Privacy

Last updated 8 September 2026

The short version: I only hold what you hand me, I use it to do the thing you paid for or asked for, and you can have it back or have it deleted whenever you want.

Who this is

Doomscrollers is Tilly Whitfeld's business, ABN 72 816 060 202, based in Australia. When this page says "I", that is Tilly. A small team of three runs the site with me (Tilly, and the two people who build and run it), and each of us can see what you send in so the work gets done. Nobody outside that team can.

What I collect, and when

Buying something: the Club membership, the audit or the Handbook all ask for your name and your email at the checkout, and nothing else.

After an audit: the intake form asks about your business, your goals and how you work, and you send me screenshots of your Instagram Insights along with your handle. That is the whole basis of your audit and it is read for nothing else.

After joining the Club: the setup form asks about your business and your account, and for the best mobile number to reach you on, so I can ring you quickly if something needs a call. No marketing, ever. Every fortnight after that you send me a short check-in with your latest numbers, and that is what your next plan is written from.

Club Plus calls: when you book a call you give me the WhatsApp number to ring, and it is kept on that booking so I can reach you at the time.

The free guide and the checklist: your email, and two optional lines about your business so what I send is sharper.

Applying for Club Plus: your answers on the form, including the best mobile number to reach you on if something needs a call (no marketing, ever), plus a tick box for whether you want the occasional Doomscrollers email. It starts unticked and leaving it unticked has no bearing on whether you are picked.

Starting a checkout without finishing it: the name and email you typed on the order page are kept so I can send you one reminder with your link. The order page says so right under the button.

The member feedback form: if you are a member and I send you the link, your answers come to me as one email and are kept in the site's email log. Your name is optional there and nothing else on the form identifies you, so answering anonymously is a real option; no account or record of yours is touched by it.

Software that helps me write

Your audit and your plans are drafted with help from an AI model, run by Anthropic, which reads what you sent in (your intake answers, your screenshots, your check-ins) and prepares a first draft for me. I then go through that draft against your account myself, correct it and sign it before it reaches you; nothing goes out unread. Anthropic processes what it is sent to produce the draft and does not use it to train its models. Nothing you send me is used to train anything.

Payments

Stripe takes the payment and holds the card details. They never touch this site and I never see them. On Stripe's own page you fill in your card and, if the payment method you pick needs one, a billing address; that part happens on their page under their privacy policy, not on mine. Stripe tells me that a payment succeeded, what was bought and the email it was bought with. If a membership payment fails, Stripe tries the card again over the following days and I send you one email with a link to pay the invoice; your plans keep coming while that is sorted out.

Email from me

There are two kinds. Emails about a thing you bought (your welcome, your plan, your report link, a receipt, a call reminder, the one checkout reminder) go out because you bought it or were buying it. Marketing emails, which is the short series after the free guide or the checklist, go out because you asked for the guide, and every one of them carries a one-click unsubscribe. One tap stops all of them, not just the one you were reading.

I do not sell, rent or hand your details to anyone for their marketing.

Forms and analytics

Every public form on the site runs Cloudflare Turnstile, which checks the submission is a person rather than a bot. The forms you reach from a private link of your own, your onboarding, your check-in, your audit intake and your call booking, rely on that link instead, so there is nothing extra for you to click.

I use Google Analytics on the public pages to see how people find and use the site: which pages get read, roughly where visitors are, what device they are on. It is switched off on the private pages you open with your own link, so your plan, your check-in, your welcome and your booking page are not measured at all. It is not used to identify you, and a browser-level tracker blocker stops it with no effect on the site.

Like every website, the server that serves the pages keeps short-lived technical logs (your IP address, the page asked for, the time). They are used to keep the site running and for nothing else.

Cookies, and what sits on your device

There is no pop-up to click through, and that is on purpose: what I owe you here is a plain account of what is collected and what it is for, which is what this page is, rather than a box in your way before you can read a word.

Google Analytics sets its own cookies on the public pages so it can tell a returning visit from a new one. That is the only measuring cookie on the site.

Cloudflare Turnstile keeps a little of its own storage on the pages that carry a form, for as long as it takes to work out you are a person.

Stripe sets its own cookies when you are on their payment page. That page is theirs, not mine.

Some forms, and the workbook bits inside the guides, keep what you have typed in your own browser so a refresh or a closed tab does not lose it. A form draft sits there for a week and is cleared the moment you send it; what you write into a guide stays for a year, because coming back to it is the whole point. None of it is sent anywhere on its own: it is there so the page can put your own words back in front of you.

That is the lot, and none of it follows you around other websites.

Where it lives, and who touches it

Form answers, orders, plans and the screenshots you upload sit in a private database and file store held by our database provider (Supabase) and are never publicly readable. Emails go out through our email provider (Resend). The site is hosted by Netlify. Payments run through Stripe. Drafting help comes from Anthropic. Each of them handles your data under their own privacy policy, on my instructions, to deliver the thing you asked for.

Some of those providers hold data on servers outside Australia, including in the United States. By using the site you agree to that, and every one of them is bound by their own contract with me to handle it only for the purpose I sent it for.

When something happens that the team needs to know about (a sale, a signup, a form you have sent in, a payment that failed), an alert goes to my inbox and to a private team channel on Telegram, so it is seen the same day rather than whenever someone next opens the desk. A sale or a signup alert names the order or the email address and which door you came in by. A form alert carries what you wrote, because that is the thing I have to read. Your screenshots and your plans are never sent that way: the audit alert says how many screenshots landed and leaves them where they are, and all of it is read properly on the private desk.

How long I keep it

Your audit, your plans and the answers they were written from stay while the page they belong to is yours to open, because that page is the product. Order and payment records are kept for as long as Australian tax and consumer law asks me to. A free-guide signup stays on the list until you unsubscribe, and an unsubscribe is recorded so nothing marketing reaches you again.

Asking me for a copy, a correction, or a deletion

Email contact@doomscrollersocials.com and tell me what you want: a copy of what I hold, a correction, or the lot deleted. It is me reading it, so say it however you like. Anything I have to keep for tax or legal reasons I will tell you about rather than quietly hold.

If something is wrong

If you think I have handled your information badly, tell me at the same address and I will answer within a couple of weeks and fix what needs fixing. If you are not happy with my answer you can take it to the Office of the Australian Information Commissioner at oaic.gov.au.

When this page changes, the date at the top changes with it, and anything that changes what I do with your information gets an email to the people it affects.