Privacy and data handling

Last updated September 2026

What GIScopeTracker is

A personal logbook for endoscopic procedures. It records the procedures you performed and how they went, so you can track volumes, quality measures, learning curves and direct-observation assessments. It is not a medical record and is not intended to hold personal health information.

What is collected

• Account: your email address and a password (stored by the authentication service as a salted hash). Optionally, a display name and training level for your scorecard.
• Procedure entries: the month (not the date), procedure type, optional anatomical site, complexity, degree of independence, technical success, adverse-event category, key skills, strengths and areas to improve, and procedure-specific outcomes — all chosen from fixed lists.
• DOPS assessments: month, template, assessor role (staff, senior fellow or self), item scores and global score, and an optional link to one of your logged procedures.
• Reflections and learning goals: month, procedure type, an optional link to one of your logged procedures, and choices from fixed lists (what prompted the reflection, strengths, areas to improve, insights, actions, confidence). There is no free text.
• Import history: the time of each import and how many rows it contained — not the file name or contents.

What is never collected

Patient names, medical record numbers, health card numbers, dates of birth, age, sex, exact procedure dates, hospital or room, endoscopist or staff names, indications written in free text, or any other free text about a patient. There are no free-text clinical fields; the database rejects any value that is not on the fixed lists.

Spreadsheet import

Files you import are opened and parsed in your browser. Only recognised columns are read, and only values that match the fixed lists are sent. Unrecognised columns (for example “Patient name” or “Notes”), file names, and exact dates never leave your device — a full date is reduced to its month before upload.

Who can see your data

Only you. Every row is tied to your account and protected by row-level security in the database, so other users cannot read or change it. The site operator can administer the database but does not access individual logbooks except to maintain the service or when you ask for help.

Where it is stored

Data are stored in a Supabase (PostgreSQL) project hosted in the Canada (Central) region. The website itself is served by Netlify. Connections are encrypted (HTTPS).

Cookies and tracking

No advertising, analytics or third-party tracking. Your browser keeps your sign-in session and theme choice in local storage so you stay signed in.

Your control

• Export all of your data to Excel or CSV at any time.
• Edit or delete any entry, undo an import, delete all logged data, or delete your account (Settings). Deleting your account removes all of its data.

Your responsibilities

Follow your institution's and program's policies on recording procedural experience. Do not enter information that could identify a patient anywhere, including in a spreadsheet before import.

Demo

The demo uses fictitious data generated in your browser. Nothing you do in the demo is sent anywhere.