Privacy policy

Your information, plainly.

This policy covers jumpinthepool.org, run by the Organ Donor Awareness Project NFP (ODAP), a 501(c)(3) public charity in Woodridge, Illinois. It explains what we collect, why, and who else handles it. Effective November 5, 2026.

The short version

Visiting the site

Like nearly every website, our servers and our network provider, Cloudflare, automatically record technical details of each request: IP address, the page requested, date and time, and your browser type. We use these logs only to keep the site secure and working, and our server deletes them after 14 days.

Our donor registry finder and statistics pages link to official sources such as OrganDonor.gov and state registries. We don’t see anything you enter on those sites; their own privacy policies apply.

Contributions

When online contributions are open, we collect your name, email address, the amount, and any note you choose to include. We use them to process your gift, send your receipt and thank-you email, and answer questions about it. Our nonprofit records keep them as required for tax and accounting purposes.

Payments are handled entirely by Stripe. Your card details go directly to Stripe and never reach our servers. If a reward you choose ships by mail, Stripe collects your shipping address and passes it to us so we can send it. Receipts and reward updates are sent through our email provider, Resend.

Emailing us

If you write to info@odap.us, we use your message and address only to reply and to follow up on what you asked about.

Cookies

Visitors receive no cookies from us. The only cookie this site sets is a secure sign-in cookie for our own volunteers when they log in to the administration area; it expires after seven days. Cloudflare may set a strictly necessary security cookie to protect the site from abuse.

Who can see your information

Only the ODAP volunteers who handle contributions and rewards, and the service providers named above, acting on our behalf. We disclose information to others only if the law requires it.

Keeping it safe

The site is served only over encrypted HTTPS. Administration requires a password, and records are kept on a private server that is not publicly accessible. No system is perfectly secure, but we limit what we collect so there is less to protect.

Your choices

You can ask us what information we hold about you, ask us to correct it, or ask us to delete it, except where we must keep contribution records by law. Email info@odap.us and we’ll respond within 30 days.

Children

This site is meant for adults. We don’t knowingly collect personal information from children under 13.

Changes

If we change this policy, we’ll update it here and change the effective date above.

Questions? Contact info@odap.us, or read more about ODAP.