Draft. This page is pending legal review and some details are still to be filled in.

Privacy Policy

Effective October 8, 2026

MCAS Lookup is a free tool run by [Sōtō Naturals legal entity name] (“Sōtō Naturals,” “we”). We built it to collect as little about you as possible. In short:

  • There are no accounts, and we never ask for your name, email or health details.
  • We don't use cookies, analytics, advertising or tracking of any kind.
  • We don't store what you search for or scan.
  • Camera images and photos are read on your device and never sent to us.

What happens when you search

When you type an NDC or medication name, or scan a barcode, your device sends that text (for example 0093-0147-01or “montelukast”) to our server. Our server uses it to look up the product in public government databases, builds the page you see, and then discards it. We don't save searches or link them to you.

To answer a search, our server sends the NDC or medication name to these public data sources:

  • the U.S. Food and Drug Administration's openFDA service;
  • the U.S. National Library of Medicine's DailyMed and RxNorm (RxNav) services.

These requests come from our server, not your device, so those services don't receive your IP address or anything else about you. Responses are cached on our server for up to 24 hours to make the site faster; the cache holds public drug data, not information about who asked.

Camera and photos

The barcode scanner only turns on the camera when you choose to scan, and only with your browser's permission. Video frames and any photo you choose are processed entirely on your device to read the barcode. Only the decoded number is sent to our server, as described above. Images are never uploaded or stored.

Server logs

Like nearly every website, our hosting provider ([hosting provider]) automatically records basic technical information about requests to operate and secure the service. This can include your IP address, browser type, the time of the request and the address of the page requested, which may contain your search text. These logs are kept for [number of days], used only for running and protecting the site, and not used to identify or profile visitors.

Cookies and storage

We don't set cookies and don't store anything in your browser's local storage. If you add MCAS Lookupto your home screen, your device keeps a copy of the site's icon and name; that stays on your device.

Links to other websites

We link to research papers, government databases and MCAS organizations. Those sites have their own privacy practices, which we don't control.

Children

MCAS Lookupis a general information resource and isn't directed at children under 13. We don't knowingly collect personal information from anyone, including children.

Your rights

Because we don't keep personal information about visitors, there's generally nothing for us to access, correct or delete. If you have a question or a request under privacy laws that apply to you, such as the GDPR or California's CCPA, contact us and we'll respond.

Changes

If we change how MCAS Lookuphandles information, we'll update this page and its effective date. If we ever start collecting personal information, we'll say so here before we do.

Contact

Questions about privacy: [contact email]. See also our Terms of Use.