How we protect families

How the local-first design works

Most tools that handle sensitive information send it to a server to store and process. We do the opposite. The documentation tools are ordinary web pages that run their logic on your device, and any record you build is written to your browser’s local storage — the same place a site remembers your preferences. It stays on that device until you clear it or export your own copy.

• No upload step. Building a record, generating a letter, or preparing a meeting brief sends nothing across the network.
• Minimal attack surface. Because we never hold a child’s incident data, there is nothing on our side to leak, subpoena, or sell.
• You stay in control. Use Export backup to keep your own copy, and Clear all on a shared device. We can’t recover a record, because we never had it.

You don’t have to take our word for it

Because the tools run in your browser, you can check this yourself. Open your browser’s developer tools, go to the Network tab, and use the guided investigator or record builder. As you type and move through the questions, you’ll see no network requests carrying your information — the data simply stays on your device.

A note on honesty

We describe what we actually do rather than making certification claims. We don’t call ourselves “COPPA-certified,” “HIPAA-compliant,” “WCAG-certified,” or anything we haven’t earned — we keep the design simple and private so there’s little to get wrong. StopBullyingPro is an independent private service; it is not a government agency and is not affiliated with the resources it links to.

Frequently asked questions

Where does my child’s incident information go?

Nowhere we can see. The investigator, record builder, letter generator, and meeting tool run in your browser and save to your device’s local storage. We have no incident database, so there is nothing on our side to breach, sell, or share.

Do you use AI on what I type?

No. The guidance uses a simple, built-in set of rules — not a large language model. No incident text is sent to any AI service, and nothing you enter is used to train a model.

Do you run ads or third-party analytics?

No. The site loads only its own code — no Google Analytics, no ad pixels, no tag managers. A strict Content-Security-Policy blocks third-party scripts, so trackers cannot be added quietly.