Privacy policy

In short

• The calculators run entirely in your browser. What you type is never sent to us or stored.
• There are no accounts, no analytics, no advertising and no cookies.
• Cloudflare, which delivers the site, and our hosting provider process basic technical data, such as your IP address, to deliver the site and keep it secure.
• If you email us, we use your message only to reply.

Who is responsible for your data

The data controller is Ivan, the founder of DoseStep, an independent, non-commercial educational website. For any question about this policy or your data, write to [email protected].

What you type into the calculators

Every calculation happens in your own browser, using JavaScript. The values you enter (doses, weights, lab results and so on) are not sent to any server, are not saved by DoseStep and disappear when you close or reload the page.

There is one exception, and you control it. The “Copy link with these values” button adds your values to the page address and copies that link. This happens only when you click it. Anyone you share the link with will see those values, and the link may also stay in your browser history. We recommend not entering information that could identify a patient into a calculator, and above all not into a link you share.

Data processed by Cloudflare and our hosting provider

DoseStep runs on a web server rented from a hosting provider, and every page reaches you through Cloudflare’s network. When your browser requests a page, Cloudflare receives technical information: your IP address, the page requested, the date and time, and your browser’s user agent. Cloudflare processes this data to deliver the site, protect it against abuse and attacks, and keep it working reliably. Our own server receives requests through Cloudflare and keeps no log of visits; its error log is used only to fix technical problems.

• Legal basis: our legitimate interest in running a secure, working website (Article 6(1)(f) GDPR).
• Who processes it: Cloudflare, Inc. and the company that hosts our server, both acting as our service providers. Cloudflare may process data outside the European Economic Area under the safeguards described in its own policy.
• More information: Cloudflare privacy policy.

DoseStep does not use this data to identify visitors, build profiles or track you across sites.

The fonts are served by DoseStep itself. Your browser sends no request to Google Fonts or any other third-party font service.

Emails you send us

If you write to [email protected], we receive your email address, your name if you include it, and the content of your message.

• Purpose: to read and reply to your message, and to act on any correction or suggestion.
• Legal basis: our legitimate interest in answering the people who contact us (Article 6(1)(f) GDPR) or, if you propose a collaboration, steps taken at your request (Article 6(1)(b) GDPR).
• Retention: messages are kept only as long as needed to deal with them and are then deleted.

It is best to avoid including patient-identifiable information in an email. See the contact page.

What we do not do

• No user accounts or sign-ups.
• No analytics or statistics tools.
• No advertising, and no sale or sharing of data with advertisers.
• No cookies of any kind, so no tracking, profiling or marketing cookies: see the cookie policy.
• No automated decision-making about you.

Your rights

Under the General Data Protection Regulation (GDPR) you have the right to:

• access the personal data we hold about you and receive a copy;
• rectify data that is inaccurate;
• erase your data;
• restrict or object to processing based on legitimate interest;
• data portability, where it applies.

To exercise any of these rights, email [email protected]. We may ask for information to confirm your identity, and we will reply within one month. In practice, the only personal data DoseStep itself holds is the email you have sent us. Requests about server logs may need to be passed on to the hosting provider.

You also have the right to lodge a complaint with a data protection supervisory authority. In Italy this is the Garante per la protezione dei dati personali; if you live or work in another EU country, you can contact the authority there.

Children

DoseStep is meant for nurses, nursing students and educators. It is not aimed at children, and we do not knowingly collect data from them.

Changes to this policy

If the way DoseStep handles data changes, for example if analytics are added in the future, this page will be updated before the change takes effect, and you will be asked for consent where the law requires it. The date of the last update is shown at the top of this page.