Privacy
Canker Core holds health information, so it keeps as little as it can.
Last updated 9 September 2026
What is stored
Your email address and password hash, so you can sign in. Anything you choose to put in your profile, which is only a name. And your sores: position on the mouth map, size and pain readings, and the dates those readings were taken.
Where it is stored
On a self-hosted Postgres database on the same server that runs the site. Your sores are readable only by your own account.
What is not done with it
Your records are not sold, shared with advertisers, or used to train anything. There is no third-party analytics or tracking on the pages where your data appears.
Sign-in with Google or GitHub
If you sign in that way, Canker Core receives your email address and account identifier from that provider and nothing else. It never sees your password for those accounts.
Removing your data
You can delete individual sores from the mouth map at any time. To delete your whole account and every reading attached to it, open Settings, then Account, and choose Delete account. It is removed immediately. The same page lets you download everything first as a CSV file.
Getting in touch
Questions about any of this go to hello@cankercore.com.