Privacy and Safety
WOMBAT BLS is a free, no-login bilateral attention tool for EMDR-trained clinicians. It is designed for clinician-directed use during appropriate care. It is not EMDR training, a therapy protocol, a self-treatment tool, crisis care, or a replacement for clinical judgment.
What the Tool Stores
- No client names, notes, targets, diagnoses, transcripts, video, or session records are saved.
- Room state is temporary and memory-only in the current MVP.
- Room links expire, and room pages are marked noindex.
- Only aggregate technical events may be counted, such as room created, paired, disconnected, or ended.
- Native room video is not recorded or stored by WOMBAT.
How Rooms Work
- The clinician creates a room and shares a client link.
- The client link opens a stimulus-only view without a Google sign-in or account.
- The server relays control messages; the client browser renders the stimulus locally.
- When supported, control messages are encrypted in the browser before relay.
- Native video uses browser WebRTC media with encrypted signaling through the room relay.
- Optional Zoom, Google Meet, Calendly, or other external links are opened outside WOMBAT and should be used only under the clinician's approved account, consent, and BAA setup when PHI may be involved.
HIPAA Boundary
- WOMBAT can support a privacy-preserving workflow, but this codebase is not by itself a HIPAA compliance determination.
- Production use with PHI requires the appropriate hosting, vendor agreements, access controls, policies, risk analysis, and operational safeguards.
- Do not enter private health information into external scheduling or meeting links unless that vendor account is approved for that use.
Clinical Boundary
- Use this only inside appropriate clinician-directed care.
- Do not use WOMBAT BLS as public trauma-processing instructions or unsupervised EMDR.
- Do not put private clinical information in room links, chat apps, filenames, or screen-share labels.
- If a client is in active danger, medically unstable, dissociative crisis, or urgent risk, use the appropriate clinical and emergency pathways rather than this tool.
Accessibility
- Clinicians should adjust speed, brightness, movement path, sound, and duration to the client and context.
- Stop or blank the stimulus if it causes discomfort, disorientation, visual strain, or safety concern.
- Use audio only after the client intentionally enables it on their device.