Privacy Policy

Last updated: April 18, 2026

Pouchy.org is an educational website. We collect as little information as practical, never sell data, and use no third-party tracking or advertising. This page explains exactly what happens to any data you share with us.

What we collect

Contact form

When you submit the contact form, we collect: your name, email address, the reason for contact you select, and your message. This data is stored in a Cloudflare D1 database accessible only to site administrators.

Ask AI feature

When you type a question into the Ask AI feature, your question is transmitted to our server for processing and returned as an answer. Queries may be retained in aggregate, stripped of identifiers, for service-quality review. We do not tie queries to your identity.

Server logs

Cloudflare, our hosting provider, maintains standard HTTP access logs (IP address, user agent, timestamp, URL) for security and diagnostic purposes. See Cloudflare’s privacy policy. We do not analyze or export these logs.

What we do NOT collect

How we use your data

Data retention

Your rights under GDPR (EU/EEA users)

If you are a resident of the European Union or European Economic Area, the General Data Protection Regulation (GDPR) grants you the following rights:

To exercise any of these rights, email [email protected] with subject line “GDPR Request”. We’ll respond within 30 days.

Legal basis for processing

Data controller

The data controller for Pouchy.org is Stefan D. Holubar, MD, MS, acting as an individual on behalf of the iPouch Consortium educational initiative. Contact: [email protected].

International data transfers

Our servers are located in the United States (Cloudflare). If you access this site from the EU/EEA, your data will be transferred to the US. Cloudflare participates in the EU-US Data Privacy Framework and provides GDPR-aligned Standard Contractual Clauses as the transfer safeguard.

Cookies & client-side storage

Pouchy.org does not currently use tracking, advertising, or third-party analytics cookies. Cloudflare Web Analytics is cookieless. The site uses a sessionStorage item to remember whether you have acknowledged the disclaimer and a localStorage patient-education accept flag — neither is shared with third parties and both can be cleared via your browser settings.

Future: When the Ask AI feature launches, an authentication cookie may be used if accounts are offered. Any such change will be disclosed here and in a prominent notice on the site.

Data breach notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk, we will also notify affected users directly via the email address on file.

Request data deletion / withdrawal of consent

You may withdraw consent or request deletion of any personal data we hold at any time.

Request Data Deletion

We will confirm receipt within 7 days and complete deletion within 30 days, per GDPR Article 17.

Children’s privacy

This site is intended for adults seeking information about J-pouch surgery. We do not knowingly collect data from children under 16. If you believe we have inadvertently done so, please contact us and we will delete it.

Jurisdiction

Pouchy.org is operated from the United States. By using this site you consent to your data being processed in the U.S. Content is based on U.S. medical standards and may not apply in your jurisdiction.

Changes to this policy

If we change how we handle data, we will update this page and the “Last updated” date at the top. Material changes will be noted on the site’s front page for at least 30 days.

Contact

Questions about this privacy policy: [email protected]