Privacy
Privacy policy
Effective October 20, 2026. PledgeBadge is operated by XT3 LLC, Michigan, United States. Contact us at [email protected] about this policy or your personal data.
What we store
First name, account email, email preferences, badge settings, cause links, donation entries, uploaded logos, private receipt images, and the Stripe customer, payment and subscription identifiers needed to control access. For AppSumo, we store a hash of your redeemed code and its redemption status. Consumed code hashes and purchase references are retained after account deletion to prevent reuse; they are no longer linked to your deleted account.
How we use your information
We use account and content data to provide your badges and giving pages, authenticate you, manage paid access, deliver account emails, answer support requests, and prevent abuse. Support messages include the information you choose to send us.
What becomes public
Only published badge fields, cause links, and donation amount/date/note history. Receipt images are private and are never included in the public API or badge.
Payments
Stripe handles direct checkout and payment details. AppSumo handles purchases made on its marketplace. PledgeBadge does not store card numbers. PledgeBadge never processes the donations an operator reports.
Resend delivers account emails and, if you opt in, badge ideas and product news. Marketing emails include an unsubscribe link. Your first name lets us personalize our emails.
Service providers
Our hosting and database infrastructure stores account data and uploaded files. Stripe processes direct payments, AppSumo processes marketplace purchases, and Resend delivers emails. These providers receive the information needed for their services. We may also disclose information when required by law or to investigate abuse and protect the service.
Cookies and logs
Account pages use authentication cookies to keep you signed in. Signing out ends your current sign-in session.
The embed ships without advertising analytics or viewer accounts. Normal server and reverse-proxy logs may contain an IP address, request URL, user agent, and timestamp.
Analytics
We count visits to our public marketing pages (home, pricing, guides, contact, privacy and terms) with Umami, an analytics service we host ourselves at stats.ianxt3.net. It sets no cookies and receives the page path without query strings or fragments, a fixed page title, the referring site's address without its path, screen size, browser language, and the browser and device type. Umami may infer an approximate location from your IP address; it does not store the address. We do not send account details, giving records, form contents, or receipt files, and nothing is counted on account, sign-in, redemption, giving, or embedded badge pages. If your browser sends Do Not Track, nothing is sent.
Other XT3 products
The home, pricing and guide pages and your account page show a short list of other products from XT3 LLC. Your browser loads that list from xt3.us, which we also operate; the request carries your IP address and browser details like any web request, sets no cookies, and includes no account or giving data. Embedded badges never load it.
Error reports
When a page or our server hits an error, we send a technical report (the error type, a known PledgeBadge error message, code locations, and browser or server environment) to an error tracker we host ourselves at errors.ianxt3.net. Reports leave out cookies, request headers and bodies, query strings, account details and form contents. Embedded badges never send error reports.
Retention
Account settings, giving history, and uploads remain while you keep your account, including after paid access ends. Canceling a subscription does not delete your account. You can request account deletion through support; account deletion removes account-linked content and uploaded files from active storage. Consumed redemption hashes and purchase references remain to prevent reuse, without their deleted account link. Backup copies and operational logs are separate from active account storage; contact us for information about these records when requesting deletion. Payment and support providers may retain their own records under their policies and applicable requirements.
Access, export, or deletion
Email [email protected]. We may verify account ownership before providing or deleting data. You can edit your badge content in your dashboard, unpublish a badge, and unsubscribe from marketing emails using the link in each message. Depending on your location, you may have additional rights over your personal data; contact us to exercise them.
Policy updates
We will update the effective date when this policy changes and provide additional notice when required.