Privacy

You do not need an account to browse the site, and browsing asks for nothing. There is no newsletter. Covering an item with money does not ask for an account or a phone: the transfer is the proof. Signing up to bring a good asks for a name and a phone number or an email. With the email an account is created; when you come back, one click reserves the item. With the phone number, with no account, the item is reserved in your name until the person who coordinates confirms.

Payments are not processed on the site: you make the transfer from your bank, and that operation is between your bank and ours.

We do not use advertising cookies, social-media pixels or services that build a profile of you.

Creating an account is optional and serves one purpose: to be able to say "I am bringing this one" and have it written down as yours, so you can see it and cancel it. Confirming the email is not proof that the donation is real: it is so we can write to you.

From you we keep your email, the language you prefer to be written in, and a name and a photo if there are any: you write them, or the network you signed in with brings them if those fields were still empty here. Your password is not kept: what is kept is an encrypted result that cannot be turned back into your password. If that address already had an account, signing in with Google (or another network) uses that one: a second account is not created.

The name shown is the one you choose —or the one the network suggests, which you can change. It is never derived from your email. If there is none, there is none.

The photo, if you upload one or if the network brought one, identifies you while you are signed in. It can appear in the catalog if you chose to appear; it does not appear in Who helped, and it is not shared.

Your email is not published on any page, is not shared with anyone, and is not used to send you anything other than messages about your account or about something you offered to bring.

The service that runs the accounts also records when you sign in, with the IP address and the browser you sign in from. It is there to detect attempts to get into other people's accounts. The family does not use that information for anything else.

If the site offers signing in with a network (Google, for example), that network learns that you used this site: that is the trade-off of signing in without inventing a password. We receive your email, and if you did not already have a name or photo here, we copy those from that network into your profile. The wall stays anonymous until you choose to appear. The photo can appear in the catalog if you chose to appear; it does not appear in Who helped, and it does not leave the site.

Your account is kept until you delete it. You can delete it yourself from your account, without asking us and without giving reasons: your email, your name and your photo are deleted right away.

We count visits and a few use events: how many people come, from what kind of link they arrive, how many times a bank detail is copied, how many times the page is shared and from which country it is opened.

Those measurements are aggregated and cannot be tied to a person. We do not keep your full IP address, or an identifier that follows you between visits.

They serve one thing: to know whether the page is understood and whether the path to help works.

If you give by transfer, your bank tells ours the details of the operation. That information stays in the internal accounting record and is used to reconcile the totals.

The name of the person who gave and the individual amount are not published.

The internal record is kept while the campaign is open and for as long as the accounting requires.

Invoices and receipts for the work are stored in private storage. They are not public because they often hold third-party data, such as a supplier's name and address.

The file can be reviewed by a person with an auditor role, with a temporary access.

Signing up to bring a material with an account stores that account's email, how much you committed to bring and until when that hold is good. It does not ask for a contact name or an address: the account already says who you are. None of that is published. How you appear is chosen in your account.

If you leave a phone number without creating an account, we keep your name and that number, and the item stays reserved. The number is not published. The contact name is not either: it is not the name on the wall. If the person who coordinates confirms they got in touch and you agreed to appear, that screen is where the display name and, if you want, a private note are recorded. If they do not confirm, the hold is released.

The name you want shown, on the account path, is optional, and the default is not to appear. It is chosen in your account, not when you sign up. If you write it and uncheck that you prefer not to appear, it is published on Who helped only when the material arrives.

If you delete the account, your email, your name, your photo, your phone and the pickup address are deleted. Holds that were already fulfilled stay as a fact about the work, without identifying you.

The emails we send you are about your account or a hold of yours: that we received it, that it was written down, that expiry is near, that it arrived, that a confirmation was undone, or that it was cancelled. There is no list and no broadcast.

If this policy changes, the date in the heading changes and the change is recorded in the public history of the site's code.

For questions about this policy, the published email is justomiguelvargas@gmail.com.