Dosescope is a small independent website run by a private individual. This notice explains what personal data the site handles, why, and what you can ask us to do with it. It is written to meet the UK GDPR and the EU GDPR. If you are elsewhere, the same commitments apply to you.
The short version
- You can read everything on Dosescope without an account. We run no analytics, no advertising and no tracking cookies.
- The only personal data you give us is what you type into the contact form, and a photo of a label if you choose to send one.
- We keep contact messages for 24 months and then delete them.
- We do not sell personal data, and we do not share it for marketing.
What we collect and why
Contact form
When you send a message through the contact page we store: the kind of request (general, correction or rights request), your name if you give one, your email address, a subject, your message, and the address of the page you were on if you arrived from a “Report an error” link. We use this to reply to you and to act on corrections and rights requests.
Our legal basis is our legitimate interest in keeping the library accurate and answering the people who write to us. For rights requests it is also our legal obligation to handle them.
Messages are stored in our database, and a copy is emailed to us so that we see it promptly. That email carries your address as its reply-to address.
Spam protection
The contact page loads Cloudflare Turnstile, which checks that a submission comes from a person rather than a bot. To do this, Cloudflare receives technical information about your browser and connection, including your IP address, and may set a cookie for that check. Cloudflare’s privacy policy covers this processing. The form also contains a hidden field that only automated tools fill in; submissions that fill it are discarded.
Label photos
On the stack calculator you can send a photo of a Supplement Facts panel instead of typing it in. We use it for one thing: to read the nutrients and amounts printed on it and return the result to you pre-filled.
The photo is sent to Google (Gemini API, paid tier), which reads it and returns the text. It is held in memory for the length of that one request and then discarded. It is never written to disk, never stored in our database or image storage, and never appears in a log — neither the photo nor the text read from it. We keep no copy, so there is nothing to delete afterwards.
What comes back is a draft. Nothing is calculated from it until you have been through the lines yourself and confirmed them, and a line you do not confirm is left out rather than counted as nothing. What you confirm is saved in your browser, like anything else you add to the calculator, and is not sent to us. It does not go into the public label library, which is edited by hand from sources.
Our legal basis is your consent, which you give by choosing a photo and sending it. You do not have to: the same panel can be typed in by hand, and the result is identical. The upload is covered by the same Turnstile check described above.
Server logs
Our hosting provider, Vercel, keeps standard request logs (IP address, time, page requested, browser type) for a short period for security and reliability. We do not use them to identify visitors.
Storage in your browser
The stack calculator remembers the products you added, and the compare feature remembers the products you selected, in your browser’s local storage. Those lists stay on your device and are not sent to us. Clearing the site’s data in your browser removes them. If you copy a link to your stack, the products and servings are written into that link itself, so anyone you give it to can see them.
Staff sign-in
People who edit the library sign in at a private admin address. A session cookie is set only for them. Visitors get no cookies from Dosescope itself.
What we do not do
No accounts, no newsletters, no analytics or advertising scripts, no social media embeds, no fingerprinting, no sale of personal data, and no “sharing” of personal information in the sense of US state privacy laws.
Who processes data for us
| Provider | What for | Where |
|---|---|---|
| Vercel | Hosting the site and keeping request logs | United States |
| Neon | Database, including contact messages | Singapore |
| Resend | Emailing us a copy of each contact message | United States |
| Cloudflare | Domain name service, Turnstile spam check, image storage | Global network; Turnstile checks are processed by Cloudflare |
Each provider acts on our instructions under a data processing agreement. Where data leaves the United Kingdom or the European Economic Area, the transfer relies on the provider’s standard contractual clauses.
How long we keep data
- Contact messages: 24 months from the date received, then deleted.
- Correction and rights-request records: kept for as long as the affected entry exists, because they document why an entry was changed or withdrawn. Names and email addresses are removed from them after 24 months.
- Server logs: for the period set by Vercel, currently short-term.
- Email copies of messages: deleted from our mailbox on the same schedule as the messages.
Your rights
You can ask us to tell you what personal data we hold about you, to correct it, to delete it, to restrict how we use it, or to give it to you in a portable form. You can object to processing based on our legitimate interests. Write to caryliu8787@gmail.com or use the contact form. We will reply within one month. To protect your data we may confirm a request by replying to the email address we already hold.
If you are unhappy with how we handle your data you can complain to the Information Commissioner’s Office in the United Kingdom, or to the data protection authority in your EU country. We would appreciate the chance to resolve the issue first.
Children
Dosescope is not directed at children, and we do not knowingly collect personal data from anyone under 16.
Changes
We will post any changes to this notice on this page with a new date. Material changes are also recorded on the Changelog page.
Contact
Write to caryliu8787@gmail.com or use the contact form.