Privacy & Data
Privacy Policy
Last updated: November 2026
Shonaton Foundation ("we", "our") respects your privacy. This policy explains what data we collect, how we use it, how donations and membership fees work, and how your member profile is protected.
1. Information we collect
When you apply to the Free-Work Program, we collect the information you submit, such as your name, email, optional phone, city, country, skill area, preferred platform, portfolio/social links and bio. If you donate or pay a membership fee through the current manual process, we store the details you submit to verify the payment and issue a receipt. Never send us your PIN, OTP, password, card number or crypto private key.
2. First-party visitor analytics
For public pages only, we count page views and approximate unique browser sessions, show country-level totals and estimate how many sessions were active in the last five minutes. The country code comes from Cloudflare's country header; if it is unavailable the country is recorded as Unknown. We do not store raw IP addresses, full user-agent strings, page query strings, or analytics for admin/member pages. The pseudonymous session identifier is an HMAC of the site's existing session ID. Analytics data is kept for up to 90 days and is visible only to authorized administrators. This is an estimate of browser sessions, not a verified count of people.
Analytics respects the browser's Do Not Track and Global Privacy Control signals. You may also opt out of analytics at any time. If you previously opted out, you can re-enable it. Country-based language selection may use Cloudflare's country header; if that header is unavailable, the site may request an IP-based country lookup from ipwho.is. That lookup is used for language selection only, not stored in the analytics records.
3. How we use information
Application data is used to review applications, contact applicants and manage membership. Donation records are used to verify payments, issue receipts and publish transparent totals. We never sell, rent or share personal data with third parties for marketing. If a supporter explicitly consents to public recognition, the public display is limited to their name and country; individual amounts and private payment/contact details are not shown.
4. Donations and membership fees
Shonaton is a non-profit. Donations and membership fees are used first for platform and server costs (hosting, domain, SSL, email, storage and security); remaining funds support charity and community projects such as education, health and community support. Publicly shared work and costs appear on the Transparency page. The current payment process is manual: you send money to an official account listed on the donate page and submit a transaction reference for verification. We do not ask for or store your PIN, OTP, password, card number or crypto private key. If a membership fee applies, the admin marks it Paid or Free after verification.
5. Cookies and advertising
The site uses a necessary session cookie and a language preference cookie. If you opt out of analytics, a small preference cookie remembers that choice; analytics also respects Do Not Track and Global Privacy Control. If the site owner enables Google AdSense, Google may use cookies to serve ads; you can manage ad personalization in Google Ads Settings. The site does not sell data or use advertising trackers by default.
6. Member profiles and AI
If you join the Free-Work Program you receive a private member ID. Your member page shows your profile and application details only after member login. Member pages are marked noindex and are disallowed in robots.txt. Access is rate-limited, and the member ID is random and unguessable. We do not use member profile data to train AI models and do not permit AI crawlers to access member pages. Do not share your member ID with anyone.
7. Storage, retention and your choices
Live site data is stored in the site's MySQL database. We keep application, membership and donation records for accounting, transparency and support. Visitor analytics is automatically pruned after 90 days. You may ask us to access, correct or delete your personal information by emailing [email protected].
8. External links
Our pages may link to external sites. We are not responsible for their privacy practices. External services used for optional language lookup or advertising have their own policies.
9. Contact
Questions about this policy or your data? Email [email protected] and we aim to respond within 2 working days.
Shonaton Ecosystem