Privacy

Small app. Small data footprint.

What we store

First name, account email, email preferences, badge settings, cause links, donation entries, uploaded logos, private receipt images, and the Stripe customer/subscription identifiers needed to control access.

What becomes public

Only published badge fields, cause links, and donation amount/date/note history. Receipt images are private and are never included in the public API or badge.

Payments

Stripe handles subscription checkout and payment details. PledgeBadge does not store card numbers. PledgeBadge never processes the donations an operator reports.

Email

Resend delivers account emails and, if you opt in, badge ideas and product news. Marketing emails include an unsubscribe link. Your first name lets us personalize our emails.

Tracking

The embed ships without advertising analytics or viewer accounts. Normal server and reverse-proxy logs may contain an IP address, request URL, user agent, and timestamp.

Access, export, or deletion

Email [email protected]. Before public launch, the operator must set a real support address and a documented retention window.

This plain-language draft needs jurisdiction-specific legal review before a public paid launch.