This Privacy Policy explains how Roktodut (রক্তদূত) collects, uses, and safeguards your personal information when you use our blood donor platform.
1. Information We Collect
When you register as a blood donor, we collect the following information:
- Personal Identification: Full name, date of birth, gender.
- Contact Information: Email address, phone number.
- Health Information: Blood group, weight, last donation date.
- Location Information: District and area of residence.
- Profile Picture: An optional photograph you upload.
- Account Credentials: Email and a securely hashed password (we never store plain-text passwords).
When visitors submit blood requests or contact forms, we collect:
- Patient name, blood group required, hospital information, contact phone number, and supporting details.
- Name, email, phone, and message content for support inquiries.
2. How We Use Your Information
- To display your donor profile in search results (only when you have set visibility to Public).
- To allow patients and caregivers to contact you directly in emergencies.
- To communicate platform updates, eligibility reminders, and support responses.
- To maintain the safety and security of the platform.
- To generate anonymized statistics (total donors, districts covered, etc.).
3. Donor Visibility & Control
You have full control over your profile's visibility:
- Public (Visibility = ON): Your name, blood group, district, area, and phone number are visible in search results to anyone visiting the platform.
- Hidden (Visibility = OFF): Your profile is completely removed from all public search results. You can toggle this at any time from your profile dashboard.
Your email address and hashed password are never displayed publicly.
4. Data Security
- All database queries use PDO Prepared Statements to prevent SQL injection.
- Passwords are hashed using PHP's
password_hash() with the bcrypt algorithm.
- All forms are protected against Cross-Site Request Forgery (CSRF) attacks.
- User inputs are sanitized with
htmlspecialchars() to prevent XSS.
- File uploads are validated by MIME type and extension, and PHP execution is disabled in the uploads directory.
- Sessions are regenerated on login to prevent session fixation attacks.
5. Data Sharing
We do not sell, trade, or rent your personal information to third parties. Your phone number is shared publicly only when your profile visibility is set to Public, enabling life-saving contact by patients.
6. Data Retention
Your data is retained as long as your account is active. You may request deletion of your account and associated data at any time by contacting us at support@roktodut.com.
7. Children's Privacy
Our platform requires users to be at least 17 years old to register as donors. We do not knowingly collect information from individuals under 17. If you believe we have inadvertently collected such information, please contact us immediately.
8. Changes to This Policy
We may update this Privacy Policy periodically. Any changes will be posted on this page with an updated revision date. Your continued use of the platform after changes constitutes acceptance of the updated policy.
9. Contact Us
If you have questions about this Privacy Policy, please contact us: