Privacy
The short version
- Your self-screening answers never leave your browser. We can't see them.
- If you write to us, we use your message only to reply.
- Analytics run only if you allow them, and never include your screening answers.
Who is responsible
DopaFix is run by Bianca Araujo and Felipe Gomes, trading as individuals (no company), 36 Summerhill Parade, Dublin D01 Y4Y9, Ireland, who are the data controller. Privacy questions: support@dopafix.tools.
The self-screening
The screening runs entirely in your browser. While you answer, your responses are kept in your browser's session storage so a refresh doesn't lose your place. They are deleted when you close the tab, or straight away if you choose "Clear my answers". They are never sent to us, stored on our servers or shared with analytics. Answers about ADHD-related experiences can be sensitive, which is why we designed it this way.
Contact form
Your name, email, topic and message, used only to reply. Legal basis: our legitimate interest in answering you. We keep messages as long as needed to deal with your enquiry, then delete them within 12 months. Please don't send health details you'd rather keep private.
To stop spam, we count messages sent from one connection using a one-way hashed form of your IP address, kept for up to one hour.
Purchases and your account
Only if you buy something on this site. We keep your email address (to deliver the purchase and send you sign-in links), your order (products, amounts, status, dates) and the payment reference from Stripe. You sign in with single-use links sent by email; there is no password to store. Card details go directly to Stripe and never reach us. Legal basis: performing our contract with you (delivering your purchase and your account), and our legal obligation to keep accounting records. We keep orders and payment records for 6 years after the end of the tax year, as Irish tax law requires; your account stays until you delete it. Stripe (Stripe Payments Europe, Limited, Ireland) processes your payment as an independent controller under its own privacy policy.
The paid self-assessment
Your individual answers are used once, on our server, to calculate your result, and are then discarded — they are never stored. We keep the result (a level for each area, the summary and the suggestions shown to you) linked to your account so you can open it again, until you delete it or your account. Results relate to your experiences around ADHD-related patterns and may be sensitive. Because a result may reveal information about your health, we treat it as special category data under the GDPR and process it only with your explicit consent, which we ask for on a separate screen before the assessment starts. You can withdraw that consent at any time by deleting the result or your account.
You can download a copy of your account data or delete your account and its results at any time on your account page.
Guided programmes
If you buy a guided programme (such as Bloom 30), we keep only the purchase in your account. Your progress, check-ins and notes are saved in your own browser's local storage and are never sent to us. If you have completed the paid self-assessment, the programme page reads your stored result to mark the days for your strongest patterns; nothing new is stored. You can clear the programme data from your browser on the programme page.
Analytics — only with your permission
If you choose "Allow analytics", Google Analytics 4 measures which pages are visited and which buttons are used (for example, that a screening was started or finished). It never receives your answers or results. If you choose "Necessary only", it never loads. You can change your choice under "Cookie settings" at the bottom of every page. Legal basis: consent.
Links to Amazon
Books are sold on Amazon. When you follow a book link, Amazon's own privacy notice applies there.
Who processes data for us
Our hosting provider (Hostinger International Ltd., Cyprus) hosts the site and keeps standard server logs. Google (Google Ireland Limited) processes analytics data only if you allow it. We don't sell personal data and we don't use advertising trackers.
Your rights
Under the GDPR you can ask for access, correction, deletion, restriction or portability of your data, object to processing, and withdraw consent at any time. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU or EEA country where you live, where you work or where you believe your rights were infringed. Write to support@dopafix.tools. In Ireland the supervisory authority is the Data Protection Commission (dataprotection.ie).