Privacy Policy

Last updated: February 2025

Overview

DocDocs is committed to protecting your privacy. This policy explains what data we collect, why we collect it, and how we handle it. The short version: we collect the minimum data needed to provide the service, and we will never sell or share your personal data with third parties except where strictly necessary for functionality.

What data we collect

Account information

When you create an account, we collect:

  • Email address — used for account authentication via magic links
  • Full name — used to identify you within the service
  • Preferred name (optional) — used to personalise your experience

Passkey credentials

If you register a passkey for sign-in, we store a public key credential associated with your account. We never have access to your private key — it remains on your device.

Cookies

We use a small number of strictly necessary cookies for authentication. No analytics or tracking cookies are used. See our cookie information page for full details.

How we use your data

Your data is used solely to:

  • Authenticate you and maintain your session
  • Display your name within the application
  • Send you authentication emails (magic links) when you sign in or sign up

Third-party data sharing

We will never sell your data. We will never share your personal data with third parties except where strictly necessary to provide the service. Where third-party services are required for specific features, we will document each one below.

Current third-party services: None. All data is processed and stored on our own infrastructure.

If this changes in the future, this section will be updated with a table listing each feature, the third party involved, and what data is shared.

Data storage and security

  • Your data is stored in a server-side database
  • Cookies are cryptographically signed, HTTP-only, and Secure in production
  • We do not use passwords — authentication is handled through passkeys and email magic links, which are more resistant to phishing and credential stuffing attacks

Your rights

You have the right to:

  • Access your data — view the personal information we hold about you via your account settings
  • Correct your data — update your name and other profile information at any time
  • Delete your account — request deletion of your account and all associated data

Changes to this policy

We may update this privacy policy from time to time. Significant changes will be communicated through the application.

See also: Cookie information