Your privacy and security
Written for the questions a frightened person actually has, in plain words. The technical version is in our privacy notice.
- Can my partner find out I use this?
- Not from us. We send no post, no marketing email, and nothing to your phone unless you turn it on. If you sign up with an email, the only messages it gets are one to confirm the address and a reset link when you ask for one, both from "CLR Digital" with nothing about what this site is for. The site title in your browser tab is just "Clearr". The bank statement line is "CLR DIGITAL". You can sign up with a passphrase and no email at all. The "Leave quickly" button (or pressing Escape twice) replaces this tab with a weather site. What we cannot control is your own device: if your partner can see your browser history, your messages or your bank app, read "Your phone, your money, your data" before anything else.
- What shows on my bank statement?
- "CLR DIGITAL" and the amount. Nothing that says relationship, divorce, abuse or Clearr. Payments go through Stripe; we never see your card number. You can pay with a card in someone else's name and we will not know or ask.
- What do you store about me?
- Two separate things, in two separate places. Your sign-in (an email and password, or a passphrase with no email) and a reference to Stripe for billing. Separately, under a random key that is not linked to your sign-in anywhere except one protected row, everything you record: assessment answers, module progress, your log, your written entries. We do not store your name, your partner's name, your address, your IP address beyond a few hours for abuse protection, or any device fingerprint.
- Can you read what I write?
- No. Your written entries, log notes and personal lists are encrypted with a key derived from your account that staff and database administrators cannot use. Your assessment answers and scores are not encrypted (they are numbers against a random key) so that we can compute your profile; they contain no words of yours.
- What happens if I forget my passphrase?
- If you made a recovery phrase (Settings, then Recovery phrase), you can use it to set a new one. If you did not, and you have no email on the account, your space cannot be recovered. We say this plainly because the alternative, a reset that anyone with your documents could do, would be a route for the wrong person to get in. The person most likely to hold your passport is often the person you are protecting yourself from.
- Can an administrator get into my account?
- An administrator can reset access to your account, as a last resort, if you prove you control your sign-in email, your payment card or your recovery phrase. Every manual reset is logged and shown to you the next time you sign in. An administrator can never read your encrypted entries.
- Where is my data held?
- In a Supabase project hosted in London, on encrypted disks, with encrypted backups that expire. Payment data is held by Stripe. We use no advertising or analytics companies on member pages: no Google Analytics, no Facebook pixel, no session recording.
- What if I find a security problem?
- Email security@clearr.org.uk. We will reply within two working days. We would much rather hear about a problem than not.
- What should I do if I think my account has been seen?
- Change your password or passphrase from Settings. Turn off "Stay signed in" if it is on. Check the access log on your account page for sign-ins or resets you don't recognise. If your partner has access to the email on your account, consider switching to a passphrase-only account. And read "Your phone, your money, your data": the device is usually the weak point, not the site.
- Is this a charity? Is someone watching in case I'm in danger?
- No to both, and it matters that you know. Clearr is a paid service run by a company. Nobody reads what you write and nobody will intervene. If you are in danger, call 999; if you want to talk to someone, the helplines at the bottom of every page are free and run by specialists.
How it is built
- Identity (sign-in, billing reference) and content (everything you record) live in separate tables joined only by a random key. A breach of either alone reveals nothing useful.
- Row-level security in the database means your session can only ever read rows for your own key, enforced by the database itself, not just the application.
- Free text is encrypted with AES-256-GCM using a key derived per member; support tooling cannot decrypt it.
- No third-party scripts, trackers or fonts on any page: everything loads from Clearr itself. Strict security headers. Member pages are never cached.
- Referral links carry no information about who sent them and never expire; misuse is limited by rate-limiting the sender, not by tracking them.
- Account deletion removes everything, cancels any subscription, and keeps no copy.