Privacy policy

The short version: we built this site so you can look for detox without telling anyone, including us. There are no analytics, no advertising, no tracking pixels and no cookies, the program finder works inside your own browser, and no form asks about your health. We don't sell or share what you send us.

Who we are

withdrawal.help is an independent website. Contact us through the form on our contact page; choose "Privacy request" for anything about your information.

What we collect

When you browse

Our host, Cloudflare, receives the technical details every website receives: your IP address, browser type, the page you asked for and the time. Cloudflare uses them to deliver the page and block attacks, and keeps them under its own policy. We don't download those logs, combine them with anything else, or use them to learn who reads which pages.

We don't run analytics tools, advertising pixels, social media trackers or session recording. The site sets no cookies. We don't record which site or campaign link sent you here: no UTM tags, referrer or landing page are stored or sent with any form.

The program finder

When you type a ZIP code or choose "use my location", the distance math runs on your device. Your location and full ZIP code are not sent to us. To do the math, your browser downloads a few files from this site: ZIP code centers for the first two digits of the ZIP you typed (for example, /finder/zip/85.json), and the program lists for the map squares near you, each two degrees of latitude and longitude, roughly 100 to 140 miles across. Like any page request, those downloads reach our host. If you use your location, your browser asks your permission first; you can say no and type a ZIP code instead.

The correction form

The only form that sends us a message is the listing correction and feedback form, on the corrections and contact pages. It sends exactly these fields: which listing or page, what's wrong, your email, your name if you choose to give it, the address of the page you sent it from, and the consent sentence shown beside the button. A hidden spam trap field is meant to stay empty. Please don't include health information about yourself or anyone else. If a message contains it anyway, we answer what we can and then delete the health details.

What you send is stored in a database we run on Cloudflare and emailed to us through Cloudflare's email service so a person can read it.

Listing alerts

On a program's page you can ask to be emailed when SAMHSA's listing for that program changes. If you do, we store your email address, which program you asked about, the sentence you agreed to, the date, and a random code used for the unsubscribe link. Nothing else: not your IP address, browser or the pages you read. Alert emails haven't started yet; before the first one we will ask you to confirm, and every email will have one-click links to unsubscribe or erase your address completely. To erase it before then, use the contact form (choose "Privacy request"). The changes feed gives the same information with no email at all.

How we use it

To fix listings and reply to you, to send the alerts you asked for (once they start), to run and secure the site, and to meet legal obligations. Never for advertising, and never to build a profile of you.

Who we share it with

We don't sell or share what you send. That includes treatment programs, advertisers and data brokers. The only outside company that handles it is Cloudflare, which hosts the site, the database and our email delivery, and only to provide those services to us. We would disclose information if the law requires it (for example a valid court order), and if the site is ever sold, the buyer would take over this policy and we would post notice here first. If what we share ever changes, we will update this policy first and ask for your consent on the form before sharing anything.

Consumer health data

Some state laws, including Washington's My Health My Data Act, Nevada's consumer health data law and Connecticut's data privacy act, protect "consumer health data": information that identifies you and says something about your physical or mental health, including that you looked for substance use treatment.

• We don't collect it on purpose. No form asks about health, substances, treatment, insurance or medication.
• Where it could still appear: a listing alert you sign up for (your email and the program you watch can say something about you), a message where you mention health despite our request, and Cloudflare's short-lived request logs.
• How we use it: only to send the alert you asked for, answer you, and run the site.
• We don't sell it or share it with anyone, including the program you watch. We don't use geofencing.
• Your rights: you can ask whether we hold consumer health data about you, get a copy, have it deleted, and withdraw consent (for alerts, that means the sign-up is erased). Use the contact form and choose "Privacy request". We answer within 45 days. If we turn your request down, reply to our answer to appeal, and we will respond within 45 days of your appeal. If you're not satisfied, you can contact your state attorney general.

How long we keep it

• Correction and feedback messages: deleted 24 months after we receive them, sooner if you ask. Health details in a message: deleted once we have answered.
• Listing alert sign-ups: kept until you unsubscribe or erase them. A sign-up that is never confirmed is deleted 12 months after it was made. Unsubscribing keeps only a record that your address must not be emailed; erasing removes it completely.

Your rights

Wherever you live, you can ask what we hold about you, ask for a copy, ask us to correct it or delete it, and opt out of any sale, sharing or targeted advertising (we do none of these). Residents of California, Colorado, Connecticut, Virginia, Texas, Oregon and other states with privacy laws have these rights by law, to the extent those laws apply to us. We honor Global Privacy Control signals as an opt-out request. Use the contact form and choose "Privacy request"; we may ask you to confirm, from that address, the email the request concerns. We won't treat you differently for asking. If we decline a request, reply to appeal.

Children

This site is meant for adults. It is not directed to anyone under 18, and we don't knowingly collect information from children under 13. If you think a child has sent us information, write to us and we will delete it.

Security

The site is served only over HTTPS. Messages and sign-ups are stored with Cloudflare, and only the people who run this site can read them. Nothing stored online is perfectly safe, so please leave health details out.

Changes

If we ever add analytics, advertising or anything else that changes what we collect or share, we will update this page first and change the date at the top.

Contact

Use the contact form. For privacy requests, choose "Privacy request".