Privacy Policy

• You don't need an account, and we never ask for your name.
• Everything you enter in the Panic Reset and Panic Plan tools stays in your browser. It is never sent to us or to any analytics provider.
• We measure which steps people use, never what they chose or typed.
• Analytics cookies are only used if you click “Accept”.
• If you join the app waitlist, we keep your email to tell you when the app launches.

Your panic plan, warning signs, helpers, calming phrases (including ones you write yourself) and any reflection notes are processed in your browser only. Where the tool offers to keep them, they are saved in your browser's local storage on your device. Clearing your browser data removes them. We cannot see, recover or delete them for you.

To learn whether the tools help, we record anonymous events such as “reset started”, “step completed”, “plan completed” or “app button viewed/clicked”, together with the page you came from. These events never contain what you selected or typed, how intense an attack was, or your plan's contents.

Before you make a cookie choice, and if you reject cookies, this runs in cookieless mode using PostHog (EU cloud): nothing is stored on your device, and visits are grouped using a privacy-preserving hash calculated on PostHog's servers instead of a cookie.

If you click “Accept”, we additionally use:

• PostHog with browser storage, and session recordings in which all text and form inputs are masked.
• Google Analytics 4 (Google) for traffic sources, with IP anonymisation enabled.
• Microsoft Clarity for heatmaps and session recordings. The Panic Reset and Panic Plan tools are masked from recordings.
• Plerdy for click and scroll heatmaps.

These providers may process data such as your IP address, device and browser type outside the EU under their own safeguards. You can change or withdraw your choice at any time: Cookie settings.

If you leave your email to hear about the mobile app, we store:

• your email address and the date you signed up;
• which platform (iOS / Android) and which page you signed up from, plus campaign tags in the link (UTM), if any;
• if our network provider reports it, your country (never your precise location);
• whether you ticked “product updates”, and when.

We use it to email you when the app launches. We only send other product updates if you ticked that box. The legal basis is your consent, which you can withdraw at any time. We keep the email until you ask us to delete it or until the waitlist is closed. Our backend and database are hosted by Railway; the website is served by Cloudflare.

You can ask us for a copy of the data we hold about you, to correct it, or to delete it, and you can withdraw consent at any time. Email [privacy contact email not configured]. If you are in the EU/EEA or UK, you can also complain to your local data protection authority.

This website offers self-help exercises. It is not a medical device and does not diagnose or treat any condition. If you have chest pain, pain spreading to your arm or jaw, are fainting, or this is your first episode, call your local emergency number.

If what we collect changes, we will update this page and its version number, and ask for your cookie choice again where needed.