The short version: this website stores nothing about you. There is no database, no account, no tracking cookie. The longer version is below, in plain language. If anything here is unclear, ask me.
The website itself
It's a set of static pages. The tools and questionnaires run entirely in your browser. Anything you type into a tool (answers, a safety plan, a thought record) stays on your device. It is never sent anywhere unless you choose to download it or press "send", which opens your own email app. A few tools remember your entries between visits using your browser's local storage; that data lives on your computer and I never see it. Clearing your browser data clears it.
Measuring visits
If analytics are switched on, I use Cloudflare Web Analytics, which is cookieless and counts page visits in aggregate. It does not follow you around the web or build a profile of you. There is no consent banner because there is nothing to consent to.
When you write to me
Plain email, plus the contact form when it is switched on, are the only places data actually reaches me. There I receive what you send: your name, your email address, your message. I use it to reply and, if we decide to work together, to arrange that. When the form is on, it uses Cloudflare Turnstile to keep out spam; it checks that you're human, not who you are.
Intake form and tool exports: health information
The intake form and some tool exports contain sensitive information about your health. Please read this carefully: you fill these in in your browser, and the site stores none of it. You decide whether to send it to me by email or to print it and bring it in person. Once you email it, it sits in my inbox, where I treat it as confidential clinical material, protected by professional secrecy and handled under the part of data-protection law that covers health data (GDPR Article 9), on the basis of your explicit consent and our work together.
Who helps run this
The site is hosted by Cloudflare, which also provides the spam check and optional analytics; it acts as my processor. Email you send me is handled by my email provider. I don't sell or share your information with anyone, and there is no advertising here.
How long I keep things
Correspondence and clinical records are kept for as long as our work and the law require, and no longer. You can ask me what I hold, ask me to correct it, or ask me to delete anything that isn't something I'm legally required to keep.
Your rights
Under the GDPR you can ask for access to your data, correction, deletion, restriction, or a copy to take elsewhere. If you think I've handled your data badly, you can complain to the Romanian supervisory authority (ANSPDCP, Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal), though I'd rather you told me first, so I can put it right.
Who's responsible
Vlad Munteanu is the data controller for this site and practice. For anything about your data, write to vladmunteanupsiholog@gmail.com.
This is a plain-language summary, not legal boilerplate. It will be updated if the practice details change.