Privacy Policy
What we collect, how information is used and shared, and the choices available to you.
1. Who this policy covers
This policy explains how Give-N-Grow, operating from Florida, United States, handles information through its website and account features. Privacy requests can be sent to anonyumouzappz@gmail.com. This policy covers our processing; external fundraising, authentication, map, and payment services have their own policies.
2. Information you provide
Depending on the features you use, we collect:
- Account information: email, sign-in provider identifiers, display name, username, photo, verification/account status, and policy-acceptance and adult-age-confirmation records. Firebase Authentication handles passwords and sign-in; do not send passwords to Support.
- Profile and preference information: biography, broad location, interests, causes, visibility settings, saved collections, followed campaigns, and notification choices.
- Submitted content: fundraising stories, external URLs, categories, goals/currencies, cover images, broad/ZIP-derived locations, assistance requests, and assistance-offer messages.
- Service and safety records: Support messages, reports, blocks, moderation reasons, verification activity, administrative audit records, and GP awards/redemptions. Private self-reported contribution history includes the campaign, user-entered amount, currency and date; it is not proof of payment. Referral codes, account connections, hashed reward identity checks and review outcomes help prevent duplicate or abusive awards. Public recognition is optional, and self-reports are never published as verified donations.
- When applicable, business/workspace details, authorized staff roles, sponsorships, provider customer/payment identifiers, subscription status, invoices, transaction amounts/currencies, and reconciliation/refund records. Stripe handles payment credentials; our forms do not collect full card numbers.
3. Technical information and browser storage
Hosting, security, authentication, and infrastructure services process technical information such as network/IP information, request times, browser/device details, authentication tokens, errors, and security signals. Firebase App Check with its configured Google reCAPTCHA Enterprise/Fraud Defense provider helps assess legitimate requests. Selected sensitive actions also use anti-bot challenges and rate limits.
Browser storage supports sign-in persistence, appearance/sidebar preferences, and the versioned first-visit donation notice. That browser acknowledgment is separate from the server’s Terms acceptance record. Clearing storage can sign you out or reset preferences and notices. Third-party security and authentication services can use their own storage under their policies.
We record limited campaign/sponsorship engagement, including page-view and outbound-link counts and short-lived deduplication records. This supports activity summaries and does not prove that a donation occurred. We do not represent outbound clicks as verified donations.
4. How we use information
We use information to:
- Authenticate accounts, reserve usernames, provide onboarding/profiles, and remember settings.
- Publish approved campaigns, provide discovery and approximate map visibility, and coordinate community assistance.
- Respond to reports and Support, investigate abuse, enforce rules, and protect people and service availability.
- Operate rewards, membership permissions, workspaces, activity summaries, and any enabled billing features.
- Maintain operational records, diagnose errors, respond to valid requests, meet applicable obligations, and resolve disputes.
5. Public content and restricted records
Approved campaign stories and their public details are visible to visitors and may be indexed by search engines, shared on social platforms, and included in sharing previews. Discovery uses broad locations. Opted-in map listings use approximate locations rather than private residential addresses. ZIP lookups resolve a postal code to a broad area. Profile visibility follows your discoverability settings and the feature’s access controls.
Account email/private settings, Support conversations, protected assistance offers, and billing records are not intended as public listings. Relevant participants and authorized administrators can access records needed for the feature. Organization members can access workspace information according to their role. A limited read-only endpoint also exposes approved public campaign details for search/social crawlers.
Do not put information you want kept private in a public story or image. Others can copy, cache, or reshare public material. Removal from Give-N-Grow cannot automatically remove copies held by search engines, social networks, fundraising providers, or other people.
7. Advertising and AdSense
Advertising is currently disabled. AdSense verification preparation does not itself activate placements. New paid memberships and platform-support payments are also Coming soon. We do not sell personal information through a data-broker marketplace or configure the current disabled ad placement to target people using campaign stories, account emails, or assistance details.
If Google AdSense is enabled later, third-party vendors, including Google, may use cookies and similar technologies to serve ads based on earlier visits to this or other websites. Google’s advertising cookies can allow it and its partners to show ads based on visits across the Internet. Applicable consent choices, advertising settings, and provider policies govern that use. Relevant notices and choices must be available before activation.
Manage Google personalized-advertising preferences through My Ad Center or use available industry opt-out tools. Depending on local law, advertising disclosures can constitute sale, sharing, or targeted advertising. We will assess and provide required choices before activating such processing. Disabled AdSense code is not a claim of universal legal compliance.
8. Retention and removal
Information is retained for the purposes described here while needed to provide the service, address safety issues, maintain accurate transactions, meet applicable obligations, or resolve disputes. Some security/deduplication records carry expiry settings; those settings do not promise immediate deletion from every system. Retention depends on record type, purpose, applicable requirements, and backup practices, rather than one universal period.
Removing a campaign withdraws it from public discovery without automatically erasing all related records. Account-closure and deletion requests are reviewed through Support or email. Limited records may be retained where permitted or required for security, fraud prevention, accounting, legal obligations, or disputes. Backups and third-party caches can persist after changes. Contact external providers separately about information they control.
9. Your choices and privacy requests
You can edit available profile information, adjust discoverability/map settings, update preferences, and remove your campaigns using account controls. Use Support or email to request access, correction, a copy of your data, account closure, or deletion. You do not need to create an account to email a privacy request. Include enough information to identify the account or content, but do not send passwords or full identity documents unless a secure verification process is arranged.
We may need to verify identity or authority before acting. Depending on your location and applicable law, you may have additional rights to object, restrict processing, withdraw consent, appeal a decision, or complain to a competent authority. Requests are assessed under the law that applies, with any applicable exception explained. We do not condition ordinary service on waiving a right that law protects.
Where law requires a particular response period or appeal process, qualifying requests will be handled accordingly. We do not promise a shorter universal response or an automatic deletion/export feature that is not available in the product.
10. Adults-only service and security
Accounts are for adults age 18 or older. Ordinary registration uses an adult-age confirmation rather than collecting a date of birth. Do not create an account for a child. Contact us if you believe a child has provided account information or someone has posted a child’s private information without appropriate permission, so we can investigate and take appropriate action.
Authentication, access restrictions, server authorization, and security controls help protect information. No online system is completely secure, and this policy does not guarantee against every unauthorized access or loss. Report suspected account compromise or exposure promptly and avoid sharing unnecessary sensitive information.
11. Updates and contact
This policy can change as practices, providers, or features change. Its updated date and version appear on this page. Material changes will be communicated as appropriate before they apply, and consent sought where required. Contact Give-N-Grow, Florida, United States, at anonyumouzappz@gmail.com with questions.