Privacy Policy

This website is operated by Looty Foundation Inc., a New Jersey 501(c)(3) nonprofit organization, organized in New Jersey, United States. The Internal Revenue Service exempt-organization record lists this name under subsection 501(c)(3).

Privacy requests: support@lootyfoundation.org. You may also use the Contact Us form.

Registration asks for a first name, last name, city, state, birth date, email address, and password. The password is sent to the sign-in service. The website does not keep a copy of the password. The account record includes those profile fields, an age calculated from the birth date, the date the account was created, and an account type.

A signed-in member can add a profile photo. The site converts that photo to a web image, removes location data from the file, and stores one photo for that account. A member can replace or remove it.

Submit an NPO collects the organization details on that form, including contact information and an optional logo. Contact Us collects a name, email address, phone number if you provide one, a category, and a message. Donations are entered on a Stripe page. This website does not receive the card number.

Account fields identify the member and show the account menu. The profile photo is the account image. Organization submissions are reviewed before an organization is published. Contact messages are delivered to the Looty inbox so the team can reply. Donation records confirm a completed payment and show Foundation impact. Analytics is not currently collected. Where Google’s consent message applies and you allow advertising storage there, it is available to the existing advertising verification tag. The site does not place ads.

Sign-in uses Firebase Authentication. The public dashboard can separately sign a visitor into Looty Pool. That password is sent only to Looty Pool. It is not saved on a Foundation account.

The website does not offer a button that deletes an account. Removing a profile photo deletes that photo. It does not delete the account.

A new organization stays unpublished until an administrator approves it. Approval publishes the organization. Denial does not. A logo sent with a submission is not public. If the submission is denied, that staged logo is deleted. If an administrator deletes a published organization, it can be restored for 15 days. After that window, the organization record can be removed. Donation records tied to an organization are not removed by that deletion.

Contact messages are delivered to LootyHQ. This website does not email them and does not delete them on a schedule. The visitor’s IP address is not included in the message. The site keeps a short-lived record, without the raw IP address, so the form can limit repeated submissions. That record is set to expire. An unfinished message may stay in your browser until you send or clear the form.

Choosing an amount opens a Stripe-hosted payment page. Stripe processes the payment. The site can confirm that a checkout finished and can record which page started it. It does not store card numbers. Analytics events do not include the amount, email address, or account identifier. Public impact totals are read from the donation ledger. The website does not delete those ledger records.

Google Analytics uses measurement ID G-JV53J586B1. This website does not ask for analytics consent, so Google Analytics does not load and analytics is not collected. A choice saved by an earlier version of this website is not used. Admin, account, sign-in, and registration pages are never tracked.

The Google AdSense publisher ID ca-pub-4536718410521595 is present so Google can verify the site. There are no ad placements. Before that script runs, advertising and analytics storage are set to denied. This website does not change them.

In the European Economic Area, the United Kingdom, and Switzerland, Google shows its own certified consent message for advertising. Only that message can allow advertising storage. Privacy choices, in the footer, reopens it so you can change or withdraw your choice. Elsewhere, Privacy choices opens this section, and advertising storage stays off.

Where Google’s consent message applies, Google stores your advertising choice in this browser. Firebase keeps the signed-in session. Cloudflare Turnstile may run on Contact Us and Submit an NPO. Stripe, Google, Cloudflare, Amazon Web Services, and LootyHQ process the information described above. A news article that includes a YouTube or Vimeo video loads that video from the provider.

Account profiles, news articles, contact messages, and donation records stay until someone deletes them through the relevant tool. The website does not automatically delete accounts, contact messages, news, or donation records after a set number of days.

A profile photo is deleted when that member removes it. A news article and its photos and videos are deleted when an administrator deletes the article. A logo attached to a denied organization submission is deleted. A deleted organization can be restored for 15 days. The short-lived form-limit record expires on its own. A choice stored in your browser stays until you change it or clear the browser.

Email support@lootyfoundation.org to ask about your information. The site does not provide an automatic download of an account or an automatic account-deletion button.

Looty Foundation Inc. is organized in New Jersey, United States. It has not appointed a representative in the European Union or the United Kingdom.