Privacy

Who this is

Doomscrollers is Tilly Whitfeld's business, ABN 72 816 060 202, based in Australia. Two of us run it, Tilly Whitfeld and Giovanni Vons, and "we" on this page means the two of us. Both of us can see what you send in, because that is how the work gets done. Nobody else can read it, apart from the companies that hold it for us or that we work with, and every one of them is named on this page.

What we collect, and when

Buying something: the Club membership, the audit and the Handbook all ask for your email on the order page before you go to Stripe, and for your first name, which is optional. Beside them sits one tick box, for an email when there's something new. It starts unticked, and unticked keeps your address to your order and the one reminder below. The free guide comes with every order.

After an audit: the intake form asks about your business, your goals and how you work, and you send us screenshots of your Instagram Insights along with your handle. That is the whole basis of your audit and it is used for nothing else.

After joining the Club: the setup form asks about your business and your account, and for the best mobile number to reach you on, so we can ring you quickly if something needs a call. No marketing, ever. Every fortnight after that you send us a short check-in: your latest numbers, what worked and what didn't in your own words, and the Insights screenshots if you want to attach them. That is what your next plan is written from.

Club Plus calls: when you book a call you give us the WhatsApp number to ring, and it is kept on that booking so we can reach you at the time.

The free guide and the checklist: your email, and on the full signup page your first name and, if you like, your Instagram handle, which only makes what we send sharper. With the signup we keep a note of how you found us: the campaign details on the link that brought you (which ad, email or post, and the click reference Meta, Google or TikTok add to their own links), the site you came from and the page you signed up on.

Joining the Club Plus waitlist: your email, what kind of business you run, roughly how many followers you have and the one thing you most want sharper, plus a tick box for whether you want the occasional Doomscrollers email. It starts unticked, and leaving it unticked has no bearing on whether you are picked. The same note of how you found us is kept with it.

Starting a checkout without finishing it: the name and email you typed on the order page are kept with that checkout at Stripe so we can send you one reminder with your link. The order page says so right under the button.

The member feedback form: if you are a member and we send you the link, your answers come to our inbox as one email and are kept in the site's email log. Your name is optional there and nothing else on the form identifies you, so answering anonymously is a real option: no account or record of yours is touched by it, and none of the measuring tools further down runs on that page.

AI that helps us work

Your audit and your plans are drafted with help from an AI model run by Anthropic, which this site sends the work to. We then go through that draft against your account, correct it and sign it before it reaches you, and nothing goes out unread.

What the site sends that model is not the same for the two of them. For an audit it gets your name and handles, your intake answers and our own written notes from reading your account; the site does not send it your screenshots.

For a plan it gets more, because a plan is written on top of everything that came before it: what you told us when you joined, your recent check-ins and any Insights screenshots you attached to them, the plans we have already written for you, our own notes between rounds, what we can see on your public account, and, if you bought an audit before you joined, that report with the answers and the notes behind it.

Anthropic's terms with us do not let it train its models on what this site sends it.

We also use AI assistants by hand, outside the site: Anthropic's Claude and OpenAI's ChatGPT. At our desk Claude reads the Insights screenshots you send for an audit and types the figures out for us, reads your public Instagram profile, and reads the email that comes to our inbox. Some of what members have sent us, such as names, answers, screenshots and plans, has also gone into ChatGPT while we worked on it. We use both only to do the work you asked us for.

Payments

Stripe takes the payment and holds the card details. They never touch this site and we never see them. On Stripe's own page you fill in your card and, if the payment method you pick needs one, a billing address; that part happens on their page under their privacy policy, not on ours. Stripe tells us that a payment succeeded, what was bought and the email it was bought with. If a membership payment fails, Stripe tries the card again over the following days and we send you one email with a link to pay the invoice; your plans keep coming while that is sorted out.

When you press the button that opens Stripe's page, we attach some details to that checkout at Stripe as well: what our ds_attr cookie noted about how you found us (see Cookies), the references Google Analytics' and Meta's tags left on your browser, and the IP address and browser your visit came from. They are attached whether or not you finish paying, they are used only to credit a sale to what brought it (see Forms and analytics), and they stay with that checkout at Stripe; we do not delete them. If you pay, the note of how you found us and the Google Analytics reference are also copied into our own record of the sale.

Email from us

There are two kinds. Emails about a thing you bought (your welcome, your plan, your report link, a receipt, a call reminder, the one checkout reminder) go out because you bought it or were buying it. Marketing emails are the short series that follows the free guide, the one that follows the checklist, and the one that follows joining the Club Plus waitlist where you ticked the box; they go out because you asked for that thing, and every one of them carries a one-click unsubscribe. One tap stops all of them, not just the one you were reading.

We do not sell, rent or hand your details to anyone for their own marketing.

Forms and analytics

Every public form on the site runs Cloudflare Turnstile, which checks the submission is a person rather than a bot; to do that it sees your IP address and your browser. The forms you reach from a private link of your own, your onboarding, your check-in, your audit intake and your call booking, rely on that link instead, so there is nothing extra for you to click.

We use Google Analytics on the public pages to see how people find and use the site: which pages get read, roughly where visitors are, what device they are on. It is switched off on the private pages you open with your own link, so your plan, your check-in, your welcome page, your booking page, a Handbook you bought, your audit report and an unsubscribe link are not measured at all, and neither are the member feedback form and our own desk; on your audit intake and on the pages you land on straight after paying it still counts the visit, with your private key taken out of what it records. It is not used to identify you, and a browser-level tracker blocker stops it with no effect on the site.

We advertise on Instagram and Facebook, so the public pages also carry Meta's measurement tag. It tells Meta which of our pages you looked at, including which of the audit, Handbook, Club and Club Plus pages you opened, and it records when you sign up for the free guide, the checklist or the Club Plus waitlist and when you start a checkout, so we can see which ads bring people who actually want the thing and stop paying for the ones that do not. Those pages and steps are all it records: the part of it that would otherwise read what you type into forms by itself is switched off. It sends nothing from any page you open with your own private link, your audit intake included, or from the pages you land on straight after paying, because the address of those pages is your own key to your order, and nothing from the member feedback form. A browser-level tracker blocker stops it, again with no effect on the site.

When you sign up for the free guide, the checklist or the Club Plus waitlist (again if you sign up a second time), start a checkout or buy something, our own server tells Meta that it happened as well, and for a sale what it was worth, so the step is counted once even if your browser blocks the tag. With it goes your email address, where we have it, turned into an unreadable string of characters that cannot be turned back into your address, and, as they are, the IP address and browser your visit came from and the references Meta's own tag left on your browser. Meta compares those against its own records, which is how an ad gets credited without Meta being given your email address itself. For a signup we pass the IP address and browser straight on and keep neither; for a checkout they are kept with it at Stripe, as Payments says, and nowhere else by us. If you would rather none of this happened at all, Instagram and Facebook both have an off switch for it in your own account settings, under how your activity from other websites is used.

When you buy something, our server also tells Google Analytics that the sale happened and what it was worth, matched to your visit by the reference Google Analytics' own cookie left on your browser when we have it. Each time a membership renews it tells Google Analytics that a renewal happened and what it was worth, without tying it to any visit. Neither carries a name or an email address.

We also use PostHog on the public pages, to see how the pages themselves work: where people click, how far down they scroll, and, for some visits, a replay of how the visit moved through the page. In a replay the text on the page and everything you type are blanked out, so it shows the layout, the pictures and where the pointer went, never what you typed, and a click records where on the page it landed, not the words on what was clicked. It records nothing on any page you open with your own private link, your audit intake included, on the pages you land on straight after paying, on our own desk or on the member feedback form, and it keeps nothing that ties a visit to your name or your email address. We keep a replay of every visit that came from one of our ads and of a share of the others. PostHog holds what it records in the European Union. It is sent through this site's own address rather than PostHog's, so a tracker blocker may not stop it.

Like every website, the server that serves the pages keeps short-lived technical logs (your IP address, the page asked for, the time). They are used to keep the site running and for nothing else.

Cookies, and what sits on your device

There is no pop-up to click through, and that is on purpose: what we owe you here is a plain account of what is collected and what it is for, which is what this page is, rather than a box in your way before you can read a word.

Google Analytics sets its own cookies on the public pages so it can tell a returning visit from a new one, and Meta's tag sets its own for the same reason. We set one of our own, called ds_attr, the first time you land on one of our public pages. It notes how that first visit came about and, each time you come back through a link that says where it came from, how the latest one did: the campaign details on the link (which ad, email or post) and the click reference Meta, Google or TikTok add to their own links, the site you came from, the page you landed on and when. It lasts 90 days, so a signup or a sale can be credited to what actually brought it. It holds no name, no email address and nothing you typed, and it is not set on the private pages you open with your own link, on the pages you land on straight after paying, or on the member feedback form. Those are the measuring cookies a visitor gets. Our own browsers carry one more, which tells Google Analytics not to count our visits; it is set only by an internal page of ours that nothing on the site links to.

PostHog keeps a random visitor number and the current visit's details in your browser's own storage rather than in a cookie, so it can tell a returning visit from a new one. Nothing in it names you.

Cloudflare Turnstile keeps a little of its own storage on the pages that carry a form, for as long as it takes to work out you are a person.

Stripe sets its own cookies when you are on their payment page. That page is theirs, not ours.

Some forms, and the workbook bits inside the guides and the Handbook, keep what you have typed in your own browser so a refresh or a closed tab does not lose it. A form draft sits there for a week and is cleared the moment you send it; what you write into a guide stays for a year, because coming back to it is the whole point. Your plan and audit pages also remember, in your browser, which parts you have already seen and which fixes you have ticked off. None of it is sent anywhere on its own: it is there so the page can put your own words back in front of you.

If your audit report comes with a walkthrough video, the player is loaded from Loom or from YouTube's privacy-enhanced player, under that company's own rules.

That is the lot. The only measuring one that reaches beyond this site is Meta's, and only as far as the ads you are shown on Instagram and Facebook, which is what it is there for and which you can switch off in your own account settings there.

Where it lives, and who touches it

Form answers, orders, plans, the notes of how you found us and the screenshots you upload sit in a private database and file store held by our database provider (Supabase) and are never publicly readable. Emails go out through our email provider (Resend), and email you send us, the feedback form included, arrives in our inbox, which Google holds for us (Google Workspace). The site is hosted by Netlify, and Cloudflare runs the bot check on the public forms. Payments run through Stripe. Drafting help comes from Anthropic, and at our desk we also use Anthropic's Claude and OpenAI's ChatGPT, as the section on AI says. Google Analytics, Meta and PostHog measure the public pages, as Forms and analytics says. Our alerts reach us through Telegram. Each of them handles your data under their own terms and privacy policy.

Some of those providers hold data on servers outside Australia, including in the United States, and PostHog holds what it records in the European Union. By using the site you agree to that.

When something happens we need to know about (a sale, a signup, a form you have sent in, a payment that failed), an alert goes to our inbox and to a private channel on Telegram, so it is seen the same day rather than whenever the desk is next opened; the member feedback form comes to the inbox only. A sale alert names what was bought and the buyer's name and email address, and for an audit or a Handbook it carries the private links to that order so we can open it. A signup alert names the email address and which door you came in by. A form alert carries what you wrote, because that is the thing we have to read. Your screenshots and your plans are never sent that way: the audit alert says how many screenshots landed and leaves them where they are, and all of it is read properly on the private desk.

How long we keep it

Your audit, your plans and the answers they were written from stay while the page they belong to is yours to open, because that page is the product. Order and payment records are kept for as long as Australian tax and consumer law asks us to. A free-guide signup stays on the list until you unsubscribe, and an unsubscribe is recorded so nothing marketing reaches you again.

The note of how you found us stays with the signup or the sale it belongs to, and the details attached to a checkout at Stripe stay with that checkout; neither is deleted on a timer. Google Analytics keeps what it records about visits for 14 months.

Asking us for a copy, a correction, or a deletion

Email contact@doomscrollersocials.com and tell us what you want: a copy of what we hold, a correction, or the lot deleted. We read it ourselves, so say it however you like. Anything we have to keep for tax or legal reasons we will tell you about rather than quietly hold.

If something is wrong

If you think we have handled your information badly, tell us at the same address and we will answer within a couple of weeks and fix what needs fixing. If you are not happy with our answer you can take it to the Office of the Australian Information Commissioner at oaic.gov.au.

When this page changes, the date at the top changes with it.