Privacy notice — teaching evaluation
This notice covers the evaluation questionnaires that sit around the BeamLab Education simulator. The simulator itself is unchanged: it makes no network requests and stores nothing, as its own privacy policy states.
What is collected
| Item | Why |
|---|---|
| Your email address | To sign you in without a password, to match your pre- and post-session answers, and to let you withdraw them. |
| Your questionnaire answers | The knowledge score, confidence ratings, app-quality ratings (uMARS), usability ratings (SUS) and free-text comments. |
| Timestamps and durations | When each form was submitted and how long the simulator was open, so that a short session can be distinguished from a genuine attempt. |
| Background questions | Role, years of experience, previous planning-system exposure, familiarity with DVHs, and an optional free-text location. Used only to describe the sample. |
No clinical or patient information is requested. Nothing drawn inside the simulator is transmitted: the simulator runs entirely in your browser.
Who holds it, and where
The controller is Ken Cheung, who publishes BeamLab. The service runs on Cloudflare Pages, Cloudflare Access and Cloudflare D1; Cloudflare processes the data on the controller's behalf. Access sends the one-time sign-in code and keeps a session cookie so you do not have to sign in on every page. There is no analytics, no advertising, no tracking pixel and no third-party script on these pages.
Data is stored in the Cloudflare region selected when the database was created. Access to the database is limited to the controller's Cloudflare account and to the investigator addresses named in the deployment configuration.
How long it is kept
Questionnaire responses are kept for 24 months from submission and then deleted. The optional free-text location field is used only for the sample description and is reported in aggregate, never quoted alongside a comment.
Your choices
Withdrawal is a button, not an email. On the study home page, “Withdraw and delete everything recorded for my address” deletes your consent record, both questionnaires and all session records immediately. There is no soft-deleted copy.
You may also ask for a copy of your answers, or ask a question about this notice, at kcheung.inno@gmail.com.
Participation is voluntary. You may stop at any point before submitting; nothing is stored until you press submit.
What this is not
This is a teaching evaluation, not a clinical study and not a medical device. No diagnostic or treatment decision may be based on anything the simulator shows. If you believe you have found a numerical error that could matter clinically, please say so in the free-text box or by email — that is exactly the kind of finding this evaluation exists to catch.
Instruments and their sources
Knowledge items were written for this evaluation against ICRU 50/62/83, the QUANTEC 2010 summary table and standard radiotherapy physics texts; they are new and have not yet been psychometrically validated — the analysis plan describes the validation that a formal study would require. App quality is measured with uMARS (Stoyanov et al., JMIR mHealth uHealth 2016;4(2):e72, CC BY 4.0), usability with the System Usability Scale (Brooke 1996, freely available for use). Both are reproduced verbatim and cited on the questionnaire pages.