How this site uses data.

Information you provide

When you submit a newsletter, partner, family, or volunteer form, we store your email, optional name, form type, time, page version, campaign information, and technical quality signals used to prevent abuse and understand where the submission came from. Optional messages are stored for partner and volunteer requests. Family-form free text is discarded before the lead is written to our database.

Please do not send medical records, diagnosis details, or other sensitive health information through a website form. A family request still gives us the contact information needed to follow up without retaining its free-text message.

Information collected when you browse

Cloudflare processes request information such as IP address, browser details, requested path, and timing to deliver and protect the site. Our lead forms use a salted hash of the connecting IP for short-term rate limiting. They do not store the raw IP in the lead database.

Google Analytics receives a reduced page path, the referring site origin, campaign fields, ad click identifiers when present, and interaction events such as page views, button use, donation steps, confirmed purchases, and refunds. Google Analytics can use analytics cookies or similar browser storage while analytics are allowed. We do not send form names, email addresses, or free-text messages to Google Analytics.

First-touch campaign information and a random donation-journey ID are kept for the browser session. A prior-donor marker may remain in this browser so the site can measure returning donor behavior. That marker does not currently have an automatic expiry.

Donations and public anonymity

Stripe handles card, bank, Apple Pay, and Google Pay details. GameChanger receives the donor and transaction information needed to record the gift, reconcile payment and subscription status, send a receipt when an email is provided, handle refunds or disputes, and maintain financial records. Full card and bank credentials do not enter GameChanger's donation database.

Selecting “Make my gift anonymous” prevents public display and removes the donor's name and email from the named gift and person ledger. It does not make the payment anonymous to Stripe or prevent the operational processing needed for the transaction and receipt.

Our analytics records use transaction and browser identifiers to reconcile website behavior with a settled gift. Command, our internal reporting surface, publishes aggregate counts rather than a named visitor list.

Service providers

• Cloudflare provides DNS, hosting, site functions, database storage, bot checks, rate limiting, and edge security.
• Google provides Google Analytics and the hosted fonts used by the site.
• Reddit provides optional advertising conversion measurement. The code path is currently disabled. If activated, GameChanger's server payload is limited to a Reddit-generated click ID, a one-way hashed conversion ID derived from a provider record identifier, event time, donation value and currency, one of two event types, and a canonical GameChanger URL. GameChanger does not add donor name, email, phone number, address, form text, IP address, user agent, or health-related page content to that payload. As with other internet services, Reddit can receive connection information when a browser or server contacts it.
• Stripe processes payments, subscriptions, wallets, fraud checks, and payment status.
• Resend delivers donation receipts and processes delivery, bounce, and complaint status.

We record campaign parameters and ad click identifiers to understand which outreach brings visits and gifts. Reddit Pixel and server conversion support are built but remain off until separate browser and server switches are deliberately enabled. If enabled, the only browser events are a successfully created checkout session (AddToCart, because Reddit has no standard begin-checkout event) and a Stripe-confirmed settled initial gift (Purchase). Subscription renewals are not reported as new ad conversions. The Reddit script runs in a blank donation-domain frame that cannot read this page's forms or content, does not send a page-view event, and has first-party Reddit cookies disabled. We do not currently run Meta or TikTok pixels.

Current retention behavior

• Google Analytics event and user data retention is set to 14 months.
• Lead rate-limit IP hashes become eligible for deletion after one hour.
• Family-form free text is not retained in the lead database.
• Flagged or quarantined lead details become eligible for minimization after 30 days.
• Vendor ad click identifiers on lead records become eligible for removal after 14 months. Donation records follow their separate operational and financial retention needs.
• Sent or suppressed Google Analytics outbox bodies are minimized after 90 days.
• If Reddit server conversion delivery is activated, sent or terminal delivery bodies are minimized after 90 days. Rows older than Reddit's two-day Pixel/API deduplication window are not sent.

Lead cleanup currently runs during later form activity, not on a guaranteed clock. If no later form is submitted, or a cleanup attempt fails, eligible data can remain longer until a successful form-time or operator sweep. These are configured minimum-age targets, not guaranteed deletion deadlines.

Donation, accounting, verified contact, receipt, and provider audit records may be retained longer. The current system does not yet apply one deletion schedule to all of those operational records.

Your other choices

Name and message fields marked optional can be left blank. Family-form free text is not retained; GameChanger follows up using the contact information you provide. Donation newsletter enrollment is an unchecked choice. You can choose public anonymity for a gift. You can also decline to submit a form or payment.

The current website form does not provide a self-service unsubscribe control. For a question about this page or information you submitted, email info@gamechangercharity.org.