CoverBridge
Find plans in
Check my savings

Legal

Privacy

Short version: this demo stores nothing on a server and sets no cookies. The longer version explains what a real platform in this category would handle, because that is worth knowing.

Last updated

This is a demonstration site. CoverBridge is a fictional company built as a design and engineering demo. This document is written to read like a real one, but it governs nothing, because there is no service, no account and no data collection behind it.

What this demonstration actually does

Every interactive element on this site runs entirely inside your browser. The subsidy estimator, the qualifying life event checker, the plan filters and the enrollment form all compute locally in JavaScript. Nothing you type is transmitted to a server, because there is no server behind them.

The one thing stored anywhere is the enrollment form's progress, which is kept in your browser's sessionStorage so that refreshing the page does not wipe what you typed. It is cleared when you finish the form or close the tab, it never leaves your device, and no other party can read it.

There are no analytics scripts, no advertising pixels, no session recording, no third-party tag manager and no cookies set by this site.

What a real platform in this category would collect

The rest of this document describes what a production ACA enrollment platform handles, because the shape of that is worth understanding even in a demo.

A live platform operating as a CMS-approved web broker necessarily collects: names, dates of birth and Social Security numbers for every applicant; household composition and tax filing status; projected household income and its sources; immigration document numbers where applicable; contact details; and the plan selections and effective dates that result.

Most of that is not optional. The Marketplace requires it in order to determine eligibility, and an application submitted without it cannot be processed.

How that information would be used

A production platform would use it for exactly four things:

  • Determining eligibility for a premium tax credit, cost-sharing reductions, Medicaid or CHIP
  • Submitting and maintaining your Marketplace application
  • Communicating with you and, where you authorise it, with carriers on your behalf
  • Meeting the record-keeping obligations that apply to licensed producers and web brokers

It would not be sold. It would not be used to build advertising audiences. It would not be shared with a data broker. In this category those are meaningful commitments rather than boilerplate, because health and income data is exactly the kind of data that gets monetised when nobody promises otherwise.

Protected health information

A production platform acting as a business associate in the enrollment process operates under HIPAA. In practice that means encryption in transit and at rest, role-based access controls with audited access logs, workforce training, breach notification procedures, and business associate agreements with every downstream vendor that touches protected health information.

It also means the minimum necessary standard: staff see the smallest amount of information required to do the specific task in front of them, rather than the whole file by default.

Your rights

Depending on where you live, you may have the right to access the personal information held about you, to correct it, to request deletion where no legal retention obligation applies, to obtain a portable copy, and to opt out of any sale or sharing of it. Residents of California, Colorado, Connecticut, Virginia and a growing list of other states have statutory versions of these rights.

You also have the right to designate or remove a broker on a Marketplace application at any time, without affecting your coverage or your premium.

On this demonstration site none of these rights are engaged, because there is nothing held about you to access, correct or delete.

Retention

Licensed producers are required to retain records of the applications they handle, typically for several years after the policy ends, with the exact period set by state insurance regulation. A production platform would keep records for that period and no longer, then delete them on a scheduled basis rather than accumulating them indefinitely.

This demonstration retains nothing.

Children

A real platform collects information about children only as part of a household application submitted by an adult, and only what the Marketplace requires in order to determine eligibility for that child, including CHIP. It would not knowingly collect information directly from a child.

How to reach us about this

Because this is a demonstration, there is no privacy office and no data to ask about. If you have a question about the demo itself, the contact page has the details, and the form there is equally non-functional by design.

For real questions about your real coverage and the information the Marketplace holds, contact healthcare.gov or your state marketplace directly.