Privacy Policy

Fight for Palestine(“we”, “us”, “our”) is committed to protecting your privacy. This policy explains what personal data we collect when you use fightforpalestine.org, why we collect it, how we protect it, and the rights you have over it. We collect the minimum data needed to run a donation platform — nothing more — and we never sell or rent your personal data to anyone.

Who we are

This website is operated by Fight for Palestine. For any privacy question or request, contact us at [email protected].

What data we collect

We collect personal data only when you choose to give it to us:

• Donation details.A crypto donation doesn't require you to give us any personal details. If you contact us for a receipt or to direct your gift, we keep what you send us: typically your name, email address, the transaction ID, coin, amount and the campaign you chose. Your name is never shown publicly without your permission.
• Donation requests. When you start a crypto donation we record what you enter in the form (any name, email and amount you give, and the coin you pick), together with your IP address, browser type and the time. We use this to match your transfer, to answer receipt requests, and to detect fraud and abuse of the donation form.
• Blockchain data. Crypto donations are processed by CryptAPI (cryptapi.io), which issues a one-time deposit address for each gift and forwards the funds to our wallet; it receives the blockchain details of your transfer but not your name or email. We never collect card or bank details. Please be aware that blockchain transactions are public by design: the sending address, amount and time of a transfer can be seen by anyone, and neither we nor anyone else can remove them.
• Newsletter subscriptions. If you subscribe to updates we store your email address and the date you subscribed. Every email we send includes an unsubscribe link.
• Email delivery and engagement. For every email we send, we record whether it was delivered or bounced and, using a small image and tracked links, whether it was opened and which links were clicked. We use this only to check that our emails arrive and to improve them. You can avoid open tracking by turning off images in your email app.
• Contact, volunteer and job application forms. If you write to us, apply to volunteer or apply for a role, we store the details you submit (such as your name, email, location, availability, message and, if you choose to add one, a photo) so we can respond and manage your application. Photos are visible only to our team, and location data embedded in photo files is removed when you upload them.

Analytics

We use Google Analytics 4 to understand how the site is used — which pages and campaigns people read, and how visitors arrive — so we can improve it. Analytics uses cookies to record a randomly generated identifier; we enable IP anonymisation and do not use this data for advertising. Google processes this information on our behalf as a data processor. You can opt out via your browser settings or Google's opt-out add-on, and the site will work normally. See our Cookie Policy for the specific cookies involved.

What we deliberately do not collect

• We do not run third-party advertising or advertising trackers.
• We do not use analytics data to build advertising profiles or retarget you.
• We do not buy, sell, rent or trade personal data.
• We do not store card numbers, CVCs or full payment credentials.

How we use your data

• To process your donation and email your receipt.
• To respond to enquiries, refund requests and volunteer applications.
• To send newsletter updates you have asked for.
• To meet our legal, accounting and audit obligations.
• To detect and prevent fraud and abuse of the platform.

Where GDPR or similar laws apply, our legal bases are: performance of a contract (processing your donation), consent (newsletter emails), legal obligation (financial record-keeping), and legitimate interests (fraud prevention and running the platform securely).

Where your data is stored

Donation records, newsletter subscriptions and form submissions are stored in a secured MongoDB database with access restricted to authorised staff. Transactional emails (such as receipts) are sent through a reputable email delivery provider that processes your email address solely to deliver the message. Where data is transferred internationally, we rely on recognised safeguards such as standard contractual clauses.

How long we keep it

• Donation records — kept for as long as required by financial and tax regulations (typically six to seven years).
• Records of donation requests that never became a donation — kept for up to 12 months for fraud prevention, then deleted.
• Newsletter data — kept until you unsubscribe, after which your address is suppressed from future sends.
• Contact, volunteer and job application submissions (including any photo) — kept only as long as needed to handle your enquiry or application, then deleted or anonymised.

Your rights

Depending on where you live, you may have the right to: access a copy of your personal data; correct inaccurate data; request deletion of data we no longer need to keep; restrict or object to certain processing; receive your data in a portable format; and withdraw consent at any time (for example, by unsubscribing from emails). To exercise any of these rights, email [email protected] — we respond to verified requests within one month. You also have the right to lodge a complaint with your local data protection authority.

Cookies

We keep cookies to a minimum: a theme preference cookie, a session cookie for administrator login, plus Google Analytics to measure site usage. We do not use advertising or cross-site advertising cookies. Full details are in our Cookie Policy.

Children

Our website is not directed at children under 16 and we do not knowingly collect their personal data. If you believe a child has provided us personal data, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. Material changes will be announced on this page with a new effective date. Continued use of the site after changes take effect constitutes acceptance of the updated policy.

Contact

Questions, concerns or requests about your data: [email protected].