Privacy
Your privacy, in plain language.
We collect as little as possible — and we never touch your bank or card details, because we don't accept them.
Last updated: October 2026
What we collect
If you accept analytics cookies, we use Google Analytics to see anonymized, aggregate usage (pages visited, country, device). We anonymize IP addresses. If you decline, no analytics cookies are set. Forms you submit (like Contact) are used only to reply to you. If you subscribe to our newsletter, we store your email solely to send those updates, and you can unsubscribe at any time. We also use Plausible, a privacy-focused analytics tool we host on our own server. It sets no cookies, stores no personal data and never tracks you across sites, so it runs without a consent prompt; it records only aggregate counts such as pages viewed, referring site and country.
Donations and payment data
Donations are processed on-chain through NOWPayments. We never receive or store credit card numbers, IBANs, or bank details. An optional name and email you provide with a gift are used only for your receipt. Confirmed donations appear on our public ledger with the date, amount, coin, chosen program and blockchain transaction ID — information that is already public on-chain. Names and emails are never published.
Who processes your payment, and where
Our checkout is operated by FD Transfers LLC, the company behind NOWPayments, registered in Saint Vincent and the Grenadines. When you start a donation we send it only the amount, a random order reference and the program you chose — never your name or email. From the moment the checkout opens you are on its website, so it receives your IP address, country and browser details directly, under its own privacy policy. Saint Vincent and the Grenadines has no adequacy decision from the European Commission, meaning it has not been certified as giving personal data the protection the EU requires. Its terms also state that its services are not rendered to residents or citizens of the European Union, the United Kingdom, the United States, the United Arab Emirates or Russia, and that it does not become subject to those jurisdictions' data protection or consumer rules simply because someone there uses it. You should know that before you pay, wherever you live.
How long we keep it, and who else sees it
We clear the optional name and email attached to a donation after 180 days: the donation record itself stays, because it is our accounting trail and the source of the public ledger, but the personal part of it is wiped. The stored copy of a message sent through the contact form is deleted after a year. Newsletter addresses stay until you unsubscribe, which deletes the record rather than flagging it. One thing you should know about who sees a gift: when a donation confirms, an internal alert containing the name and email you gave is sent to a private Telegram chat used by the people who run TraceGood — so Telegram processes that data too. And some copies those sweeps cannot reach: a contact message is also emailed to our own inbox, the Telegram alert cannot be deleted by a scheduled job, and the nightly backup — kept about 30 days on the server, and also sent to a mailbox we control — holds whatever the records said at the moment it was taken. So a cleared record survives in the backups for roughly a month, and in that mailbox until we delete it there.
Cookies
We use two preference cookies — one to remember your consent choice and one to remember the language you picked, so we stop guessing it, and — only with your consent — Google Analytics cookies and, on some information pages, Google AdSense cookies used to serve and measure ads. We never show ads on the donate, coin, campaign or transparency pages. You can opt out of personalised ads in Google’s Ads Settings, and withdraw consent at any time by clearing your browser storage for this site. Our Plausible analytics sets no cookies at all.
Your rights
You can ask what we hold about you, have it corrected, or have it erased: write to hello@tracegood.org from the address you used, and we will action it and tell you exactly what was removed. A few honest limits. Erasure clears your name and email from our records, but the nightly backups described above take about a month to age out. And a donation's blockchain transaction cannot be erased by anyone, including us — it was public the moment it was made, and no charity can unwrite a chain. What we can keep off the public ledger, and do, is any link between that transaction and your name. The copies named in the section above — the message in our own inbox and that Telegram alert — are not reached automatically either; tell us and we will delete them by hand.
Contact
Questions about privacy? Reach us at hello@tracegood.org.