How this site uses data.

Information you provide

When you submit a newsletter, partner, family, or volunteer form, we store your email, optional name, form type, time, page version, campaign information, and technical quality signals used to prevent abuse and understand where the submission came from. A message you write with a family, partner, or volunteer request is stored with the request, delivered to the GameChanger staff who respond, and recorded in our donor relationship system so the people helping you keep the context you shared. That record is kept for as long as the relationship lasts. Messages are never published and are never shared outside the staff who help.

What you include in a message is up to you; families and other visitors may share whatever they choose. Anything you write is handled the same way: stored with the request, delivered to the GameChanger staff who respond, and kept in our donor relationship system alongside your contact information for as long as the relationship lasts.

When our advertising measurement script is enabled and you have not turned analytics off, that third-party script runs on form pages and can read what is on the page, including text you type into a form, before you submit it. Turning analytics off on this page stops that script from loading. This applies to the family form as well as the newsletter, partner, and volunteer forms.

Information collected when you browse

Cloudflare processes request information such as IP address, browser details, requested path, and timing to deliver and protect the site. Our lead forms use a salted hash of the connecting IP for short-term rate limiting. They do not store the raw IP in the lead database.

Google Analytics receives a reduced page path, the referring site origin, campaign fields, ad click identifiers when present, and interaction events such as page views, button use, donation steps, confirmed purchases, and refunds. Google Analytics can use analytics cookies or similar browser storage while analytics are allowed. We do not send form names, email addresses, or free-text messages to Google Analytics.

First-touch campaign information and a random donation-journey ID are kept for the browser session. A prior-donor marker may remain in this browser so the site can measure returning donor behavior. That marker does not currently have an automatic expiry.

Donations and public anonymity

Stripe handles card, bank, Apple Pay, and Google Pay details. GameChanger receives the donor and transaction information needed to record the gift, reconcile payment and subscription status, send a receipt when an email is provided, handle refunds or disputes, and maintain financial records. Full card and bank credentials do not enter GameChanger's donation database.

Selecting “Make my gift anonymous” prevents public display and removes the donor's name and email from the named gift and person ledger. It does not make the payment anonymous to Stripe or prevent the operational processing needed for the transaction and receipt.

Our analytics records use transaction and browser identifiers to reconcile website behavior with a settled gift. Command, our internal reporting surface, publishes aggregate counts rather than a named visitor list.

Service providers

• Cloudflare provides DNS, hosting, site functions, database storage, bot checks, rate limiting, and edge security.
• Google provides Google Analytics and the hosted fonts used by the site.
• Reddit provides advertising conversion measurement and campaign optimization. Reddit's measurement script runs directly on our pages, including this one and our contact and family forms, unless you turn analytics off. Reddit's script can read page content, form fields, and the addresses of pages you visit, and it records a page-view event on every page. Reddit sets its own first-party browser storage. Our server payload additionally includes a one-way hashed donor email address and a record identifier alongside the Reddit-generated click ID, hashed conversion ID, event time, donation value and currency, and event type. As with other internet services, Reddit receives your IP address and browser details whenever your browser contacts it.
• Stripe processes payments, subscriptions, wallets, fraud checks, and payment status.
• Resend delivers donation receipts and processes delivery, bounce, and complaint status.

We record campaign parameters and ad click identifiers to understand which outreach brings visits and gifts. Reddit Pixel and server conversion support are active, behind separate browser and server switches we can turn off at any time. Reddit's script runs in the page itself on every page of this site, sends a page-view event, and can read page content and form fields. It also reports a successfully created checkout session (AddToCart, because Reddit has no standard begin-checkout event) and a Stripe-confirmed settled initial gift (Purchase). Subscription renewals are not reported as new ad conversions. This is a deliberate change from an earlier configuration in which the script was isolated in a blank frame that could not read page content; that isolation has been removed to give Reddit the data its campaign optimization uses. Turning analytics off still prevents Reddit's script from loading at all. We do not currently run Meta or TikTok pixels.

Current retention behavior

• Google Analytics event and user data retention is set to 14 months.
• Lead rate-limit IP hashes become eligible for deletion after one hour.
• Free-text messages on family, partner, and volunteer leads become eligible for removal from the lead database after 30 days. The copy recorded in our donor relationship system is retained indefinitely to serve the relationship.
• Internal staff notification queue records that carry a message become eligible for minimization after 90 days.
• Flagged or quarantined lead details become eligible for minimization after 30 days.
• Vendor ad click identifiers on lead records become eligible for removal after 14 months. Donation records follow their separate operational and financial retention needs.
• Sent or suppressed Google Analytics outbox bodies are minimized after 90 days.
• If Reddit server conversion delivery is activated, sent or terminal delivery bodies are minimized after 90 days. Rows older than Reddit's two-day Pixel/API deduplication window are not sent.

Lead cleanup currently runs during later form activity, not on a guaranteed clock. If no later form is submitted, or a cleanup attempt fails, eligible data can remain longer until a successful form-time or operator sweep. These are configured minimum-age targets, not guaranteed deletion deadlines.

Donation, accounting, verified contact, receipt, and provider audit records may be retained longer. The current system does not yet apply one deletion schedule to all of those operational records.

Your other choices

Name and message fields marked optional can be left blank. GameChanger follows up using the contact information you provide, and anything you write in a message is read and kept only by the staff who help. Donation newsletter enrollment is an unchecked choice. You can choose public anonymity for a gift. You can also decline to submit a form or payment.

The current website form does not provide a self-service unsubscribe control. For a question about this page or information you submitted, email info@gamechangercharity.org.