Privacy Policy

Effective August 23, 2026

GypsyReports.com is a community-run database for travel healthcare workers — nurses, allied health, and other travelers — started in 2017 by Gary Mendoza and funded out of pocket, without advertising. This policy explains what information the site collects when you use it, why, and what your choices are.

What we collect

Community report submissions

When you submit a report to any database — facilities, housing, recruiters, contracts, testing, cancellations, or resources — we collect:

The content of the report itself (the fields on that category's form)
Your IP address at the time of submission, kept for spam and abuse prevention — it is never shown publicly alongside your report
For the cancellations and resources databases only, an email address, used solely so a moderator can follow up with you about that specific report

Reports are reviewed before appearing publicly. Anonymous posting is supported — you're never required to identify yourself in the report content itself.

Contact form

Your name, email address, and message are sent directly to our inbox by email. They are not stored in our database.

Supporting the site financially

If you choose to support Gypsy Reports with a one-time payment, we store your email address, which support tier you chose, and your payment status. We never see or store your card details — payment is handled entirely by Stripe on Stripe's own secure checkout page.

Pay Calculator

The calculator emails a copy of your estimate to the email address you provide — that's the only place your email is used or kept. The assignment numbers (facility, agency, city/state, and pay figures) are saved to help build real pay-transparency data for other travelers, but your name and email are deliberately left out of that saved record.

Why we collect it

To run the community databases this site exists for — storing and displaying the reports travelers submit
To detect and block spam, bots, and abusive submissions
To follow up on cancellation and resource reports when a moderator needs more detail
To respond to messages sent through the contact form
To grant and remember access to paid supporter features

We do not use your information for advertising, and we do not run ad-tracking or analytics scripts on this site.

How long we keep it

Data	Retention
Published community reports	Kept indefinitely — they're the public record the site exists to maintain
Contact form messages	Not stored; exists only as an email in our inbox, kept or deleted like any other email
Submission rate-limit records (IP + timestamp, used to block spam)	Automatically deleted after 24 hours
Supporter account records	Kept while your support is active, plus a reasonable period after, so a future gift can pick up where you left off

Who we share it with

We do not sell your information to anyone, ever.

Stripe processes all payments. See Stripe's privacy policy.
The Snapshot tool pulls public Medicare/Medicaid facility ratings from CMS's Care Compare service on your behalf — your search terms aren't shared with CMS in a way that identifies you.
We link out to Indeed, Glassdoor, Google, and our Facebook group in a few places — those are just links; nothing from those sites is embedded on or tracks you through our pages.

Cookies

Cookie	Purpose	Lifespan
Session cookie	Keeps forms secure against cross-site request forgery while you fill them out	Ends when you close your browser
Supporter access cookie	Remembers that your browser unlocked a paid tier, so you don't have to click your access link every visit	400 days

We don't use advertising or analytics cookies on this site.

Security

We take reasonable steps to protect the information you share, including rate-limiting, spam filtering, and blocking known malicious traffic patterns. No online service can guarantee perfect security, but we don't store payment details ourselves, which limits what could ever be exposed in the first place.

Your choices

You can submit most reports anonymously — nothing in the report content itself requires identifying yourself.
You can ask us to remove a report you submitted, or to stop emailing you about a cancellation/resource report, by contacting us below.
You can ask us to delete your supporter record; this ends your access to supporter-only tools.
We can't fully anonymize the IP address logged at submission time without breaking spam prevention for everyone — it's never published or shared, only used internally.

Children's privacy

Gypsy Reports is intended for working healthcare professionals and isn't directed at children. We don't knowingly collect information from anyone under 13.

Changes to this policy

If this policy changes in a meaningful way, we'll update the effective date at the top of this page.

Contact

Questions about this policy or your data: reports@gypsyreports.com