Privacy policy
What we collect.
What we don't.
Last updated:
The short version
We collect the minimum we need to run the campaign: an email address when you take the pledge or make a donation, and (for donations) payment information processed by Stripe. We do not sell, rent, or share your data. There is no advertising network embedded in this site.
What we collect
- Pledge form: email, optional first name, optional commitment text, the time of submission, and a hashed form of your IP address (used only to rate-limit submissions).
- Donations: email, donation amount, frequency, and the Stripe session ID. Card details never touch our servers — they are handled entirely by Stripe.
- Analytics: none right now. If we ever add any, it will be privacy-respecting (no cookies, no fingerprinting, aggregate counts only) and this page will say so.
Third parties we use
- Stripe — payment processing. See Stripe's privacy policy.
- Railway — site hosting and the Postgres database that stores pledges and donations.
- Resend — transactional email (pledge confirmations, donation receipts).
How long we keep it
Pledge records are retained as long as you remain on the list. Donation records are retained for 7 years to meet U.S. financial-records expectations.
How to delete it
Email chris@justoncemore.org from the address you signed up with, and we'll remove your data within 30 days. Donation records may be retained in anonymized form for accounting.
Cookies
We do not set cookies for tracking. Our analytics are cookieless. Stripe sets cookies only on its own checkout page.
Contact
Questions about privacy: chris@justoncemore.org.