DLS DoctorFree public beta

Privacy policy

Last updated 16 October 2026

In short: your DLS and TEM files are analysed in your own browser and are never uploaded to us. We store only your email address if you sign up, and simple anonymous counts of how the tool is used.

1. Who is responsible

The controller of personal data on is , trading as (business ID ), . Contact: .

2. What we do not collect

The files you load (DLS measurements, TEM images) and the results are processed only on your computer, inside your browser. They are not sent to our servers or to anyone else.

3. What we collect and why

Data	Purpose	Legal basis (GDPR)
Email address, sign-up date, plan	Your account and sign-in links	Contract, Art. 6(1)(b)
Usage events: type (analysis, PDF download, TEM sizing, contact-button click) and time; for signed-in users, linked to the account	Running the account, counting free checks, improving the tool	Contract and legitimate interest, Art. 6(1)(b) and (f)
For visitors without an account: a random ID stored in your browser and a one-way hash of your network address	Enforcing the free daily limit and preventing abuse	Legitimate interest, Art. 6(1)(f)
Website statistics (page views, country, browser), without cookies	Understanding visits	Legitimate interest, Art. 6(1)(f)
Emails you send us	Answering you	Legitimate interest, Art. 6(1)(f)

We do not sell data, show ads, or use tracking cookies.

4. Browser storage

The site stores a few items in your browser: the sign-in session, the random guest ID, and whether you have seen the disclaimer. These are needed for the service to work and are not used for tracking across websites. You can clear them at any time in your browser settings.

5. Service providers

Supabase (database and sign-in), servers in the EU (Frankfurt).
Cloudflare (website hosting and cookieless statistics). Cloudflare may process technical data outside the EU under the EU Standard Contractual Clauses and the EU–US Data Privacy Framework.
Email delivery provider for sign-in emails (named here once chosen; EU-based where possible).

Each provider processes data only on our instructions under a data processing agreement. If paid plans are introduced, payments will be handled by a payment provider acting as merchant of record; this policy will be updated first.

6. How long we keep data

Account data: until you delete your account. Free accounts unused for 24 months are deleted.
Guest IDs and network hashes: removed after 13 months, leaving only anonymous counts.
Emails: as long as needed to handle your request.

7. Your rights

You can ask for access to your data, correction, deletion, restriction, portability, or object to processing based on legitimate interest. You can delete your account yourself from the account menu (“Delete my account”). For anything else, email . You also have the right to complain to the Finnish Data Protection Ombudsman (tietosuoja.fi).

8. Security

Connections are encrypted (HTTPS). Sign-in uses one-time email links, so there are no passwords to leak. Database rules allow each user to see only their own account.

9. Changes

We will update this page when things change and tell registered users by email about important changes.