Privacy notice

Effective date: 2026-04-30. This is the version stored against participants who consent on or after this date. Prior versions, if any, are listed at the bottom of this page.

1. What this notice covers

The Social Breathalyzer is a research tool operated by Sokolove Law, LLC (the “firm”) at socialbreathalyzer.ai. It accepts a copy of your own social-media activity export, computes a screen-time report from it, and emails you a link to that report. This notice describes what data we collect, how we use it, how long we keep it, and how to have it deleted.

2. What we collect

From the export ZIP you upload, we read only the JSON activity files listed below. We do not extract anything else from the archive — not your photos, not your videos, not your messages, not your friend graph.

Instagram (Meta export)

• posts_viewed.json — feed posts you saw, with timestamps
• videos_watched.json — Reels and feed videos you watched, with timestamps
• ads_viewed.json — ads you were shown, with timestamps
• liked_posts.json — items you liked (used as engagement signal only)
• login_activity.json — session start/end times, used to estimate active minutes

Facebook (Meta export)

• recently_viewed.json — content surfaced to you
• recently_visited.json — pages and groups you opened
• ads_viewed.json — ads you were shown
• your_search_history.json — searches you performed (counts only; no terms persisted)
• account_activity.json — session and login timestamps

TikTok

• user_data_tiktok.json — the Activity section only (video views, likes, login history). The Profile, Comment, Direct Message, Following, and Follower sections are ignored.

YouTube (Google Takeout)

• Takeout/YouTube and YouTube Music/history/watch-history.json
• Takeout/YouTube and YouTube Music/history/search-history.json (counts only; no query terms persisted)

Alongside the JSON files, we collect the contact and demographic information you typed into the intake form: your name, email address, optional phone number, age band, and US state of residence. Your IP address is captured during intake but is immediately hashed with a per-deploy salt before storage; the raw IP is never written to disk.

3. What we do not collect

From your export, we never read or persist any of the following, even when present in the archive:

• Photos, videos, audio, or any media files
• Messages, DMs, or chat threads
• Profile information (bio, profile photo, location, gender)
• Contact lists, phone-book imports
• Friend lists, follower lists, or following lists
• Stories, story reactions, or story replies
• Comments you posted, comments others posted on your content
• Channel metadata, subscription lists, playlists, liked-video lists

4. How we store it

The raw export ZIP is uploaded directly from your browser to encrypted object storage (Cloudflare R2) using server-side encryption with a per-participant key derived from a master key held in our Worker secrets store. Raw ZIPs are deleted from storage within 48 hours of successful processing. The numeric metrics computed from the ZIP (totals, hourly distribution, per-day minutes) are stored in our application database for the duration of the active campaign and are deleted at campaign end, or sooner on request.

5. How we use it

• Personal report. We use your data to compute and email you a personal screen-time report.
• Aggregate publication. Sokolove Law may reference de-identified aggregate findings — for example, “participants in the 25–34 age band averaged X minutes per day on TikTok” — in publications, court filings, regulatory submissions, white papers, and public commentary related to the firm's litigation, legislative, and advocacy work. No individual participant is ever identified in any aggregate output, and no aggregate cohort is ever published with fewer than 25 participants in it.
• Operational logs. Worker logs may contain participant ULIDs (opaque random identifiers) for debugging. They never contain your name, email, phone number, or IP address.

6. What we will not do

• We will not sell your data.
• We will not share your individual data with any third party for marketing, advertising, or analytics.
• We will not contact you about anything other than this study.
• We will not use your data to evaluate your eligibility for legal representation by Sokolove Law unless you separately contact the firm and consent to that evaluation.

7. Right to deletion

You can have your record permanently deleted at any time. There are two ways to do this:

• Click the one-click deletion link in any email we send you. The same link is reproduced here for convenience: socialbreathalyzer.ai/forget?t=<your token>.
• Email support@socialbreathalyzer.ai from the email address you registered with.

When you exercise the right to deletion:

• Your name, email, and phone number are scrubbed from our database (replaced with the literal forgotten).
• Every uploaded export is deleted from object storage on the next retention sweep, typically within minutes.
• Every metric we computed from your data is deleted.
• You are sent one final email confirming the deletion. After that we will not contact you again.

Deletion is immediate and irreversible.

8. Children

The Social Breathalyzer is for adults. Participation requires you to be 18 years of age or older. The intake form's age-band step enforces this — selections of under_18 are rejected before any data is uploaded.

9. Security

The site is operated entirely on Cloudflare's edge platform. Uploads are transmitted over TLS, encrypted at rest with per-participant keys, and the application is protected by Turnstile and IP-based rate limiting. Staff access to participant records is restricted by single sign-on through Cloudflare Access and audited on every read.

10. Contact

Questions about this notice or about how we handle your data: privacy@sokolovelaw.com.

General questions about the study: support@socialbreathalyzer.ai.

11. Changes to this notice

If we materially change how we handle your data, we will post a new dated copy of this notice (e.g. privacy-YYYY-MM-DD.html) and bump the version that new participants are asked to consent to. Participants who consented under a prior version are not retroactively bound to the new version — their record continues to be governed by the version they originally accepted.

12. Version history

• 2026-04-30 — initial public version (this document).

Back to start