Privacy
The short version: without an account, nothing you track ever leaves your browser. If you choose to sign in, a copy of your dashboard is stored so it can follow you between devices. That choice is yours and it is reversible.
Your tracker is not on our servers
Everything on the My Schools page (which schools you applied to, your essays, their statuses, your deadlines, your notes) is saved in your own browser using local storage. It is never transmitted to us. We could not show you your own list if you asked us to, because we do not have it.
The tradeoff is that clearing your browser data or switching devices loses it. That is why the Export button exists, and why we mention it on the page rather than burying it here.
What we actually collect
If you submit a prompt
We store what you typed: the school, the cycle, the prompt text, the length limit, and any note. If you fill in the optional email field, we store that too, and we use it for exactly one thing: asking you a follow-up question if the submission is unclear. It is never published, never sold, and never added to a mailing list. Leaving it blank is completely fine.
A one-way hash of your IP address
When you submit a prompt, we take your IP address, mix it with a secret value, and store the scrambled result. This lets us notice if one source floods the form with spam. The scrambling only works in one direction: the stored value cannot be turned back into your IP address. We do not store the address itself.
Nothing else
No advertising trackers. No third-party analytics scripts. The only cookie we set for visitors is the one that keeps you signed in, and only if you sign in. We do not use your submissions or your dashboard to train anything.
Companies that touch your data
MD Atlas runs on Vercel, which serves the site and keeps standard server logs, and on Neon, which hosts the database. If you sign in, Resend delivers the sign-in email. That is the entire list.
Deleting your data
Your tracker: the Clear Everything button on the My Schools page wipes it immediately. It is your browser, so it is genuinely gone.
A submission: email mdatlas.help@gmail.com and say which one, and it gets deleted. You do not have to explain why.
If you sign in
Signing in is optional and the dashboard works fully without it. It exists for one reason: so your list is on your phone as well as your laptop.
When you sign in we store your email address and a copy of your dashboard: schools, essays, statuses, interviews, prep notes. We use your email to identify your account and to tell you when essay feedback launches. We do not sell it, and there is no other mailing list.
There are no passwords. You sign in with your Google account, and Google confirms your email address to us; we never see your Google password. We store only a scrambled version of your session, so a database leak does not hand anyone a way into your account.
Deleting it: the account page has a delete button that removes your email and your synced dashboard from our database immediately. Your browser copy stays, so deleting the account does not cost you your work.
Under 18
This site is built for people applying to medical school, so most visitors are adults. Nothing here is aimed at children, and we do not knowingly collect information from anyone under 13.
Questions
MD Atlas is run by one person, not a company. If something here is unclear or you want data removed, email mdatlas.help@gmail.com and a human will actually read it.
Last updated: August 2026. Changes get noted here rather than applied quietly.