information we collect
we collect the following information to provide our Dr. Frost solving service:
- Dr. Frost credentials: email address/username you provide to access the Dr. Frost platform
- __df_session: temporary session identifier from Dr. Frost website used during problem solving
- payment information: collected by Stripe for subscription processing
we do not collect or store any additional personal information beyond what is necessary for the service functionality.
how we use your information
we use the collected information for the following purposes:
- access control: your Dr. Frost credentials are used to filter access to our browser extension, to manage demand, server load, and to prevent abuse.
- problem solving: the __df_session cookie allows us to solve problems through your authenticated Dr. Frost session.
- payment processing: Stripe handles all payment information for subscriptions
- service analytics: Vercel analytics help us understand website usage patterns. we also record anonymous site visits and install steps with a random browser ID, and account-linked extension usage steps, to find where setup or purchase fails. these funnel events expire after 400 days
information sharing and third parties
we do not sell, trade, or rent your personal information to third parties. your data is only shared with the following services for operational purposes:
- stripe: payment processing, receives data you provide for payment handling, (email, name, etc). We also send your Dr. Frost account identifier to Stripe as payment metadata to activate access. This does not set your receipt email.
- vercel: website hosting and analytics - processes website usage data for performance monitoring
your Dr. Frost session is used only to verify your account and is never sent to Stripe. We do not sell your account or session data.
data security
we implement appropriate security measures to protect your information:
- Dr. Frost credentials are encrypted and stored securely
- the __df_session cookie is never stored, simply used per-request.
- payment data is handled exclusively by Stripe's PCI-compliant systems
- all data transmission uses HTTPS encryption
while we strive to protect your data, no method of transmission over the internet is 100% secure. we regularly review and update our security measures.
your rights and data control
you have control over your data with the following rights:
- access: request information about what data we have stored
- deletion: request deletion of your Dr. Frost credentials from our systems
- correction: update your stored Dr. Frost credentials if needed
- portability: Export your data in a structured format
to exercise these rights, contact us at our support email. We will respond within 30 days. Note that __df_session data is automatically temporary and cannot be retrieved or deleted as it expires immediately after use.
changes to this policy
we may update this privacy policy as our services evolve or when required by law. if we make material changes, we will post the updated policy on this page and update the “last updated” date below. we encourage you to review this policy periodically.
contact us
if you have questions about this privacy policy or our data practices, please contact us through our support channels. we are committed to addressing your privacy concerns promptly.