Privacy, in plain English

Last reviewed: 3 June 2026. General information, not medical advice.

Short version: we don’t want your personal information and we’ve built the site so we mostly don’t get any. Here’s the honest detail, including the one third-party tool we do use.

What we don’t do

• No accounts. No logins. No newsletter. The only form anywhere is the optional story submission — covered in detail below.
• No database of users. There’s nowhere for your personal info to be stored, because we don’t have one.
• No ads, and so none of the tracking that comes with ad networks.

The self-reflection tool stores and sends nothing

The self-reflection runs entirely on your own device. Your answers are held in your browser’s memory just long enough to show you the page — they are never saved, never sent anywhere, and they’re gone the moment you refresh or close the tab. To make that promise real, we also switch our analytics off completely on that page, so it makes no third-party calls at all. Nothing you tap there leaves your device.

Analytics on the rest of the site

On the other pages we use Cloudflare Web Analytics to see basic, aggregate things like how many people visit and which pages are useful. It helps us decide what to write next. Being straight with you, that means:

• It is cookieless — it sets no cookies and stores nothing on your device.
• It collects only aggregate, anonymous usage (pages viewed, rough location, device/browser, referrer). We don’t collect your name, email, or anything that identifies you personally, and there’s no cross-site tracking.
• Because nothing identifies you, there’s no consent banner and nothing to opt out of.
• Cloudflare is a US company, so this aggregate data is processed overseas, in the United States. See Cloudflare’s privacy policy.

If you submit a story

The Stories section is the one place we deliberately collect something — and only if you choose to send it. It runs on a separate system (a Cloudflare Worker at stories.notnpd.com), not on this static site. Here’s the deal, plainly:

• What we collect: the story you write, an optional display name (a first name or “Anonymous” — no surnames), and optionally your state. We don’t ask for your email or any account.
• Anti-spam: we use Cloudflare Turnstile and store a one-way hash of your IP address to stop abuse — never your actual IP.
• How it’s handled: submissions are screened by an AI (Anthropic’s Claude) to flag spam, identifying details and crisis content, then a human reads every one before anything is published. Nothing goes public automatically. Anthropic and Cloudflare are US-based, so this screening and anti-spam happens overseas, in the United States.
• If published: only an anonymised version appears, and only after review. Please don’t include real names or details that identify you or anyone else — we’ll skip submissions that do.
• Retention: submissions that aren’t published are automatically deleted after 90 days. Published stories stay until you ask us to remove one.
• Not a way to get help: that box isn’t monitored in real time. If you’re struggling, use get help — that’s what it’s there for.

Your hosting footprint

Like any website, our web server keeps standard request logs (your IP address, the page requested, time, and browser type) for security and to keep the site running. These are ordinary server logs, not a profile of you.

Contact & complaints

If you’ve got a privacy question, get in touch via the details on the about page. If you think we’ve mishandled your privacy, tell us first and we’ll try to put it right. If you’re still not happy, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

This page was last reviewed 3 June 2026.