A ranking, not a profile.
You can explore without submitting anything. Sharing a ranking is a separate, optional action.
Who runs this service
Foundation Compass is an independent project by Hector Waudby-West. For questions or deletion help, email hola@hectorwaudbywest.com. It is not affiliated with UKFPO, Oriel or the NHS.
What stays in your browser
Both draft lists and optional desirability labels are saved in local storage. Reset changes the active draft; Undo restores the previous edit. Clear this site’s local storage to remove drafts. Synthetic and historical scenarios run in your browser. No advertising, analytics or AI service receives your preferences.
What is stored if you contribute
A complete ordered list of 18 school IDs, FP2027 cohort, optional school categories, creation and update timestamps, and a hash of an opaque browser token. The application does not store names, emails, medical schools, IP addresses or user agents with submissions. Cloudflare may separately process operational request logs.
In the hosted service, contributions are stored in a private Cloudflare D1 database. Local development uses a SQLite file on that computer. The secure random token is placed in an HttpOnly, SameSite=Strict cookie lasting up to one year; HTTPS also marks it Secure. It lets this browser update or delete its own submission. It is not proof of one human.
What other people can see
Only whole-cohort aggregates. School statistics require at least 100 complete submissions. Counts below five, small complements and selected additional cells are withheld. Daily releases reduce exposure to individual changes. These controls reduce disclosure risks but are not a formal anonymity guarantee. Categories are never published as subgroups.
Delete or update
Saving List A again from the same browser replaces the previous submission. Deletion removes the current row and invalidates aggregate releases for this cohort. No individual change history is retained. Rate-limit records expire after a day.
If you clear the cookie or change browser, the system cannot reconnect you to an earlier anonymous submission. Delete before clearing the cookie. If you have lost it, contact the operator; without identifying information in the database, a particular row may be impossible to locate.
Current-cohort simulations
If you choose this mode, your two scenario lists are sent to the server for computation but are not saved as submissions. Contributed full rankings remain server-side; only simulated distributions are returned. This mode requires at least 100 contributions. It is a conditional model, not evidence that the sample resembles the ordinary allocation pool.
Retention and backups
Contributions remain until deleted by their browser owner, or until the end of the recruitment cycle (August of the admission year), at which point raw preferences will be dropped. Database exports or backups may retain older copies for up to 30 days. Thresholded aggregate statistical releases may be retained indefinitely.