What we keep
Short version: no cookies, no tracking across sites, no ad network, and nothing that identifies you as a person.
When you read a page
Each page sends one small request recording three things: which page, which day, and the domain that sent you here if you arrived from a link. That is the whole record. No IP address, no cookie, no identifier, no fingerprint, nothing that joins one visit to another.
It means we can see that forty people read the Ohio page yesterday. We cannot see who they were, and we could not tell you if you asked. The counter is our own code running on our own host, so nothing about your reading leaves it.
When you buy a report
Stripe handles the payment and we never see your card. Stripe keeps what it needs to process and refund the charge, under its own policy. We use their record to confirm a purchase happened, and for nothing else.
The report you bought opens from your own browser storage. That address is kept on your device, not on a server, which is why opening it in a different browser needs a note through the contact form.
When you write to us
The contact form keeps your email and your message so a person can reply. It is not added to any list, and nothing is ever sent to you that is not a reply to what you wrote. Ask and it gets deleted.
The foundation data
Everything about foundations and grant recipients on this site comes from IRS Form 990-PF filings, which are public records that the IRS itself publishes. We did not collect it from anyone and we cannot remove a filing from the public record.
If a page shows something about your organization that is wrong, that usually means either we misread the filing or the filing itself is wrong. Both are worth fixing. Tell us which page.
Who else gets it
Nobody. Nothing here is sold, shared, or handed to an analytics company, because there is no analytics company involved. The only third party in the whole operation is Stripe, and only for the payment itself.