Privacy

• Your logs are yours. Nobody at Roshara reads them.
• We count visits, with no cookies and nothing that follows you to other sites. We do not sell your data or advertise against it.
• What you post in the community is public. Everything else is private to you.
• Delete your account and your health data is gone after 60 days.

Your account: an email address and a password. A display name, an age range and when your symptoms started, if you add them.

Your record: check-ins, treatments, side effects, test results, appointments, symptom scores, journal entries, saved articles and reminder settings. Whatever you type in, and nothing you do not.

Each sign-in notes the IP address and browser it came from, so signing out on one phone does not sign you out on another. Roshara's admin page shows a member's addresses and, beside each, how many other accounts signed in from it in the last 30 days: a number, never which accounts. That is how we spot one person running several accounts. The note is deleted 30 days after the session ends.

We note the date you last signed in, one date that is replaced each time, so we can count how many members visit each week. The count is a number; it never says who.

We keep neither the address nor a copy. We note only that a send happened and when, so the feature cannot be used to spam strangers from our address. That note is deleted after a day.

Your address, your language and which of our emails have gone to you. Nothing is sent until you click the link in the first email.

Every email has an unsubscribe link. An unsubscribed address stays marked as unsubscribed so a stray form cannot add you back. Deleting your account also takes you off the list.

We keep your answers so the result can be shown to you again. Taken signed out with no email, an assessment has no name on it. Leave an email and the answers are linked to that address. Signed in, or when you sign in or create an account straight from the result, they are linked to your account. Answers not linked to an account are deleted after 3 months.

It is orientation, not diagnosis.

Taken signed out, your symptom score never leaves your phone. It is added up on the page and gone when you close it. Save it while signed in and it becomes part of your record, with the day you took it and the language you took it in. Delete a saved score and it is gone at once.

We count visits so we can see which pages help and where readers find us, such as Instagram or a search. The count sees the page you opened, the site that sent you, your country, and your type of device and browser. It never sees what you type into the tracker, the assessment or a post.

It sets no cookie, keeps no ID on your phone and cannot follow you to other sites. Anyone else using your phone will find no trace of it.

No error tracker and no advertising pixel. Apart from the count, the one outside script is the bot check. It loads only on the form that emails you your result, and on sign-up when we turn it on there, and it is there to stop bots. Your browser stores three things: your colour theme, where you had scrolled to in this tab, and, while you are signed in, a sign-in cookie. The cookie keeps you signed in and does nothing else. It ends when you sign out or after 30 minutes without using the site.

In short: we set one cookie, the one that keeps you signed in. We have no advertising cookies, no advertising pixels and no tracking that follows you to other sites.

Sign-in cookie (essential). Set only while you are signed in. It keeps you signed in and does nothing else. It ends when you sign out, or after 30 minutes without using the site.

Colour theme. Your browser remembers whether you chose light or dark.

Scroll position. Your browser remembers where you had scrolled to in this tab, so a reload does not lose your place.

Visitor count (no cookie). We count visits using our host's analytics, which sets no cookie and keeps no ID on your device. It sees the page you opened, the site that sent you, your country, and your type of device and browser. It never sees what you type into the tracker, the assessment or a post.

Bot check. A bot check loads on the form that emails you your result, and on sign-up when we turn it on there. It checks a few signals from your browser (your IP address, the type of connection and browser, and our site's address) and nothing you typed. It sets no cookie.

Because the only cookie we set is essential to signing in, there is no cookie banner and no consent manager. If you block or delete the sign-in cookie in your browser, you can still read the site, but you cannot sign in.

We use no web beacons (tracking pixels) on the site. Our emails carry no tracking pixel, and opens and clicks on our emails are not tracked. We do not run advertising and we do not sell your data.

If we change what we store on your device, we will update this page and its date. We will not add an advertising or tracking cookie without telling you first and asking for your consent. Questions: hello@roshara.co.

A short list of providers, each seeing only what its job needs. One hosts the database. One serves the site and counts visits. One delivers our email. A bot check on the assessment form, and on sign-up when we turn it on there, sees your address and browser for that moment and nothing you typed. An AI translation service sees only the public post a member asks to translate.

Under their data processing terms, the providers that host the database, serve the site, deliver our email and run the bot check each handle your data only on our written instructions and for the service we asked for, keep it secure, tell us without undue delay if they have a breach, and delete or return it when our contract ends or we ask. Each may use sub-processors on a published list, bound by terms that protect your data at least as well. Where data moves out of the European Economic Area or the United Kingdom, standard contractual clauses (or, for one provider, the EU-US Data Privacy Framework) cover the transfer. We do not name the providers on this page.

Data is stored in Singapore.

Anyone can read it, signed in or not, including search engines. Posting anonymously hides who you are from every reader, and only you can see which anonymous posts are yours.

Anonymous is still public. Do not post what you would not want a stranger to read.

Roshara can remove a member's posts and replies, and can close the account of someone who is harming the community. A closed account keeps its email address on a block list, so it cannot be used to join again.

A member can ask for a post to be translated. The post goes to the AI translation service and the translation is kept next to it. So one account cannot run up the bill, we count your translation requests, and the records you send to a doctor, for 24 hours: which account and when, nothing else. Nothing private goes with a translation.

Deleting starts a 60-day grace period. Your account disappears at once. Sign in again within the 60 days and everything comes back as you left it. After 60 days your health data is deleted outright.

Your community posts and replies stay, made anonymous, so other women's conversations do not vanish with you. Want a post or a reply gone? Remove it from its own page first. Your words are wiped at once and the replies under them stay.

Your information belongs to you. You can take back your agreement or close your account at any time.

Withdraw consent. You may withdraw your consent for us to collect, use or disclose your personal data, including your health information. We will stop using and disclosing it for the purposes you withdrew from, except where the law requires us to keep it. Some features that depend on your record, such as the tracker and your care plan, will stop working, because they need it. Withdrawing from everything is the same as closing your account. We will tell you what withdrawing means for you before we act on it, so you can decide. To withdraw consent, email hello@roshara.co with the subject line "Withdraw Consent Request". We will confirm by reply.

Stop our emails only. Use the unsubscribe link in any email. You do not need to write to us.

Delete your account. Use "Delete your account" in Settings, or email hello@roshara.co with the subject line "Delete My Account" and we will start it for you. Your account disappears at once and you are signed out everywhere. A 60-day grace period starts: sign in again within the 60 days and everything comes back as you left it, except the email list, which you would need to join again. After 60 days your health data is deleted outright. Your community posts and replies stay, made anonymous. To have one gone, remove it from its own page first.

While your account is open, plus the 60 days. Self-assessment answers not linked to an account are deleted after 3 months. Backups may hold a copy for a short time after that.

If the EU or UK General Data Protection Regulation applies to your data, our lawful bases are consent for the account, the tracker and your health information (explicit consent, which you can withdraw at any time); contract where we need your data to provide the service you asked for; legal obligation where the law requires us to keep or give something; and legitimate interests in keeping the site secure, stopping bots and duplicate accounts, and counting visits without cookies, where these do not override your rights. You also have these rights, where the GDPR applies to us: access, correction, erasure, restriction of processing, objection to processing based on legitimate interests, portability of the data you gave us in a structured, commonly used form, and withdrawal of consent. Write to hello@roshara.co to use them. Access requests are free. We answer within one month, and if a request is complex we tell you within that month why we need up to two more. You can also complain to your local data protection authority.

Roshara is for women in midlife, not for anyone under 18. We do not knowingly hold data about children.