1.1. Overview: The Clinic collects information through various vectors to operate and improve our diagnostic services. We believe in transparency regarding data collection—a trait notably absent in most of our diagnostic subjects.

1.2. Categories of Information: We collect the following types of information:

1.2.1 Account Data

• Email address (required for account creation)
• Password (hashed and salted—we're not animals)
• Member ID (automatically generated)
• Account creation date and timezone
• Subscription status and payment history

1.2.2 Diagnostic Intake Data

• Subject names submitted for analysis
• Social media handles and URLs provided
• Additional context or notes submitted
• Submission timestamps and IP addresses
• Key events and biographical information provided

1.2.3 Usage & Analytics Data

• Pages viewed and time spent on each page
• Reports accessed and interaction patterns
• Browser type, version, and operating system
• Device type and screen resolution
• Referring URLs and exit pages
• Click patterns and scroll depth
• Session duration and frequency

1.2.4 Community Contribution Data

• Evidence submissions (links, quotes, sources)
• Voting activity on queue items and evidence
• Comments and community interactions
• Report feedback and corrections

1.2.5 Payment Data

• Transaction records and subscription dates
• Payment method type (we do NOT store full card numbers)
• Billing country and postal code
• Stripe customer identifiers

2.1. Direct Collection: Information you voluntarily provide when:

• Creating an account
• Submitting intake requests
• Contributing evidence or context
• Contacting support
• Subscribing to premium services
• Participating in surveys or promotions

2.2. Automated Collection: Information collected automatically through:

• Server logs and access records
• Cookies and similar tracking technologies
• Analytics scripts embedded in platform pages
• Cloudflare edge network telemetry

2.3. Third-Party Sources: We may receive information from:

• Payment processors (Stripe) regarding transaction status
• Authentication providers if third-party login is used
• Public databases during diagnostic research

3.1. Primary Purposes: We use collected information to:

• Operate and maintain the platform
• Process diagnostic intake requests
• Manage user accounts and subscriptions
• Process payments and prevent fraud
• Provide customer support
• Send transactional communications

3.2. Platform Improvement: We analyze usage patterns to:

• Enhance platform features and functionality
• Improve the Clinical Engine algorithms
• Optimize user experience and interface design
• Identify and fix technical issues
• Develop new diagnostic methodologies

3.3. Communications: We may use your email to:

• Confirm account actions and transactions
• Notify you of diagnostic completions
• Send important platform announcements
• Provide subscription renewal reminders
• Respond to support inquiries

3.4. Legal & Security: We use information to:

• Comply with legal obligations
• Enforce our Terms of Service
• Protect against abuse and fraud
• Maintain platform security
• Investigate potential violations

4.1. What Are Cookies: Cookies are small data files stored on your device when you visit our platform. They enable functionality and help us understand usage patterns. Unlike the subjects of our diagnoses, cookies serve a useful purpose.

4.2. Types of Cookies We Use:

4.2.1 Essential Cookies

Required for platform functionality. These cookies:

• Maintain your session state
• Remember your login status
• Enable security features
• Process payment sessions

4.2.2 Analytics Cookies

Help us understand platform usage. These cookies:

• Track page views and navigation paths
• Measure feature engagement
• Identify popular content
• Record session duration and frequency

4.2.3 Functionality Cookies

Enable enhanced features. These cookies:

• Remember your preferences
• Maintain display settings
• Enable personalization features

4.3. Cookie Management: Most browsers allow you to control cookies through settings. However, disabling essential cookies may impair platform functionality. Disabling analytics cookies will not affect your ability to use the platform.

4.4. Do Not Track: We currently do not respond to "Do Not Track" browser signals, as there is no industry-standard implementation. We may honor such signals in the future if standards emerge.

5.1. General Policy: We do not sell, trade, or rent personal information to third parties. We share information only as described in this policy.

5.2. Service Providers: We share information with trusted service providers who assist in operations:

• Cloudflare, Inc.: Content delivery, DDoS protection, and edge computing
• Stripe, Inc.: Payment processing and subscription management
• Email Service Providers: Transactional email delivery

These providers are bound by contractual obligations to protect information and use it only for specified purposes.

5.3. Legal Requirements: We may disclose information when required by law, including:

• Compliance with valid legal process (subpoenas, court orders)
• Protection of our legal rights
• Investigation of potential violations
• Prevention of fraud or security threats
• Protection of user safety

5.4. Business Transfers: In the event of a merger, acquisition, or sale of assets, user information may be transferred to the acquiring entity. We will provide notice before information becomes subject to a different privacy policy.

5.5. Aggregated Data: We may share aggregated, anonymized data that cannot identify individual users. This data may be used for research, analysis, or marketing purposes.

5.6. Public Information: Certain platform activities are publicly visible:

• Diagnostic reports (subject information only—not submitter data)
• Evidence submissions (if approved for display)
• Queue voting activity (aggregate only)

6.1. Security Measures: We implement comprehensive security measures including:

• TLS/SSL encryption for all data transmission
• Password hashing using industry-standard algorithms
• Regular security audits and vulnerability assessments
• Access controls and authentication requirements
• Database encryption at rest
• Cloudflare security features (WAF, bot protection)
• Rate limiting to prevent abuse

6.2. Incident Response: In the event of a data breach, we will:

• Promptly investigate and contain the incident
• Notify affected users within 72 hours when required by law
• Report to relevant authorities as required
• Take remedial measures to prevent recurrence

6.3. User Responsibilities: Security is a shared responsibility. You can protect your account by:

• Using a strong, unique password
• Never sharing your login credentials
• Logging out of shared devices
• Reporting suspicious activity promptly

6.4. Limitations: No system is completely secure. While we employ reasonable measures, we cannot guarantee absolute security. Use of the platform is at your own risk.

7.1. Account Data: We retain account information for as long as your account remains active, plus a reasonable period thereafter for legal and operational purposes.

7.2. Diagnostic Data: Published diagnostic reports are retained permanently as part of our clinical archive. Intake submissions are retained for queue management and historical record.

7.3. Analytics Data: Usage data is typically retained for 24 months, after which it may be aggregated and anonymized.

7.4. Payment Records: Transaction records are retained as required by tax and financial regulations (typically 7 years).

7.5. Legal Holds: We may retain data beyond standard periods when required for legal proceedings or regulatory compliance.

7.6. Deletion Requests: Upon account deletion request, we will:

• Remove or anonymize personal account data within 30 days
• Retain records required for legal compliance
• Remove non-essential backups within 90 days

8.1. Access Rights: You have the right to request access to personal information we hold about you. We will provide this information in a commonly used electronic format.

8.2. Correction Rights: You may request correction of inaccurate personal information. Account settings allow you to update certain information directly.

8.3. Deletion Rights: You may request deletion of your personal information, subject to legal retention requirements. Account deletion can be initiated through your account settings or by contacting support.

8.4. Portability Rights: Where technically feasible, you may request a copy of your data in a portable format.

8.5. Opt-Out Rights: You may opt out of:

• Non-essential email communications
• Analytics tracking (via browser settings)
• Personalized features

8.6. GDPR Rights (EU Users): If you are located in the European Economic Area, you have additional rights under GDPR, including:

• Right to object to processing
• Right to restrict processing
• Right to withdraw consent
• Right to lodge complaints with supervisory authorities

8.7. CCPA Rights (California Users): California residents have specific rights under CCPA, including:

• Right to know what information is collected
• Right to know if information is sold or disclosed
• Right to opt out of sale (we do not sell personal information)
• Right to non-discrimination for exercising rights

8.8. Exercising Rights: To exercise any of these rights, contact us at privacy@retardchecker.com. We will respond within the timeframes required by applicable law.

9.1. Age Restriction: The Retard Checker platform is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children.

9.2. Parental Notice: If you are a parent or guardian and believe your child has provided personal information to us, please contact us immediately at privacy@retardchecker.com.

9.3. Removal: Upon verification, we will promptly delete any personal information collected from children under the applicable age threshold.

10.1. Global Operations: The Clinic operates globally through Cloudflare's edge network. Your data may be processed in various jurisdictions depending on network routing and service provider locations.

10.2. Transfer Safeguards: When transferring data internationally, we employ appropriate safeguards including:

• Standard contractual clauses approved by regulatory authorities
• Data processing agreements with service providers
• Encryption during transit and at rest

10.3. EU-US Transfers: For transfers from the European Economic Area, we rely on appropriate legal mechanisms as required by GDPR.

11.1. External Links: The platform may contain links to third-party websites and services. These links are provided for convenience and reference only.

11.2. No Responsibility: We are not responsible for the privacy practices, content, or security of third-party sites. We encourage you to review the privacy policies of any external sites you visit.

11.3. Social Media: When viewing diagnostic reports, links to subjects' social media profiles are provided. Interaction with these platforms is governed by their respective privacy policies, not ours.

12.1. Modifications: We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors.

12.2. Notification: Material changes will be communicated through:

• Platform announcements
• Email notification to registered users
• Updated "Last Modified" date on this page

12.3. Continued Use: Your continued use of the platform after changes take effect constitutes acceptance of the revised policy. If you disagree with changes, discontinue platform use.

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

We endeavor to respond to all privacy-related inquiries within 30 days. For time-sensitive matters, please indicate urgency in your subject line.