Privacy Policy

This assessment is operated by Hope Health and Safety, registered at ВЕЦ Симеоново 999, 1138 Sofia, Bulgaria (Company No. / ЕИК: 206834868, VAT: BG206834868) — the “data controller” for the limited purposes described below. For any privacy question you can reach us at office@hopehealthandsafety.com or by phone on +359 2 962 8372.

When you answer the free questions or the full assessment, your answers are held only in your browser's session storage and are scored on your own device. They are not uploaded, logged, or saved anywhere by us. There is one exception, and it only ever happens when you choose it: if you press “Email me this report” on your results page, your answers are sent to us so we can build the PDF and email it to you. Nothing is stored either way — we have no server-side account or save feature.

• No database, ever. The entire scoring engine runs client-side in your browser, and we keep no record of your answers, your results, or your email address — not before you ask for an emailed report, and not after. Every report is built from scratch, in memory, and discarded.
• Cleared automatically. Session storage is erased when you close the browser tab. You can also clear it at any time from your browser settings.
• Your PDF is yours. The Download PDFbutton generates the report locally, through your browser's own print function — it never reaches our servers at all. If instead you ask us to email it, the PDF is generated on our server for that one request, attached to your message, and never written to disk or kept.
• Two small on-device preferences.If you choose a country to see local crisis lines, or complete an assessment more than once, those choices (your country selection, and your previous scores for the “vs last time” comparison) are saved only in your browser's local storage — on your device, never on ours. Nothing in local storage is ever transmitted anywhere.
• Same rights, every tier.Whether you've only answered the free preview or purchased the full report, the same is true for you: we hold nothing, so there is nothing tiered about your privacy.
• If you ask us to email your report. This is entirely optional, never automatic, and never the default. Pressing the button is your explicit consent under Article 9(2)(a) GDPR to us processing your health data for that single delivery. Your answers are posted to us, scored again on the server, turned into a PDF in memory, and handed to our email provider, Resend, which sends it and keeps a delivery log. We never store the report or the address it went to. By default there is nothing for you to type: we use the address you paid with, taken from Stripe. You may instead enter a different one — your GP or therapist, say — and we will use it for that single message and nothing else. Choosing to send your results to someone else is your decision to make, so please be sure of the address before you send. You can also simply not press the button — the Download PDF option gives you the same report without anything leaving your device.

So the results page can show relevant local helplines, we make one request to our own /api/geo endpoint. This runs at our hosting provider's edge and returns only your country code (for example, “BG”), derived from your IP address. The response is explicitly marked not to be stored (no-store), we do not log your IP for this, and we do not receive your precise location. You can override the detected country manually on the results page.

The full report is unlocked with a one-time payment handled by Stripe on Stripe-hosted checkout pages. When you pay:

• Your card and billing details are entered directly on Stripe and are processed by Stripe as an independent data controller under Stripe's Privacy Policy.
• We never see or store your card details. After checkout we only verify that the payment session was marked paid — nothing more — to unlock your report.

The site is hosted on Netlify. Like any web host, Netlify may transiently process standard technical request data (such as your IP address and browser type) to serve pages and protect the service against abuse. We do not use this data to identify you or to build a profile.

The assessment and results pages use no advertising or analytics cookies and no third-party trackers — the session storage (your answers) and the single local-storage country preference described above are the only on-device storage there, and neither is used to track you across sites.

Site-wide, we also use Plausible, a privacy-focused analytics tool that sets no cookies and stores nothing on your device. It records that a page was viewed, and a small number of named milestones (such as starting the free preview or completing a purchase), from an EU server — never your answers or your score, and never anything that identifies you individually. Plausible is not an advertising platform: it never sends this to Meta, TikTok or Google, and it cannot be used to retarget or build a profile of you.

On the rest of the site (the homepage, About, Blog, and other marketing pages), we use marketing cookies from Meta (Facebook/Instagram), TikTok, and Google to measure how our advertising and social media posts perform. These only load after you accept them in the cookie banner — declining or ignoring the banner means they never load. They are never active on the assessment or results pages — including the moment right after a purchase — so that taking the assessment, completing a purchase, or viewing your results is never reported to an advertising platform.

You can withdraw consent at any time by clearing your cookies, or by using each platform's own controls: Meta Ad Settings, TikTok Opt Out, and Google Privacy Controls.

We hold no personal data about you on our servers, so most data requests are things you can act on yourself instantly: closing the tab or clearing your browser storage removes your answers and preferences completely.

Where the EU General Data Protection Regulation (GDPR) applies, you have rights of access, rectification, erasure, restriction, portability and objection. For payment records, those are held by Stripe as processor of your payment — you can also contact us at office@hopehealthandsafety.com and we will help direct your request. You may also lodge a complaint with your local data protection authority.

We retain no assessment data at all — answers exist only in your browser for the duration of your session. Payment and invoice records are retained by Stripe (and, where legally required for tax and accounting, by us via Stripe) for the period required by law.

One thing to be aware of if you ask us to email your report: although we keep no copy, the message and its PDF attachment pass through our email provider Resend, which retains them in its delivery logs (stored in the USA) for a limited period so that bounces and failures can be diagnosed. If you would rather no copy of your report existed anywhere outside your own device, use Download PDF instead of the email option.

This assessment is intended for adults (18+) and is not directed at children. Please do not use it if you are under 18.

If we change how the service handles data, we will update this page and the “Last updated” date above. Material changes will be reflected here before they take effect.