Your privacy.

What we collect

• Volunteer form. It runs on this site. It asks whether you're 18 or older and whether you live in the United States (if not, the form stops there), then your name, email, state, the kind of help you'd like to give, your experience, how many hours a week you could give, and how you heard about us. If you choose to share them, it also asks for a link to your work, which tools you know, and anything else you'd like us to know. You also choose a password so you can log in and see where your sign-up stands.
• Project request form. It also runs on this site. It asks for your group's name, what kind of group you are, your city and state, what you need, your current website if you have one, any date you're working toward, a note about your group and what you'd like built, and your name, email and a password for your account. Before you submit, you confirm that your group is based in the United States and that you understand our help is free and run by volunteers, and the form links to our Terms of Use.
• Support and contact. There isn't a separate contact form on the site today. If you email hello@digitalfeather.org or support@digitalfeather.org, we get your address and your message.
• This site. We don't use advertising or social-media trackers, we don't use tracking pixels, and our own pages set no cookies. Because Cloudflare protects the site from bots, it may place one short-lived security cookie called __cf_bm in your browser, for example when you sign in or use a form. It helps Cloudflare tell people from automated traffic, it expires after 30 minutes without activity, it isn't used for advertising, and we can't read it. The only analytics we use is Cloudflare's cookieless Web Analytics, which counts visits without cookies and isn't used for ads. Our fonts are served from our own site. Our web host, Cloudflare, also keeps standard server logs (such as IP address, browser and page visited) to keep the site running and secure. When you reach the last step of the volunteer or project request form (or ask for a sign-in link), Cloudflare Turnstile runs a quick check to block spam, and Cloudflare sees your browser and connection details for that check. The emails we send have no tracking pixels and no tracked links. If we ever added a tracker, it would only run after you consent.
• Accounts and logging in. Accounts and sign-in are handled by Supabase, our database provider, which stores sign-ups, requests and project records on servers in the United States. It uses your email and password (passwords are stored scrambled, so we can't read them). When you pick a password, our server checks it against the Have I Been Pwned list of leaked passwords; only the first five characters of a one-way scramble of it are sent, never the password. We email you a link from team@digitalfeather.org (sent through our Google Workspace account) to confirm your address, and the same kind of link if you forget your password. When you log in, a sign-in token is kept in your browser's local storage (not in a cookie) so you stay logged in. The Log out button ends your session in this browser and removes that token. When you agree to the Terms and Privacy Policy at sign-up, we save the time and the version you agreed to. Volunteers see only their own sign-up and the open projects they can join (a short description, with no contact details), partner groups see only their own project, and organizers see all sign-ups and projects. If you volunteer with us, we also use Google Meet for build meetings and a DigitalFeather Google Chat space for members.
• Volunteer hours and certificates. If you volunteer, you can start and stop a timer on your dashboard. We save when each session started and ended, how long it lasted, which project it was for, and a short note if you add one. Organizers can fix an entry if it's wrong. When a project is marked complete, you can download a certificate that shows your name, the project, your hours, your role and a certificate number, and we keep a record of each certificate issued.

Why we collect it, and who sees it

We use this information only to reply to you, to review volunteer sign-ups and project requests, to match people with work, and to work with you on a project. Only the DigitalFeather volunteer team sees it, and only as needed to do that work.

We also use third-party AI services to help sort and draft replies to emails and requests, keep our project board up to date, and help with our website and outreach. They see the information in those emails, requests and records while they do that work.

Where it's kept

Sign-ups, project requests, accounts, volunteer hours and certificate records are kept with Supabase, our database provider, on servers in the United States. Form submissions pass through a Cloudflare Worker on their way to the database, and a copy of each sign-up or request is emailed to our team inbox. Emails and working documents are kept in DigitalFeather's Google Workspace.

We don't sell or share it

We don't sell your information, and we don't share it for advertising. We share it only with the DigitalFeather volunteers who need it, and with the services that run the site and forms (Supabase, Google and Cloudflare) and the AI tools named above.

How long we keep it

We keep form answers and emails for one year, then delete them. If you'd like yours gone sooner, just ask and we'll delete them. Cloudflare keeps its own server logs as part of hosting; we don't keep a separate copy. Account records (name, email, role, status and signup date) are kept while your account is open and deleted on request or when the account is closed, except a short note we may need to keep, such as that an account was suspended.

How to see, fix or delete it

Wherever you live, you can ask to see, fix or delete what you sent us. Email support@digitalfeather.org. Please don't send passwords or account logins by email.

Age requirement

You must be 18 or older to volunteer or send us a request. If someone under 18 sends us information, email support@digitalfeather.org and we'll delete it.

Changes to this page

If this page changes, we'll post the new version here with a new date. We don't track you across sites, so Do Not Track signals don't change anything here.