Skip to content

Privacy

Your privacy and your choices

You can take action without an account
You can find, take and record an action without registering. Nothing you select while matching is kept as a profile of you.
We do not ask for health data
There are no symptom questions and no medical history anywhere in matching, and we do not need any of it to run the service. Free-text fields and email carry whatever you choose to type, so please leave medical details out. We do not ask for them, and where medical information reaches us unnecessarily we delete it whenever that is reasonably possible.
What happens to your matching answers
Your answers are categories, not text: what you can offer, what commitment suits you today and, if you choose to give it, your country. They are sent to our server, where published rules decide which actions are eligible. Nothing about you is kept as a profile afterwards.
AI help and the information you share
Which catalogue actions you are eligible for, and their initial order, are decided by published rules. AI is optional: a model runs only when you press a button asking for help, it never decides eligibility or any status, and a written version of every draft is always available without AI. Nothing is ever sent to a recipient on your behalf.
What is sent when you press an AI button
On an action page: the action, your optional country and hours, and any text you wrote. In the letter planner: the current draft, your instruction, the chosen country, request and languages, the goal, any recipient role and official page, region, city or institution you entered and your optional motivation; we do not open that page. In the action coach, pressing Send transmits exactly the preview you saw: your contribution category, optional country, commitment, any expertise, access or limits you selected, funder-path choices, server-selected action or funder facts, up to four recent turns and your question. For a funder-message revision, the preview shows and Send transmits fixed instructions, the revision kind, the output language, the funder's name, the request our server allows for that funder, the template version, your optional story and your current draft. No name field or receipt code is added automatically, but any text you type — including names — is sent as you wrote it. A suggested revision replaces your draft only if you press Apply. The “Find my state's senators” button sends only the state you chose to our server, which reads the official Senate directory.
What stays on this device
Chat, stories, letter drafts and reply notes stay in the tab and are not saved by us. The optional “Save on this device” stores only choices, the chosen action or funder route ID and version, a private status and, for older plans, a date in your browser's local storage — never text. You can delete it on the page. There is no AI memory between visits and no reminders.
What is saved to your account, only if you ask
If you are signed in and press “Save to my account”, the same compact plan — your categorical choices, any country you selected, action or funder IDs and versions, a private status and an optional date — is stored with your account so you can open it on another device, until you delete the plan or your account. Free text is never saved there. A saved plan is not a recorded action, is never counted and does not approve anything. Two more things are stored only when you explicitly choose them. “Save for later” on an action stores a private bookmark — the action's ID and when you saved it — so you can find it again on any device; removing it deletes the bookmark, and a bookmark never records or counts an action. “Save draft to my account” in the letter planner stores the draft text and your planner choices privately with your account until you remove the draft or delete your account; saving or reopening a draft never sends it, never uses AI and never subscribes you to anything. Other members cannot read these, and deleting your account removes them in the same step.
AI providers
Text you send leaves our server for the AI gateway operated by our hosting provider, Lovable, which passes it to the model configured for this site, currently a Google Gemini model. We do not store what you send. What those providers do with it afterwards, where they process it and for how long they keep it is governed by their own terms; we have not been able to document those details, so we do not state them here.
What a completion record holds
The action, a randomly generated receipt code not linked to an account, the time and an optional country. We also store limited technical metadata: a token that lets that receipt be maintained, whether the completion came from this site or a connected client, and which version of the published rules and action text applied. The completion record itself contains no name, no IP address and no contact details. Our hosting, database and security providers process standard request information, including IP addresses, in order to serve and protect the site.
Your own self-defined action
If you describe an action in your own words, that text stays in your browser. It is sent to the AI provider only in the moment you press the button asking for help making it concrete, and it is never retained or published by Tinnitus Action. It is never sent when you choose to use your action as written. Nothing you wrote is stored on our side and nothing is reviewed: the shared record shows only “Self-defined action”, a receipt code, an optional country and the time.
What stays on your device
Your form answers, any self-defined action text and your optional feedback are kept in your browser's storage. After you record your own action, its text is cleared and only the receipt code is kept for this tab so you can reopen the receipt. If a monthly-update change for your account could not be fully confirmed, this browser remembers that pending change and its address, for your account only, until it is confirmed or you sign out. Clearing your browser data removes all of these.
When you email us
Writing to us means your address, the name your mail app sends and whatever you put in the message arrive in an ordinary mailbox. We use it only to answer you and to act on what you asked. Correspondence is kept for as long as it takes to handle the request and any reasonable follow-up, then deleted, unless there is a genuine legal reason to keep it longer.
The optional monthly update
If you ask for monthly updates, we store your email address, consent time and the information needed to deliver updates and handle unsubscribe requests. Subscribing through My Impact also saves an update preference with your account so you can manage it there. Subscription is optional and separate from analytics; signing in does not subscribe you. The subscriber list is not public. Each email includes an unsubscribe link. When you unsubscribe, your address is deleted from the subscriber list rather than marked inactive.
The optional account
An account is optional and never required to find, take or record an action. You sign in with a one-time code we email you, so there is no password. The code email contains no sign-in link that could be used up by an automatic mail scanner; only if no code is available does the email carry a one-time sign-in link instead. We hold the sign-in email address you typed, an internal account identifier, the date the account was created, the receipt codes of the actions you attached, and your monthly-update preference if you set one, and a coach plan only if you explicitly save one. We do not hold a name, a public profile or anything about your health. Signing in does not subscribe you to anything: the monthly update stays a separate, explicit choice. Attaching an action requires a one-time claim token that our server generates when the action is recorded and returns to the browser that recorded it; the server keeps only a hash of it, and it is used once. If you ask to save an action and enter your email in the browser that recorded it, we keep a temporary save request: the receipt code and a one-way hash of that email address, never the token. It lets you save the action after verifying the same email in another browser or device, only by pressing Save while signed in to that verified address. It expires after one hour at most, is deleted when the action is saved or the account is deleted, expired requests are removed automatically, and only a confirmed, active account for that exact address can see or use it. It does not subscribe you to anything. A receipt code or email address alone can never attach an action to an account. Your actions stay anonymous in the public record. Your personal page is readable only by you, your email address is never shown in any public page, count or API, and we keep it until you delete the account. Deleting the account removes your email address, your account identifier, your monthly-update subscription, the links between you and your actions, any first name you chose to show on an action, and the update tokens of those actions; by default the actions themselves stay in the public count, with nothing left that connects them to you. If you instead choose to remove them from the shared count, each one gets a permanent reversing entry that takes it out of every public total; the original anonymous record and its reversal stay in the history so the count remains traceable, and neither holds your email address, account identifier or anything else that points to you. Anything already sent to a research organisation is held by them and is outside our control.
Anonymous activity counts
Separately from analytics, we keep a simple anonymous count of a few things that happen on the site: a page being looked at, an action page being opened, a destination link being opened, an action being reported as done, and a suggestion being sent. Each count stores only the event name, the action or campaign it belongs to, a broad category, the page language and, where present, the campaign labels in the link you arrived through. No cookie is set, no identifier is stored, nothing is written that could point back to you, and nothing you type is included. These counts tell us whether the site helps people act; they are never used to identify anyone, and they are never treated as completed actions unless you pressed the button that records one.
Analytics, and how to change your choice
This site uses one first-party analytics script provided by our hosting provider, to see how many people visit, which pages they read, roughly where they come from and what kind of device they use. It does not run at all until you press Accept analytics. If you accept, it sets a first-party cookie called session-id that lasts 30 minutes, and it records the page address, the referring page, browser type and a country derived from your timezone. There is no advertising, no data sale, no marketing tracker and no third-party analytics. Receipt addresses are redacted before they leave your browser: an analytics event for /receipt/YOURCODE is sent as /receipt/[code], so a receipt code is never part of analytics data. If you decline, no analytics cookie is set and no analytics request is made. You can change your mind at any time using the buttons below; withdrawing deletes the session-id cookie and reloads the page so nothing further is collected. A separate Cloudflare cookie is set for security and bot protection and is strictly necessary.

Your current choice: not chosen yet

Who processes what
Lovable hosts the site and provides the first-party analytics script and the AI gateway. Supabase provides the database that stores completion records, the update-subscriber list and the anonymous activity counts; its instance for this project runs in the EU. Cloudflare provides content delivery and bot protection and sees standard request data, including IP addresses. The AI gateway, and the model behind it, receive only the text you send in the moment you press a help button; we do not retain it. We cannot yet document where the hosting provider and the AI gateway process data, whether it leaves the EU/EEA, what they retain, or whether text sent to the model is used for training, so we make no claim about any of it rather than guess. Write to us for the current list of providers and their terms.
Why we process it, and on what basis
Completion records: our legitimate interest in keeping a durable, minimal public record of coordinated action. Contact email: our legitimate interest in answering correspondence. The monthly update: your consent, given by ticking the box, and withdrawable through the unsubscribe link. Hosting and security logs: our legitimate interest in running and protecting the site. AI assistance: your consent, given each time by pressing the button that asks for help; no model runs unless you press it, a non-AI version is always available, and you can simply not use it. Analytics: your consent, given by pressing Accept analytics and withdrawable at any time.
How long each thing is kept
Completion records and receipt codes: indefinitely, as part of the cumulative public record of action taken. If you want yours taken out of the public count, write to hello@tinnitusaction.com with your receipt code; we add a permanent reversing entry rather than erasing the history, so totals stay traceable. Update-subscriber addresses: until you unsubscribe, which deletes the address. Security and authentication records, such as sign-in activity: up to 90 days; an active sign-in session is kept only while you stay signed in and ends when you sign out or delete your account. Email-delivery records for emails we send you: up to 30 days, except that if you unsubscribe or an address bounces, a marker of that is kept for as long as it is needed to respect it. A minimal record that an account was deleted, holding no email address: up to 12 months. Anonymous completion records and their reversing entries: permanently, because they contain nothing that points to a person. Anonymous activity counts: indefinitely, because they contain nothing that points to a person. Text you send for AI help: processed in the moment and not stored by us. Email correspondence: until the request and any reasonable follow-up are handled. Analytics: for as long as the hosting provider's analytics retention allows, and only if you accepted.
Your rights
You can ask for access to what is held, correction, deletion, restriction of processing, and you can object to processing based on legitimate interest. Consent you gave can be withdrawn at any time. Write to hello@tinnitusaction.com. You can also complain to the Swedish supervisory authority, Integritetsskyddsmyndigheten (IMY).
Who is behind this
Tinnitus Action is an unregistered, founder-led, not-for-profit initiative run by Johan Fredriksson in Malmö, Sweden. It is not a company, a charity or a medical service, and it does not currently charge people to use it.
Who is responsible for the data
The data controller is Johan Fredriksson, Malmö, Sweden, reachable at hello@tinnitusaction.com. Anything optional — sending text to an AI provider, recording a completion, giving a country — happens only after you press the button that does it.

To ask what is held against a receipt code, or to have it removed from the count, write to hello@tinnitusaction.com.

Last updated 15 October 2026.