Page two of two
The licence, the wording, and everything recorded.
This site has two pages. The first one enrols you. This one is the part you are entitled to read before you tell anybody anything — who is accountable, what the consent form actually says, and exactly what is captured when you sign it.
One
The agent of record
Edward Gudas is a licensed health insurance agent writing under Gradepoint Insurance Group, LLC. His National Producer Number is 16974880; the agency's is 21297322. Both are public records.
Two
What an agent can and cannot do
Can
- Search for an application you already started on HealthCare.gov.
- Complete an eligibility and enrolment application with you, including for Medicaid, CHIP and advance premium tax credits.
- Keep the account maintained through the year — income changes, address changes, a new baby, a dropped plan.
- Answer the Marketplace when it writes asking for a document.
Cannot
- Charge you for any of it. Marketplace premiums are filed with the state and are identical with or without an agent.
- Change the price of a plan, or get you a version of it nobody else can buy.
- Use your information for anything other than the four purposes in the consent form.
- Act on your application at all until you have signed that consent.
Three
The CMS model consent form, in full
Reproduced word for word. On the enrolment page it appears with your name filled in and nothing else changed.
Document version cms-model-consent-agents-brokers/2026-01. When you sign it on the enrolment page, a SHA-256 hash of the exact string above — with your name substituted — is recorded and recomputed on the server, so the signature is bound to this wording and not to a later one.
Four and five
What this site records, and what it refuses to
Recorded by the server, which you cannot edit
- The network (IP) address this page was submitted from, and the country it resolves to
- The city, region, postal area, time zone, network operator and ASN Cloudflare resolves for that address
- The Cloudflare data centre, HTTP protocol and TLS version used
- Your full browser user-agent string, Accept-Language header and referring page
- The UTC time the server received the submission, and a reference ID generated for it
- A SHA-256 hash the server recomputes over each consent document it was sent, and whether it matches the one your browser reported
Reported by this page, and posted up with it
- Your local time, time zone name and UTC offset
- Your browser languages, platform, and user-agent brand list where the browser exposes one
- Screen size, viewport size and device pixel ratio
- Your reduced-motion and colour-scheme preferences
- The page you landed on, the current URL and the referrer
- Time spent on each of the nine stages and the total elapsed time
- The SHA-256 hash, version string and character count of the exact consent wording shown to you
- Whether each signature was drawn or typed, its ink coverage, and a hash of the signature image
Deliberately not collected
- Your Social Security number — this demo records only whether you say you have one available
- Canvas, WebGL, audio or font fingerprinting of any kind
- Any third-party analytics, advertising or tracking script — this site loads none
- Anything at all on a server after the response is sent: the record is assembled in memory, returned to you once, and not stored
Six
Where the data comes from
| What | Source | How it reaches the page |
|---|---|---|
| Plan availability, premiums, deductibles, formularies, crosswalk | CMS Marketplace API (marketplace.api.healthcare.gov) | Through a server-side proxy on this origin. The API key is an encrypted deployment secret and never reaches your browser. |
| Premium tax credit and cost-sharing estimates | CMS household eligibility endpoint | Same proxy. The estimate is CMS arithmetic, not a formula reimplemented here. |
| Medication names | National Library of Medicine, RxTerms | Called directly from your browser. It is a public, keyless service and it sees only what you type. |
| ZIP code to county | US Census 2020 ZCTA-to-county relationship file | Bundled with this site as 99 static shards covering 33,791 ZIP codes, 30.1% of which cross a county line. It answers offline, then the Marketplace confirms it. |
| City and state for a ZIP | Zippopotam.us | Called directly, keyless, and entirely optional — the county is what actually matters and it never depends on this. |
Seven
Accessibility
This site has not been through a formal WCAG audit, so it makes no conformance claim. Here is what it does do, stated so you can check it rather than trust it.
- Every stage of the enrolment is operable by keyboard alone, including the medication combobox, which uses arrow keys and
aria-activedescendantrather than moving focus. - The signature has a typed alternative rendered in a script face. A canvas-only signature would lock out every keyboard and switch user, so it is not offered alone.
- Progress is announced to assistive technology on every stage change, and errors are summarised at the top of the stage with focus moved to the summary.
- Text can be enlarged in three steps from the reading panel at the bottom-left, and the layout is built to hold at the largest.
- Reduce motion follows your operating system by default and can be forced either way. It genuinely stops the coverage field, the dial and every scroll-driven animation — it is not a class that only dims them.
- Colour is never the only carrier of meaning: every state that has a colour also has a word or an icon.
- All five colour schemes were measured at 4.5:1 or better against every ground they are painted on, in both light and dark, before they were offered.