Legal

Privacy policy

This page is a draft for review by our legal counsel. It is not in effect yet.

Effective date: [EFFECTIVE DATE]

This policy explains what information the Advanced Cancer Care & Research Foundation (ACCRF, “we”) collects through advancedcancerfoundation.org, and what we do with it. We’ve kept it short and plain.

The short version

  • This site sets no cookies. It uses no analytics, advertising or tracking tools.
  • It loads no scripts or fonts from other companies. Our fonts are hosted on our own site.
  • When you give, you pay on Stripe’s checkout pages. We never see your full card number.
  • If you email us, we receive your message and your email address.
  • The service that hosts this site keeps standard server logs.

What this site collects

You can read everything here without telling us who you are. The site has no accounts and no forms that send us information. It sets no cookies, and it doesn’t use analytics, advertising or tracking tools of any kind.

Server logs

This site is hosted on Firebase Hosting, a Google service. For each page or file you request, it keeps a standard log entry with your IP address, your browser’s user agent (a short description of your browser and device), the page requested and the time. These logs keep the site running and secure. We don’t use them to track you or build a profile of you. [CONFIRM WHO AT ACCRF CAN SEE THESE LOGS AND HOW LONG THEY ARE KEPT]

Gifts

Gifts are made on checkout pages hosted by Stripe, our payment processor. Stripe collects your payment details. We never see or keep your full card number.

For each gift, Stripe shares these details with us:

  • your name and email address
  • the amount and date of your gift
  • the billing details Stripe collects at checkout

We use them to record your gift, answer your questions about it and keep the financial records the law requires. [CONFIRM ANY OTHER USE, SUCH AS NEWSLETTERS OR DONOR LISTS IN AN ANNUAL REPORT, AND HOW A DONOR CAN OPT OUT]

Stripe emails your receipt. If you give monthly or yearly, you can change or cancel your gift through Stripe’s customer portal. Stripe’s own privacy policy covers what Stripe does with your information.

For counsel (Shannon O’Neill), not yet approved. Proposed wording for the bot check on the gift form: The gift form uses Cloudflare Turnstile to tell people from automated programs (bots). It loads only once you start using the gift form. To do its check, Cloudflare processes signals such as your IP address, your browser’s user agent, details of your connection and the website you’re on, and inside its own frame it may use cookies and local storage to keep the check working. Cloudflare says it uses these signals only to detect and block bots, not to identify, profile or target anyone, and that Turnstile doesn’t read what you type into forms. Cloudflare’s Turnstile Privacy Addendum and privacy policy describe its part. The short version above still says the site loads no scripts from other companies; the gift form now loads Stripe’s and Cloudflare’s once you use it, so that line needs the same review.

Email

If you write to us at info@advancedcancerfoundation.org, we receive your email address and whatever you choose to include. Our email runs on Google Workspace. We use your message to reply and to help with what you asked.

Please share only the health details you need to. Email is a poor place for medical records, and we can’t give medical advice.

Who we share information with

We share personal information in only three cases: with the services that help us run the foundation, such as Stripe for payments and Google for hosting and email; when the law requires it; and when you ask us to. [CONFIRM: We don’t sell, rent or trade personal information, including donor lists.] [CONFIRM ANY OTHER SHARING, SUCH AS WITH ACCOUNTANTS OR AUDITORS]

Other sites

This policy covers advancedcancerfoundation.org only. Cancer Pathfinder, at cancerpathfinder.org, is a separate site. [CONFIRM: It has its own terms of use and privacy policy.] When you follow a link to another site, including Stripe’s checkout pages, that site’s own policies apply.

Children

This site isn’t directed to children under 13, and we don’t knowingly collect personal information from them. If you think a child has sent us personal information, write to us and we’ll delete it.

Your choices

You can ask us what personal information we hold about you, and ask us to correct or delete it. Write to us at info@advancedcancerfoundation.org. We may need to keep some records, such as records of gifts, when the law requires it. [CONFIRM ANY STATE PRIVACY RIGHTS THAT APPLY]

How long we keep information

We keep records of gifts for [GIFT RECORD RETENTION PERIOD] and email for [EMAIL RETENTION PERIOD], unless the law requires us to keep them longer.

Security

This site is served over HTTPS, and payments are handled on Stripe’s pages. We collect as little as we can. No system is perfectly secure, so we can’t promise that information will never be exposed.

Changes to this policy

If we change this policy, we’ll post the new version on this page and update the effective date at the top.

Contact us

Questions about privacy? Write to us at info@advancedcancerfoundation.org.