Privacy Policy

Effective Date: April 25, 2026

1. Introduction

FreeDonateButton ("we," "us," or "our"), operated by Make More Marbles Foundation, respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard information when you use our website at freedonatebutton.org (the "Platform") and our donation widget services.

By using our Platform, you agree to this Policy. If you do not agree, please discontinue use immediately.

2. Information We Collect

We may collect the following information:

• Charity Account Information: Organization name, email address, and Stripe account ID provided during onboarding.
• Donation Data: Donation amounts, types (one-time or recurring), and timestamps. We do not store donor credit card numbers — all payment processing is handled securely by Stripe.
• Usage Data: IP address (for rate limiting only), browser type, and pages visited.
• Cookies: A temporary session cookie during Stripe onboarding (expires in 1 hour). We do not use tracking cookies or third-party analytics cookies.

3. How We Use Your Information

We use collected data to:

• Process and route donations to the correct charity via Stripe Connect
• Provide onboarding and widget generation services
• Prevent fraud and abuse through rate limiting
• Generate aggregate donation statistics
• Respond to support inquiries
• Comply with applicable legal requirements

4. How We Share Information

We do not sell your personal data. We share data only with:

• Stripe, Inc. — Our payment processor. Donations are routed directly to the charity's own Stripe account via Stripe Connect. Stripe's privacy policy governs their handling of payment data.
• Legal Authorities — When required by law or to protect our rights.

5. Payment Processing

All payment processing is handled by Stripe, Inc. We never see, store, or have access to donor credit card numbers. Stripe is PCI DSS Level 1 compliant — the highest level of payment security certification. When a charity uses our widget, donations go directly to their Stripe account. FreeDonateButton charges zero platform fees — the only fees are Stripe's standard processing fees (2.2% + 30¢).

6. Data Security

We implement reasonable technical and administrative measures to protect your data, including:

• HTTPS encryption on all connections
• Rate limiting to prevent abuse
• Input validation and sanitization
• Webhook signature verification for Stripe events
• Admin endpoints protected by token-based authentication

No online platform is completely secure, and we cannot guarantee absolute protection against unauthorized access.

7. Your Privacy Rights

We comply with applicable U.S. data privacy laws, including the California Consumer Privacy Act (CCPA) where relevant. You may have the right to:

• Request access to personal information we've collected about you
• Request correction or deletion of your personal information
• Opt out of the sale or sharing of personal data (we do not sell personal data)

8. Data Retention

We retain charity account data and donation records as long as the account is active or as required for legal and tax purposes. Rate limiting data expires automatically after 15 minutes to 1 hour.

9. Third-Party Links

Our Platform may contain links to other websites (including Stripe's dashboard). We are not responsible for their privacy practices or content.

10. Children's Privacy

Our Platform is not intended for children under 13. We do not knowingly collect personal information from minors.

11. Changes to This Policy

We may update this Privacy Policy periodically. Updates will be posted here with a new effective date.

12. Contact

If you have questions about this Privacy Policy or want to exercise your rights, contact us at support@makemoremarbles.org.