Dr. Jack policies
Privacy Policy
How Dr. Jack collects, uses, stores, and deletes client information.
Effective August 28, 2026Information collected
The website collects information you choose to provide, such as your name, email, academic level, service request, instructions, messages, deadlines, private sample requests, optional client feedback and publication-consent choices, resolution-case statements, and uploaded files. Payment credentials are handled by PayPal and are not stored by Dr. Jack.
How information is used
Information is used only to review requests, communicate, provide agreed services, manage files and invoices, process payments and resolutions, protect the service, and meet legal obligations. Client documents are not sold, published, or used to train AI systems. Feedback is displayed publicly only when it came from an authenticated client, explicit public-display consent is recorded, and Dr. Jack approves the exact submitted wording. A client can withdraw that consent through the portal.
Website analytics
Google Analytics loads automatically to understand public pages visited, general referral or campaign sources, device or browser information, and broad conversion actions such as opening chat or successfully sending a support request. Advertising personalization and Google signals are disabled. Standard page-view reporting is excluded from administrator, sign-in, and client-workspace pages. Project instructions, uploaded files, private message content, passwords, email addresses, invoice identifiers, resolution-case content, and payment details are not intentionally sent to Google Analytics.
Forwarding-domain measurement
When a forwarding domain brings you to the website, Cloudflare Turnstile performs a browser check to reduce automated-traffic counts. The visitor's browser communicates with Cloudflare for this verification, and the website validates the short-lived result with Cloudflare before counting the visit. A random first-party cookie then estimates unique browsers and credits the first verified forwarding domain used. The cookie expires after one year. After a successful Turnstile check, the server temporarily stores the connection IP address and a hashed browser signature solely to reduce duplicate counts when a cookie is absent or replaced. These temporary records are hidden from normal reports and administrator screens. The authenticated administrator may deliberately enable a time-limited four-hour inspection of the current temporary IP records for count-quality review; enabling and disabling that view is recorded in the administrator audit log. While that view is enabled, the server may derive an approximate country locally from a temporary IP address; no external lookup request or separate country-history record is created. Country results may be inaccurate when a VPN, proxy, mobile gateway, or corporate network is used. The records expire after six hours and are removed by an automated cleanup that runs every five minutes. The long-term visitor report stores only a one-way hash of the random cookie value, the verified forwarding domain, verification time, and most-recent time; it does not retain the IP address, country, name, email, chat content, project information, uploaded files, or Turnstile token. Clearing cookies or using another browser or device can still create another verified count.
Storage and security
Structured account, order, resolution, payment, trust-evidence, and consent information is stored in protected website systems. Uploaded files use access-controlled storage. Reasonable security measures are applied, but no internet service can promise absolute security.
Deletion and retention
You may request deletion of your files at any time by messaging through the portal or emailing drjack9650@gmail.com. Public feedback consent can be withdrawn immediately through the signed-in feedback page. When a payment or resolution case exists, the minimum evidence needed for payment, dispute, security, accounting, or legal obligations may be retained for the applicable dispute period and while a case remains open. Other files can be deleted when they are no longer required.
Your choices
You may request access, correction, or deletion of your personal information. Do not upload passwords, student-account access, or unnecessary sensitive participant data.
Contact
Privacy requests may be sent to drjack9650@gmail.com. This policy may be updated when the service, security practices, or applicable requirements change.