Privacy Policy

Effective date: October 30, 2026

This policy explains what information Cookie.Fund collects, how we use it, and the choices you have. "Cookie.Fund," "we," and "us" mean CookieFund (DBA), 12062 Maple Leaf Lane, Fontana, CA 92337.

Plain-language summary: We collect what we need to run fundraisers, take orders, ship cookies, and pay teams. We don't sell your personal information.

Who this covers

  • Organizers who apply to run a fundraiser and manage it from the dashboard.
  • Sellers (participants), whom the organizer adds to a fundraiser and gives their own participant code or link and seller page to share. Many sellers are students. See "Children and student sellers" below.
  • Supporters who buy cookies or donate.
  • Visitors browsing cookie.fund.

Information we collect

Account information (organizers). Name, email address, and password. We send an email to confirm your address and can send password-reset emails.

Fundraiser applications (organizers). Team / organization name, fundraiser goal amount, how long you want the fundraiser to run, and the location you enter for the fundraiser.

Payout information (organizers). Payouts are made through Stripe Connect. Bank account details go to Stripe, and we don't store them. From Stripe we receive the connected account's status and the bank name and last four digits of the connected account, so the organizer can recognize which account payouts go to.

Orders (supporters). Name, email, phone (if provided), shipping address or pickup choice, items ordered, any donation amount, and which fundraiser and seller the order is credited to. Card payments for cookies and donations are processed by Stripe. We don't store your full card number.

Address lookup. When you type an address at checkout, we use Google Places (Google Maps Platform, Places API), an address-suggestion service, to help complete it.

Information stored in your browser. We use your browser's local storage to remember your shopping cart and which fundraiser or seller's link brought you to the shop, so the right team gets credit. Signing in sets the session and security cookies needed to keep your account signed in safely.

Analytics and advertising. We don't use analytics tools, advertising pixels, or similar trackers. If we add any, we'll list them here along with your opt-out options.

Automatic information. Like most websites, our servers may log basic technical data such as IP address, browser type, and pages visited.

How we use information

  • To review fundraiser applications and run fundraisers
  • To process orders, donations, shipping, and local pickup
  • To calculate shipping rates and options
  • To credit sales to the right team and seller, and show progress on the dashboard
  • To pay teams through Stripe Connect and keep a ledger of every sale
  • To send transactional emails (account confirmation, application status, order confirmation, pickup details, shipping updates)
  • To handle damaged-item and wrong-order claims, including photos you email us
  • To provide support, prevent fraud, and meet legal and tax obligations
  • We don't send marketing emails. Everything we send is about your account, application, orders, pickup, shipping, or payouts.

How information is shared

  • With the fundraiser you buy from. Organizers can see order details for their fundraiser (the supporter's name, the items and amounts, order dates and status, and the seller credited) so they can track sales. Organizers and sellers don't see supporter email addresses, phone numbers, or shipping addresses.
  • With service providers who help us operate:
    • Stripe, for card payments and Stripe Connect payouts
    • Shippo, which receives shipping addresses and order details to calculate shipping rates and to buy the shipping labels for your order
    • Shipping carriers, which receive what they need to deliver your order
    • Fontana Cookies, our cookie supplier, which bakes the cookies; we don't send Fontana supporters' personal information
    • SendGrid (email delivery), Twilio (text messages), Google (address suggestions via the Places API), and Firebase (push notifications in our mobile apps)
  • For legal reasons, when required by law or to protect our rights and users.
  • In a business transfer, such as a merger or sale of assets.

We do not sell personal information.

Children and student sellers

Only an adult (18+) organizer can create a fundraiser and its account. Sellers must be at least 14, and many are students. Sellers don't create their own accounts. The organizer creates each participant as a sub-account under the main fundraiser and shares that seller's own participant code or link, which leads to their seller page. Organizers are responsible for inviting only appropriate participants (14+) and for making sure sellers under 18 have a parent's or guardian's okay to take part.

What we collect about sellers. Only what the organizer enters when creating a participant: the seller's first name, last initial, and an optional display name. Organizers can also add participants by uploading a spreadsheet. We also record the sales credited to each seller and the amount they've raised.

What's public. A seller's name or display name appears on their seller page ("Support [name]") and may appear in the fundraiser's "Our Sellers" list and participant leaderboard along with the seller's goal and amount raised.

Cookie.Fund is not directed to children under 13, and we don't knowingly collect personal information from children under 13. If we learn we have, we'll delete it. Parents and guardians can email Info@cookie.fund to review or delete their teen's information.

⚠ Review needed: Have a lawyer confirm the minor-seller (14–17) approach, including California rules for minors' data, and any student-privacy laws (FERPA and state student-data laws) that may apply to school fundraisers.

Data retention

We keep information for as long as needed to run fundraisers, complete orders and payouts, and meet legal, tax, and accounting requirements. When information is no longer needed for those purposes, we delete or de-identify it.

Your choices and rights

  • You can update your account information from your profile, or ask us to correct or delete your data by emailing Info@cookie.fund.
  • You can clear your saved cart by clearing your browser's local storage for cookie.fund.

Your California privacy rights

Cookie.Fund is based in California. If you're a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), may give you the right to:

  • Know and access the personal information we've collected about you, the categories of sources, why we use it, and who we share it with
  • Delete personal information we've collected from you, subject to legal exceptions (for example, records we must keep for tax or accounting)
  • Correct inaccurate personal information
  • Opt out of the "sale" or "sharing" of personal information. We don't sell personal information or share it for cross-context behavioral advertising.
  • Limit the use of sensitive personal information. We use it only as needed to provide our service, such as account passwords, and card data handled by Stripe.
  • Not be discriminated against for exercising any of these rights

Categories collected in the last 12 months: identifiers (name, email, phone, address), commercial information (orders and donations), account login credentials, and internet activity data such as basic server logs.

How to make a request: email Info@cookie.fund or call 840-217-4998. We'll verify your identity before acting on a request and respond within the time the law requires (generally 45 days). You can use an authorized agent to make a request for you.

Minors: We don't sell or share the personal information of consumers under 16.

Shine the Light: California residents may ask whether we've shared personal information with third parties for their direct marketing. We don't.

⚠ Review needed: Whether CCPA/CPRA applies to Cookie.Fund depends on thresholds such as annual revenue and the volume of California consumers' data you handle. Have a California-licensed lawyer confirm applicability and finalize this section.

Security

We use reasonable safeguards to protect your information, and card payments are handled by Stripe. No online service is perfectly secure.

Changes to this policy

We may update this policy. We'll post the new version here with a new effective date, and notify account holders of significant changes by email.

Contact

Questions about privacy? Email Info@cookie.fund, call 840-217-4998, or write to CookieFund (DBA), 12062 Maple Leaf Lane, Fontana, CA 92337.