Privacy Policy

Last updated: July 7, 2026

This Privacy Policy explains how CauseMissions (“CauseMissions,” “we,” “us,” or “our”) collects, uses, and shares information when you use our website and the mission widgets we make available for nonprofits to embed on their own sites (together, the “Service”). By using the Service, you agree to this Policy. If you do not agree, please do not use the Service.

1. Information we collect

Information you give us

• Email and name — both optional. When you start a mission you may enter an email and/or name so your donations can be credited to you and so you can look up your impact later. You can complete a mission without providing either.
• Impact requests — if you ask to see your impact, we use the email you enter to send you a secure, time-limited link.
• Nonprofit removal requests — if you represent a nonprofit and ask to be removed from the Service, we collect the email you use to submit the request, the organization’s EIN, and any reason you provide.

Information we collect automatically

• Device and connection data — your IP address (which can indicate your approximate location), browser/user-agent string, language, timezone, and browser viewport (screen) dimensions. Because there are no accounts, we use this combination to recognize returning visitors, attribute donations correctly, and detect fraud or abuse.
• Activity data — the causes and missions you view, the outbound mission clicks you make, and the conversions (donations) that partner networks report back to us, including the amount and the cause it supports.
• Cookies — we set a small first-party cookie (cm_anon) to give each visitor a stable identifier for attribution. We do not use third-party advertising or cross-site tracking cookies on our own site. See “Cookies” below.

2. How we use information

We use the information above to:

• identify a visitor (with or without an email) so completed missions become donations to the right cause;
• attribute conversions reported by partner networks and prevent duplicate or fraudulent credit;
• show you your missions and donations when you request an impact link;
• send you the secure links you ask for (impact links, nonprofit removal confirmations);
• operate, maintain, secure, debug, and improve the Service; and
• comply with law and enforce our Terms of Use.

3. How we share information

We do not sell your email, and we do not share your email or name with advertisers. We share information only as described here:

• Mission (offer) networks — when you start a mission, we pass an internal identifier for you and basic device data (such as IP address and user-agent) to the partner network that runs the offer. This lets the network attribute your completed mission and report the conversion back to us so it can become a donation. Once you leave our site to complete an offer, you interact directly with that partner and/or the advertiser behind the offer, and their own privacy policies and terms govern the information you give them there.
• The nonprofit you support — we may share your name, email address, and general location (which we derive from your IP address), or your IP address itself, with the nonprofit cause you choose to support, so it can recognize and thank its supporters.
• Service providers — we use vendors to host the Service, send email, and run our database and infrastructure. They may process data on our behalf under contracts that limit their use of it.
• Legal and safety — we may disclose information if required by law, subpoena, or legal process, or where we believe disclosure is necessary to protect the rights, property, or safety of CauseMissions, our users, or the public, or to detect and prevent fraud.
• Business transfers — if we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.

Nonprofit (“cause”) information shown on the Service comes from public IRS data provided by a third-party nonprofit data source; we do not send your personal information to that source.

4. Cookies and tracking

We use a single first-party cookie (cm_anon) to assign each visitor a stable identifier for donation attribution and fraud prevention. Our secure links (impact and removal confirmations) carry a signed, expiring token in the URL rather than storing data in a cookie. Because we do not use advertising cookies on our own site, we do not respond to browser “Do Not Track” signals differently; however, we treat a Global Privacy Control (GPC) signal as a valid opt-out request where required by law (see “California privacy rights” below). Partner networks and advertisers you engage with after leaving our site may use their own cookies and tracking, which we do not control.

5. Data retention

We keep information for as long as needed to provide the Service, attribute and settle donations, prevent fraud and abuse, and meet legal, accounting, and reporting obligations. Because donations clear on a rolling monthly cycle and may be reversed by a partner network, we retain click, conversion, and attribution records for a reasonable period to support that process. We may retain de-identified or aggregated data indefinitely.

6. Security

We use reasonable administrative, technical, and organizational measures to protect information, including encryption in transit and signed, expiring tokens for our secure links. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Children’s privacy

The Service is intended for adults. Missions are offers from third-party networks that are generally restricted to people 18 or older. The Service is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us information, contact us at [email protected] and we will delete it.

8. California privacy rights

If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you the right to:

• know what personal information we collect, use, and disclose, and request access to it;
• request deletion of your personal information;
• request correction of inaccurate personal information;
• opt out of any “sale” or “sharing” of personal information; and
• not be discriminated against for exercising your rights.

We do not sell personal information for money. However, passing a device identifier to a mission network so your completed offer can be attributed may be considered a “sale” or “share” under California law. You can opt out by not starting a mission, by sending a Global Privacy Control (GPC) signal from your browser, or by contacting us at [email protected]. We do not knowingly sell or share the personal information of anyone under 16. To make a request, email us at the address above; we may need to verify your request using the identifiers we hold (such as your email or device data).

9. Your choices

• You can use the Service without giving us an email or name.
• You can block or delete cookies in your browser, though attribution may not work correctly without the cm_anon cookie.
• You can ask us to access or delete the information associated with your email or device by contacting us.
• Nonprofits can opt out of appearing on the Service at any time — see removal requests.

10. Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be reflected here; your continued use of the Service after an update means you accept the revised Policy.

11. Contact us

Questions about this Policy or your information? Email us at [email protected].