Privacy policy

We collect only what is needed to provide the service:

• Account data: your email address and a hashed password.
• Profile data: a display name you choose.
• Donation records: the data you enter — charity name, amount, date, Gift Aid status, payment method, notes, and any other optional fields.

We do not collect financial payment data (no card numbers). We do not use advertising cookies or tracking pixels. We use a cookieless analytics service that collects no personally identifiable information — to understand how pages are used. See ‘Analytics’ below.

All personal data is stored in the UK. The database and authentication services run on UK-hosted infrastructure in London. Application server functions also run in London. Static files (JavaScript, CSS) are served from a global CDN — these contain no personal data.

We use the following third-party services to operate Charity Recorder. Each processes data only to provide the service.

• Database and authentication provider — stores your account and donation data. UK-hosted (London).
• Application hosting provider — serves the application. Server functions run in London.
• Email delivery provider — sends transactional emails (verification, password reset, invitations). EU-hosted. Your email address is used only to send these messages.
• Analytics provider— cookieless page-view analytics. Collects no personally identifiable information and sets no cookies. See ‘Analytics’ below.

We do not sell your data to any third party.

Your data is used solely to:

• Authenticate you and secure your account.
• Store and display your donation records.
• Send transactional emails you have requested (verification, reset, invites).
• Respond to your support queries.

Your data is retained while your account is active. If you request account deletion, data is held for 30 days before permanent removal. You may export all your data at any time using the CSV export in Settings.

You have the right to:

• Access your data — export it as a CSV from Settings at any time.
• Rectify your data — edit any donation record or your profile in the app.
• Erase your data — submit a deletion request from Settings. Your account and all associated data will be permanently deleted after 30 days.
• Object or restrict processing — contact us and we will respond within 30 days.

Charity Recorder uses one session cookie to keep you logged in. This cookie is necessary for the service to work. It is httpOnly and not accessible to JavaScript. No advertising or tracking cookies are used.

We use a cookieless analytics service to understand how pages are used — for example, which pages are most visited and what types of devices or countries visitors come from.

This service is cookieless and privacy-preserving:

• No cookies are set in your browser.
• No personally identifiable information is collected.
• You are not tracked across websites.
• Approximate country is derived from your IP address at the time of the request; the IP address itself is not stored.

Analytics data (page views, device type, browser, OS, country) is processed by our analytics provider and subject to their data protection policy. Contact us if you would like details about the specific service we use.

If we make material changes, we will notify you by email. The date at the top of this page reflects when the policy was last updated.

Questions or requests relating to your personal data? Email us at support@charityrecorder.com.

• Version 0.1 — 7 June 2026: Initial beta version (private trial).