Privacy Policy

Draft, not yet reviewed by a lawyer. This page describes how the site works today so it can be checked and corrected. It is not final and may change. Last updated October 12, 2026.

This page explains what we collect, why, who can see it, and what you can ask us to do with it. We collect as little as we can to run fundraisers safely.

What we collect

If you organize a fundraiser

Your email address (to sign you in with a one-time code and to contact you about your fundraiser).
Your name, and what you write for your fundraiser: title, story, goal, dates and who it is for.
The internet address (IP) a sign-in code was requested from, to slow down abuse. Sign-in codes are stored only in scrambled (hashed) form and expire after 10 minutes.
A record of your withdrawals, including when you confirmed the dispute reminder and from which internet address.

If you donate

Your email address, for your receipt and in case of a refund or dispute.
Your name and message, only if you give them, and your choice of who may see your name.
The amount and status of your donation. Card details go directly to Stripe, our payment provider; we never see or store card numbers.

If someone raises money for you (the recipient)

Your name and email address, as given by the organizer, so we can send you a link to set up your payouts.
Your identity and bank details go directly to Stripe. We keep only your bank’s name and the last four digits of the account, so the organizer can see where the money goes.

If you contact us

Your email address, name (if you give it), message, any fundraiser you mention, and the internet address it came from (to slow down spam). Messages are kept so our staff can follow up.

Who can see what

Everyone: a fundraiser’s title, story, organizer’s name, who it is for, the total raised, and the names and messages of donors who chose to show them publicly. Others appear as “Anonymous”.
The organizer: donors’ names unless the donor chose “no one”, and the amounts. Never donor email addresses.
Our staff: everything above plus donor and organizer email addresses, to help with support, fraud and disputes. Every time a staff member opens a record, it is logged.
Stripe: payment, identity and bank details needed to process donations and payouts, under Stripe’s own privacy policy.
Cloudflare (its Turnstile bot check, on the donation, sign-in and contact forms): your IP address and information about your browser, to tell people from automated attacks such as testing stolen cards. Cloudflare says it does not use this information for advertising.
Service providers that run the site for us (hosting and email delivery), only as needed to provide their service.

“Anonymous” hides your name from the public and from the organizer. It does not hide your donation from us or from Stripe, which must know who paid.

How we use it

To run fundraisers: take donations, hold them for 14 days, and pay out the money.
To send sign-in codes, receipts and messages about your fundraiser or donation.
To prevent and investigate fraud, card testing and abuse, and to handle disputes and refunds.
To keep the financial records the law requires.

We do not sell your information, and we do not use it for advertising.

Cookies

We use only the cookies needed for signing in: one that keeps an organizer signed in (for up to 30 days, or until they sign out), and a separate one for our staff. We do not use advertising or tracking cookies. Stripe’s payment form may set its own cookies to prevent fraud.

How long we keep it

We keep donation and payout records for as long as the law requires for financial records. Unused sign-in codes are deleted after a day, and expired sign-in sessions are removed.

Your choices and rights

You can ask us what we hold about you, ask us to correct it, or ask us to delete what we are not required to keep. Donors who want to stay private can leave their name blank or choose “no one” at checkout.

Security

Sign-in codes and session tokens are stored only in scrambled form. Organizers can see only their own fundraisers, and staff access is logged. No system is perfectly secure; if something goes wrong that affects you, we will tell you.

Children

The site is not meant for children. Organizers must be at least 18.

Changes and contact

If we change this policy, we will update this page and the date at the top. For questions or requests about your information, please contact us.