Privacy policy

What we collect

When you contribute, we record the amount, the currency, the PayPal order and capture identifiers, and the date the payment cleared. If you provide them, we also record your name, email address, an optional message, and whether you asked to be listed publicly or to remain anonymous.

If your package includes something that has to be posted to you, we also receive and store the delivery address you have on file with PayPal, together with the name it is addressed to. We ask PayPal for this only when postage has actually been charged — if your package contains nothing physical, or you chose to collect it at the grand opening, no address is requested and none is stored.

We do not collect, receive or store card numbers, CVV codes, bank details or any other payment instrument. PayPal handles the entire payment. This site never sees it.

Why we collect it

Your email address is used to send your receipt and, where you have purchased a service package, to arrange delivery of that service. It is not used for marketing unless you separately ask to be added to a mailing list.

Your name appears publicly only if you explicitly consented to that when contributing. If you chose to remain anonymous, your name is not displayed anywhere on the site.

A delivery address, where we hold one, is used for exactly one thing: addressing the parcel. It is not used for marketing, is never shown publicly, and is not shared with anyone beyond the postal or courier service carrying your package.

Who else sees it

PayPal processes the payment and holds the transaction record as the payment provider. Their privacy policy governs that data.

Resend delivers the receipt email. Supabase hosts the database. Vercel hosts the site. Cloudflare Turnstile performs the bot check on the contribution form; it does not receive the contents of any form field.

We do not sell contributor data, and we do not share it with advertisers or data brokers.

What we deliberately do not do

Contributor email addresses and messages are never written to application logs or sent to any external analytics or monitoring service. No analytics script on this site has access to the values you type into the contribution form.

Retention

Contribution records are retained for as long as required for tax and accounting purposes. Webhook processing logs are pruned on a rolling ninety-day cycle.

Your rights and how to reach us

You can ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it where we are not required to retain it for accounting reasons. Write to the contact address in the footer.