Fun Run Fundraiser ("we", "us") runs funrunfundraiser.com, where schools and other organizations run fun run fundraisers:
an event page, a page for each participating student, and online donations. This policy explains what information we
collect, how we use it, who we share it with, and the choices you have.
The short version: we collect only what we need to run fundraisers and process donations. We do not sell
your information, and we do not share it with anyone except the companies that help us run the service (such as Stripe for
payments and Google Analytics for understanding how the site is used), the organization you're supporting, and where the law
requires it.
1. Who this policy covers
Organizers: staff and volunteers of a school or organization who sign in to run a fundraiser.
Participants: the students (or other participants) taking part. Participants don't have accounts; their organization adds them.
Donors: anyone who gives through a fundraiser page.
Visitors: anyone browsing the site or using our contact form.
2. Information we collect
From organizers
Your name, email address and password. We store passwords only as one-way hashes, never in readable form.
If you sign in with Google, Google tells us your name, email address and an identifier for your Google account. We never see your Google password.
Your organization's details: its name, web address, contact name, email, phone number and address, logo and colors.
The fundraiser details you enter: events, goals, dates, grades, classes and page content.
The time and IP address of your most recent sign-in, to help keep accounts secure.
About participants
First and last name, grade, class, fundraising goal and the amount raised, entered by the participant's organization.
Optionally, a parent's or guardian's email address, entered by the organization. Only the organization's staff can see it; it never appears on a public page.
We don't ask for participants' own contact details, dates of birth or photos.
From donors
Your name, email address, donation amount, any message you choose to leave, whether you asked to give anonymously, and whether you chose to cover the transaction fee.
Card and other payment details are entered into a secure form provided by our payment processor, Stripe, and go directly to Stripe.
They never reach our servers, and we never see or store your full card number.
For cash or check gifts, the organization may record your name, email, amount and a note such as a check number.
From organizations setting up payments
To receive online donations, an organization creates an account with Stripe through our site. Stripe collects the information it
needs to verify the organization and pay it, such as legal and tax details, a representative's identity and bank account details,
directly on its own pages. We receive only the account's status (for example, whether it can accept payments); we don't receive or store
bank account numbers or identity documents.
From visitors
If you use our contact form: your name, email address, organization (if you give one) and your message.
Technical information your browser sends, such as IP address, browser type and pages visited, which our servers use for security and which Google Analytics uses as described below.
3. Students and children
Many participants are children. Information about participants is provided by their school or organization, not collected from the
children themselves, and we use it only to run that organization's fundraiser. We do not knowingly collect personal information
directly from children under 13, and children should not create accounts or use the contact form.
Each organization chooses how participants' names appear publicly: full name, first name and last initial, or first name only.
Participant web addresses use only a first name and last initial.
Participant pages never show contact details.
We act on behalf of the school or organization, which decides what participant information to enter. Parents and guardians can ask the school to correct or remove their child's information, or contact us directly.
4. How we use information
To provide the service: create and show fundraiser pages, track progress toward goals, and let organizers manage their events.
To process donations, send donation receipts, and give organizations the records they need (for example, donation reports).
To send email about the service: account invitations, password resets, receipts and replies to your messages.
To keep the service secure: preventing fraud and abuse, such as stolen-card testing, and protecting accounts.
To understand how the site is used and improve it.
To meet legal, tax and accounting obligations.
5. How we share information
We do not sell personal information, and we do not share it for advertising. We share information only as follows:
Stripe processes online donations and pays organizations. Stripe receives donors' payment details and the
information organizations provide when setting up payments, and handles it under
Stripe's privacy policy.
The service providers that run our infrastructure, such as the companies that host our servers and deliver our
email, which handle information only to provide those services to us.
The organization you support. When you donate, the organization running that fundraiser can see your name, email,
amount, message and whether you gave anonymously, so it can thank you and keep its records. Organizers can see the participant
information their organization entered.
When the law requires it, or to protect the rights, safety and property of our users, the public or us, for
example in response to a valid legal request or to investigate fraud.
If the business changes hands, information may transfer to the new owner, who must continue to protect it as this policy describes.
6. What appears on public pages
Fundraiser pages are public so families and friends can find and share them. They can show:
The organization's and event's names, logo, description, goal and amount raised.
Participant names in the format the organization chose, their goal and the amount they've raised, and class standings.
Donors' names and messages alongside their donations, unless the donor chose to give anonymously, in which case their name is not shown. Donation amounts may also appear.
Please don't include anything in a donation message that you wouldn't want shown publicly.
7. Cookies and analytics
Essential cookies keep organizers signed in, protect forms against forgery, and carry short messages between pages. The site doesn't work properly without them.
Analytics cookies are set by Google Analytics to count visits and see how pages are used. You can block them in your
browser settings, or use Google's opt-out browser add-on.
Stripe's payment form sets its own cookies to process payments securely and prevent fraud.
We don't use advertising cookies.
8. How long we keep information
Organizer accounts and organization information are kept while the account is active, and deleted on request when no longer needed.
Participant information is kept so organizations can run future events and see past results, until the organization removes it or asks us to delete it.
Donation records are kept for as long as needed for accounting, tax and legal purposes.
Contact form messages are kept only as long as needed to respond and follow up.
9. Security
The site is served over encrypted connections (HTTPS). Passwords are stored as one-way hashes, payment details go straight to Stripe,
and organizers see only their own organization's information, according to their role. No system is perfectly secure, but we work to
protect your information and will notify affected users of a breach where the law requires.
10. Your choices and rights
Access, correct or delete: you can ask for a copy of the personal information we hold about you, or ask us to correct or delete it. Organizers can update much of their information in the portal.
Give anonymously: tick "Don't show my name on the page" when donating.
Analytics: block analytics cookies as described above.
State privacy rights: depending on where you live (for example, California), you may have rights to know, access,
correct and delete your personal information, and to opt out of its sale or sharing for advertising. We don't sell or share it for
advertising, so there is nothing to opt out of. We won't treat you differently for exercising your rights.
To make a request, contact us. We may need to confirm your identity first. Where we
hold information on behalf of a school or organization, such as participant records, we may involve that organization.
Our service is run from, and stores information in, the United States. If you use it from elsewhere, your information will be
handled in the United States.
11. Changes to this policy
We may update this policy as the service changes. We'll post the new version here with a new effective date, and for significant
changes we'll tell organizers by email or in the portal.
12. Contact us
Questions or requests about privacy? Send us a message through our contact page.