Privacy Policy

Overview

WhatIsBrainFog.com ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

Data Controller

WhatIsBrainFog.com is operated by Paul Coskun. For data protection inquiries, contact [email protected].

Legal Basis for Processing (GDPR Article 6)

We process personal data under the following legal bases:

• Consent: Analytics cookies (GA4) are only loaded after you accept the cookie banner.
• Legitimate interest: Server logs and security monitoring (Cloudflare) to protect the site and its users.
• Contract performance: Account features, if you create an account, to provide the service you requested.
• Consent: Story analyzer submissions - you choose to submit your story for analysis.

1. Information We Collect

1.1 Information You Provide

• Contact Information: If you email us at [email protected], we receive your email address and any information you include in your message.

1.2 Information Collected Automatically

• Server Logs: Our hosting provider (Cloudflare) automatically logs standard web request data, which may include:
  • IP address
  • Browser type and version
  • Operating system
  • Pages visited and timestamps
  • Referring URL
• CDN Data: Cloudflare may collect data for security and performance purposes as described in their privacy policy.
• Analytics Data (GA4): We collect aggregate usage information such as page views, engagement events, and device/browser context to improve site quality. We do not use this for ad targeting.

1.3 Community Platform Data

When you use optional interactive features, we may collect:

• Story Analyzer submissions: The story text you enter is sent to our analysis API so the site can generate a shortlist, follow-up questions, and clinician-facing summaries.
• Handout and access forms: If you ask us to send a handout or early-access link by email, that email address is sent to our mailing provider so the message can be delivered. We may also retain hashed metadata about the request source for abuse prevention and basic reporting.
• Accounts and syncing: If you opt into account features, the account service stores the minimum data needed to identify the account and sync saved items.
• Community submissions and moderation: If you submit a community story or report content, we store the submission text and the moderation metadata needed to review it responsibly.

1.4 Analyzer and Improvement Data

To operate the site and improve weak spots over time, we may collect:

• Analyzer outputs: the shortlist, follow-up flow, and feedback generated from a story submission.
• Search and navigation events: broad usage signals such as page views, search terms, and feature interactions.
• Reviewed examples and moderation data: when people opt into stories or feedback, that material may be used to improve prompts, triage copy, and quality review.
• Aggregate reporting: counts and summary patterns that help us see where the site is confusing, incomplete, or underused.

1.5 Information We Do NOT Collect

• Advertising or affiliate tracking: We do not run display ads, affiliate links, or third-party marketing pixels on the public site.
• Payment card information: The public site does not sell subscriptions or process card payments.
• A mandatory account: You can browse and use much of the site without signing in.

2. How We Use Information

We use the information we collect for:

2.1 Site Operations

• Responding to inquiries you send via email
• Maintaining site security and preventing spam/abuse
• Moderating community content
• Technical troubleshooting

2.2 Site Improvement and Aggregate Reporting

We may use aggregated or review-layer data for:

• Quality review: spotting confusing prompts, weak results, and pages that need better guidance.
• Editorial updates: improving cause pages, handouts, and comparisons based on recurring failure modes.
• Aggregate statistics: understanding which features are used, where people stop, and where trust or usability breaks down.
• Moderation and abuse prevention: keeping spam, scraping abuse, and unsafe submissions under control.

3. Cookies and Tracking

We use Google Analytics (GA4) to understand aggregate site usage (for example, page views and key feature interactions). We do not use advertising cookies, Facebook Pixel, or third-party marketing pixels.

Our hosting provider (Cloudflare) may set essential security cookies to protect against malicious traffic. These are strictly necessary for site operation and are not used for ad targeting.

For more information, see our Cookie Notice.

4. Data Sharing

We do not sell or rent personal information for advertising or marketing.

We may share information only in the following limited circumstances:

• Service Providers: Cloudflare helps host and secure the site, our mailing provider delivers access and handout emails, and our analysis stack processes analyzer submissions.
• Legal Requirements: If required by law, subpoena, or legal process.
• Safety: To protect the rights, safety, or property of our users or the public.

5. Data Retention

Server logs are retained by our hosting provider according to their data retention policies (typically 30-90 days). Email correspondence is retained as long as necessary to respond to your inquiry.

Email addresses submitted for access or handout delivery stay in the mailing system until you unsubscribe, ask us to delete them, or we remove them operationally. Saved account data and community submissions are retained for as long as the related feature remains active or until deletion is requested where that option exists.

6. Your Rights

Depending on your location, you may have the following rights:

For EU/UK Residents (GDPR/UK GDPR)

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object to processing

For California Residents (CCPA)

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your rights

To exercise any of these rights, contact us at [email protected].

We will respond to data subject access requests within 30 days of receipt, as required by GDPR Article 12.

7. Children's Privacy

This Site is not intended for children under 16. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us.

8. International Data Transfers

Our hosting infrastructure is distributed globally via Cloudflare. By using this Site, you acknowledge that your data may be processed in countries outside your residence.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Your continued use of the Site after changes constitutes acceptance.

10. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of New South Wales, Australia, without regard to conflict of law principles.

11. Contact Us

For privacy-related questions or to exercise your rights, contact us at:
[email protected]