Privacy Policy
Denial Decoder Chrome Extension — Last updated: February 27, 2026
Denial Decoder has a strict zero-data-collection architecture. We do not transmit any data to external servers. All 1,520 denial codes are bundled locally in the extension.
1. Overview
Denial Decoder is a Chrome extension that provides instant CARC (Claim Adjustment Reason Code) and RARC (Remittance Advice Remark Code) lookup for healthcare billing professionals. This privacy policy explains our approach to data — specifically, the deliberate absence of data collection.
2. Data We Do NOT Collect
We want to be completely explicit about what Denial Decoder does not do:
- No personal information — We never collect names, emails, or any PII
- No patient data — We never access, collect, store, or transmit Protected Health Information (PHI)
- No browsing history — We do not track which websites you visit
- No web page content — We do not read, scrape, or analyze any web page content, including EHR screens
- No keystroke logging — We do not log keystrokes outside of the extension's own search interface
- No analytics or telemetry — No Google Analytics, Mixpanel, Sentry, or any tracking service
- No network requests — Denial Decoder makes zero network requests during normal operation. All data is bundled locally
3. Data Stored Locally
All data is stored locally on your device using Chrome's built-in storage APIs. This data never leaves your browser:
| Data Type | Purpose | Storage |
|---|---|---|
| Code database | CARC/RARC code reference data for offline lookups | IndexedDB (local) |
| Preferences | Theme setting (light/dark/system) | chrome.storage.local |
| Lookup history | Recently searched codes (code + description only) | chrome.storage.local |
| Feedback queue | User-submitted feedback ratings (if manually exported) | chrome.storage.local |
| Usage counter | Simple lookup count for daily limit tracking | chrome.storage.local |
4. Network Requests
Denial Decoder makes zero network requests. All denial code data (407 CARCs, 1,113 RARCs, group codes, CAQH CORE scenarios, and appeal templates) is bundled into the extension at build time and stored locally in IndexedDB. The extension functions entirely offline after installation.
This means: No API calls. No CDN requests. No font loading. No analytics pings. Nothing.
5. Permissions Explained
| Permission | Why We Need It |
|---|---|
| storage | Save your preferences, lookup history, and cached code database locally on your device |
| sidePanel | Display the extension in Chrome's side panel for persistent reference alongside payer portals |
| alarms | Periodic license validation for Pro tier users (free tier makes no alarm-triggered requests) |
6. Third-Party Services
Denial Decoder does not integrate with, connect to, or transmit data to any third-party services. There are no analytics platforms, advertising networks, error tracking services, or external APIs.
7. Data Sources
Denial code data bundled in Denial Decoder is sourced from:
- X12.org — Official CARC and RARC code definitions maintained by the X12 standards body
- CMS (Centers for Medicare & Medicaid Services) — Claim Adjustment Group Code definitions
- CAQH CORE — Business scenario mappings from the Committee on Operating Rules for Information Exchange
All data is verified against authoritative sources and bundled at build time. No runtime data fetching occurs.
8. Children's Privacy
Denial Decoder is a professional tool designed exclusively for healthcare billing and coding professionals. It is not directed at children under 13 and we do not knowingly collect any data from children — or from anyone.
9. Changes to This Policy
We may update this privacy policy as the extension evolves. Significant changes will be communicated through the extension's update notes on the Chrome Web Store. The "Last updated" date at the top will always reflect the most recent revision.
Disclaimer & Limitation of Liability
Not medical advice. Denial Decoder is a reference tool for qualified healthcare billing professionals. It does not provide medical advice, clinical decision support, or treatment recommendations. All denial management decisions should be made by qualified professionals using their professional judgment.
Data accuracy. While Denial Decoder sources data from official standards organizations (X12.org, CMS, CAQH CORE), we do not guarantee the accuracy, completeness, or timeliness of any data presented. Users should verify codes against current official publications.
Limitation of liability. TO THE MAXIMUM EXTENT PERMITTED BY LAW, DENIAL DECODER AND ITS CREATORS SHALL NOT BE LIABLE FOR ANY CLAIM DENIALS, REIMBURSEMENT ISSUES, AUDIT FINDINGS, PENALTIES, OR OTHER CONSEQUENCES ARISING FROM THE USE OF THIS TOOL. The software is provided "AS IS" without warranty of any kind.
No HIPAA obligations. Because Denial Decoder operates under a zero-data-collection architecture and never accesses, stores, or transmits Protected Health Information, it does not function as a Business Associate under HIPAA. No BAA is required or offered.