applications, and related services (the “Service”).
2. Information We Collect
We collect the following types of information:
- Account Information: If you sign in with an email link or a third-party provider such as Google, we collect the identifiers needed to authenticate and maintain your account, such as your email address and provider-linked account identifier.
- User Content: Content you choose to save through the Service, such as saved rhythms and simulator configuration associated with your account.
- Usage and Analytics Data: We use Google Analytics for Firebase to measure product usage, including page views, feature usage, and selected in-product events such as simulator, rhythm, and quiz interactions. If you are signed in, we pass your account identifier to Google Analytics so that these events can be associated with your account.
- Behavioral Analytics and Session Replay: We use Microsoft Clarity to understand how visitors interact with the Service, through behavioral metrics, heatmaps, and session replay. This data is captured using first- and third-party cookies and other tracking technologies, and we use it to find usability problems and improve the Service. We do not use it for advertising. If you are signed in, we pass your account identifier to Clarity so that a session can be associated with your account. For more information about how Microsoft collects and uses this data, see the Microsoft Privacy Statement.
- Device and Technical Data: Information such as browser type, operating system, approximate device characteristics, referral context, and diagnostic information generated when you access the Service.
- Local Browser Storage: We use local storage and session storage to preserve sign-in flow state, redirect targets, simulator state, explorer state, and certain user preferences on your device.
- Support Communications: If you contact us, we may collect the contents of your message and any contact details you provide.
3. How We Use Your Information
We use collected information to:
- Provide, maintain, and improve the Service
- Authenticate your identity and manage your account
- Save your account-linked content and preferences
- Operate security, fraud prevention, debugging, and abuse prevention processes
- Respond to support inquiries and service-related communications
- Analyze usage patterns to improve user experience and product quality
- Comply with legal obligations
4. Data Sharing and Disclosure
We do not sell your personal information. We may share your data with:
- Service Providers: Google Firebase for hosting, authentication, analytics, and account-linked storage functionality, as described in the Google Privacy Policy
- Analytics Providers: Microsoft, through Microsoft Clarity, for behavioral analytics, heatmaps, and session replay, as described in the Microsoft Privacy Statement
- Authentication Providers: Third-party sign-in providers you choose to use, such as Google
- Legal Requirements: When required by law, regulation, or legal process
- Business Transfers: In connection with a merger, acquisition, or sale of assets
5. Cookies and Similar Technologies
The Service uses a combination of browser storage, authentication state, and analytics technologies to keep you signed in, preserve app state, remember certain preferences, measure usage, and improve performance. You can limit some of these technologies through your browser settings, but doing so may affect Service functionality.
Microsoft Clarity uses first- and third-party cookies to recognize returning visitors and to keep a session together across pages. Google Analytics for Firebase sets its own cookies and identifiers to distinguish visitors and sessions. For visitors we identify from their device’s time zone as being in the European Economic Area, the United Kingdom, or Switzerland, we show a cookie banner on arrival and store nothing until you choose: until you accept, Clarity runs in consent mode without cookies and Google Analytics for Firebase is never started. Declining keeps it that way, and every feature of the Service works the same either way. Elsewhere, by continuing to use the Service, you agree that we, Microsoft, and Google may collect and use this data as described in this policy. You can review or change your choice at any time through the Cookie Settings link in the footer of every page.
6. Marketing Communications
By using the Service or providing us with your email address in connection with the Service, you agree that ShadeTree.IT LLC may send you marketing, promotional, announcement, and follow-up communications relating to this Service and other products, services, or offerings owned or operated by ShadeTree.IT LLC. You may opt out of marketing emails at any time by using the unsubscribe link in the email or by contacting support@cardiacrhythmsim.com. Even if you opt out of marketing communications, we may still send non-marketing service, account, security, and legal notices when necessary.
7. Data Retention
We retain account information and account-linked content for as long as reasonably necessary to operate the Service, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated personal data by contacting support@cardiacrhythmsim.com. For more details, see our Data Deletion Policy.
8. Data Security
We use reasonable technical and organizational safeguards designed to protect personal information. However, no method of Internet transmission, third-party hosting, or electronic storage is completely secure, and we cannot guarantee absolute security.
9. International Data Processing
The Service uses providers such as Google Firebase that may process or store information on infrastructure located outside your country, state, or region. By using the Service, you understand that your information may be transferred to and processed in jurisdictions with different data protection rules than those of your home jurisdiction.
10. Children’s Privacy
The Service is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected such information without appropriate authorization, we will take steps to delete it.
11. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your personal information
- Object to or restrict processing of your information
- Withdraw consent at any time
To exercise any of these rights, contact us at support@cardiacrhythmsim.com.
12. Third-Party Links
The Service may contain links to third-party websites, datasets, and educational resources, including the PhysioNet database and third-party sign-in providers. We are not responsible for the privacy practices of those third parties. Please review their policies before providing personal information.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. Your continued use of the Service after such changes constitutes your acceptance of the revised policy.
14. Contact Us
If you have questions about this Privacy Policy, please contact us at:
ShadeTree.IT LLC
Email: support@cardiacrhythmsim.com