Privacy Policy

Account information: When you create an account, we collect your email address, phone number, and display name. If you sign in with Google, we receive your name and email from your Google account.

Donation data: When you make a donation, we collect payment details (processed by Stripe — we do not store your card number), donation amount, and currency.

Game data: When you play Sankofa Games, we collect your scores, difficulty settings, and gameplay statistics for leaderboards.

Analytics: We use PostHog in cookieless mode (no cookies, no persistent identifiers). We collect anonymous, session-level usage data such as pages visited, games played, and device type. This data cannot be linked to you across sessions.

• To provide and maintain our services
• To process donations and issue tax receipts
• To display leaderboards and game scores
• To manage membership subscriptions
• To send transactional emails (donation confirmations, login links)
• To improve our platform through anonymous analytics

Your data is stored on Supabase (hosted in the EU) and Vercel. Payment processing is handled by Stripe, which is PCI DSS compliant. We do not store credit card numbers or payment credentials on our servers.

We do not sell your personal data. We share data only with:

• Stripe — to process payments
• Supabase — database and authentication hosting
• Vercel — web hosting
• PostHog — anonymous analytics (no personal data sent)

We do not use tracking cookies. Our analytics (PostHog) runs in cookieless mode with in-memory persistence only. Authentication uses secure, HTTP-only session tokens managed by Supabase, which are essential for the service to function.

Under the General Data Protection Regulation, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your account and data
• Export your data in a portable format
• Object to processing of your data

To exercise any of these rights, contact privacy@sankofa-ngo.org.

You can request deletion of your account and associated data at any time. Visit our account deletion page for details. Anonymized donation records are retained for 7 years for tax compliance under Irish law.

Our services are not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

MTU Sankofa Living & Learning
Cork, Ireland
privacy@sankofa-ngo.org

We may update this policy from time to time. Changes will be posted on this page with an updated date. Continued use of our services after changes constitutes acceptance of the updated policy.