Privacy
Working draft — pending professional review.
What we collect
- An anonymous participant token stored in your browser so we can show you your own contribution history.
- Your contribution amount, currency, timestamp, transaction reference and payment status.
- A coarse country signal and a hashed device signal used only for fraud and compliance checks. These hashes cannot be reversed into a device identifier.
- An email address only where you choose to provide one for receipts or support.
What we never collect or store
- Raw payment card numbers, CVC codes or bank credentials. These are handled entirely by our payment provider.
- Precise location data, contact lists, or tracking data used for advertising.
What other participants can see
- Nothing about you. Participants cannot see other participants' identities, references or amounts. Individual incoming donation amounts are private by design.
- Only aggregate, whole-platform figures are published on the Transparency page.
Who can see your record internally
- Authorised administrators, under role-based access control. Support-level roles can resolve issues without seeing monetary amounts.
- Every administrative view of sensitive data, every settings change and every refund is written to an append-only audit log with the actor, action, target and timestamp.
Receiving money and verification
- If you choose to receive a matched donation in a bank account, our payment provider collects and verifies your identity and bank details directly. We never see or store those details.
- We store only the provider account reference, country, the email you used with the provider, and whether payouts and charges are enabled — the minimum needed to send money to the right verified account and to keep accurate records.
Retention
- Transaction and accounting records are retained for the period required by financial and tax regulation in the relevant jurisdiction. Support correspondence is retained only as long as needed to resolve the matter.
Your rights
- You can request a copy of the personal data associated with your participant token, request correction, or request deletion where deletion does not conflict with legal record-keeping obligations. Contact us with your transaction reference.
Legal review
- This document is a working draft and must be reviewed and approved by qualified privacy and compliance professionals before production launch.