Effective date: May 16, 2026
Important: This Privacy Policy is a strong starter template, not legal advice. Privacy obligations can depend on traffic, revenue, tools used, visitor location, and whether the Site uses analytics, ads, pixels, forms, or payment integrations. Have a qualified privacy attorney review it before launch.
1. Overview
This Privacy Policy explains how The Million Dollar Ask (the “Site,” “Campaign,” “we,” “us,” or “our”) may collect, use, disclose, retain, and protect information in connection with the Campaign. The only public contact method for privacy questions is info@themilliondollarask.com.
2. Information We May Collect
Depending on how the Site is configured, we may collect:
- Contact information, such as an email address if you contact us.
- Donation-related information visible through payment providers, such as public display names, cashtags, transaction notes, timestamps, amounts, refund or dispute data, and transaction IDs.
- User content, such as donor messages, challenge messages, nicknames, testimonials, or social-sharing text that you submit.
- Device and usage information, such as IP address, browser, device type, operating system, referring page, pages viewed, approximate location, and interaction data.
- Cookie and tracking information, as explained in the Cookie Policy.
- Security and fraud-prevention information, such as suspicious activity signals, blocked requests, logs, and platform compliance information.
3. Information We Do Not Intentionally Request
We do not intentionally request sensitive personal information such as Social Security numbers, government identification numbers, medical information, precise location, passwords, political opinions, religious beliefs, union membership, biometric identifiers, or information about children. Do not submit sensitive information in donor messages, challenge text, or emails unless legally necessary.
4. Payment Processing
Payments may be handled by third-party payment providers, including Cash App. Payment providers collect and process information under their own terms and privacy policies. We may receive limited transaction information from them, but we do not control their identity verification, security review, tax reporting, risk checks, fraud monitoring, or retention practices.
5. How We Use Information
We may use information to:
- Operate, maintain, secure, and improve the Site and Campaign.
- Display campaign stats, donor counts, challenge counts, milestones, and public messages.
- Process, reconcile, review, refund, or dispute payments where applicable.
- Respond to emails and legal, privacy, tax, compliance, or security requests.
- Detect fraud, abuse, spam, malicious activity, unauthorized access, and payment misuse.
- Comply with platform rules, payment processor requirements, tax obligations, legal process, and applicable law.
- Analyze traffic and performance if analytics tools are enabled.
- Run social sharing, referral, or challenge features if enabled.
6. Legal Bases for Visitors in the EEA, UK, and Similar Regions
Where data-protection law requires a legal basis, we may process personal information based on consent, performance of a requested service, legitimate interests, compliance with legal obligations, protection of rights and security, or another lawful basis that applies to the specific processing activity.
7. How We Share Information
We may share information with:
- Payment processors and financial platforms, including Cash App.
- Website hosting, security, analytics, cookie-consent, email, backup, and technical service providers.
- Professional advisors, such as attorneys, accountants, tax professionals, and compliance consultants.
- Government, tax, regulatory, law-enforcement, court, or payment-platform recipients when required or appropriate.
- Public visitors, if you submit a message, nickname, testimonial, challenge text, or other content intended for public display.
- Successors or transferees if the Site or Campaign assets are reorganized, transferred, or maintained by another operator.
8. Public Content and Anonymity
Donor wall entries, challenge messages, usernames, nicknames, donation notes, and testimonials may be displayed publicly if submitted for that purpose. Do not include personal information in public messages unless you want it visible. Public campaign anonymity does not mean anonymity from payment processors, banks, tax authorities, platforms, security providers, or lawful legal process.
9. Cookies, Analytics, Ads, and Global Privacy Controls
The Site may use necessary cookies for security and operation. Optional analytics, advertising, social media pixels, embedded media, or similar technologies should be used only with appropriate notice and consent where required. If the Site uses targeted advertising or cross-context behavioral advertising, we will provide additional opt-out tools where required.
Where required by applicable law, we will honor valid browser-based opt-out preference signals, such as Global Privacy Control, for activities that qualify as a sale, sharing, or targeted advertising.
10. California Privacy Notice
This section is intended to strengthen transparency for California residents. Depending on traffic, revenue, data practices, and legal thresholds, the California Consumer Privacy Act as amended by the CPRA may or may not apply. Even where not legally required, we aim to provide reasonable privacy choices.
Categories of Personal Information
In the last 12 months, we may have collected the categories listed above, including identifiers, internet or electronic network activity, transaction-related information, approximate location derived from IP address, user-generated content, and inferences from Site activity. We do not intentionally collect sensitive personal information for the purpose of inferring characteristics.
Purposes
We use information for the purposes described in this Policy, including Site operation, payment reconciliation, public campaign features, security, fraud prevention, compliance, analytics, and communication.
Sale or Sharing
We do not sell personal information for money. If advertising cookies, retargeting pixels, or cross-context behavioral advertising tools are enabled, some laws may treat that as “sharing” or “sale.” In that case, the Site should provide a Do Not Sell or Share My Personal Information option and honor applicable opt-out signals.
California Rights
California residents may have rights to know, access, correct, delete, opt out of sale/sharing, limit certain sensitive personal information uses, and not be discriminated against for exercising privacy rights. Requests can be sent to info@themilliondollarask.com. We may need to verify your request before acting on it.
11. Other U.S. State Privacy Rights
Residents of states with comprehensive privacy laws may have rights to access, correct, delete, obtain a portable copy, opt out of targeted advertising, opt out of sale, opt out of certain profiling, appeal a privacy decision, or limit sensitive data use where applicable. This may include, depending on legal thresholds and current law, states such as Colorado, Connecticut, Delaware, Florida, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, Virginia, and others. Requests can be sent to info@themilliondollarask.com.
12. EEA / UK / Swiss Privacy Rights
Visitors in the EEA, UK, Switzerland, and similar regions may have rights to request access, correction, deletion, restriction, objection, portability, withdrawal of consent, and complaint to a data protection authority. To make a request, contact info@themilliondollarask.com.
13. Canada and Other International Privacy Rights
Visitors in Canada and other countries may have rights under local privacy laws, including rights to access, correct, withdraw consent, or file complaints. We will make reasonable efforts to respond to valid requests sent to info@themilliondollarask.com.
14. Children’s Privacy
The Site and Campaign are not directed to children under 13, and we do not knowingly collect personal information from children. Donors must be legal adults. If you believe a child provided personal information, contact info@themilliondollarask.com.
15. Data Retention
We retain information for as long as reasonably needed for the Campaign, payment reconciliation, legal compliance, tax records, fraud prevention, security, dispute handling, backups, public content management, and legitimate business purposes. We may retain limited records even after a deletion request when necessary for legal, tax, security, dispute, or compliance reasons.
16. Security
We use reasonable administrative, technical, and organizational safeguards appropriate to the Site’s nature. No website, payment system, email account, or internet transmission is perfectly secure. Use caution when sending information and never send passwords, sensitive IDs, or unnecessary sensitive data.
17. Your Choices
You may contact us to request access, deletion, correction, withdrawal of consent, removal of public content, opt-out of certain processing, or other applicable rights. Some requests may be limited by payment processor rules, legal duties, tax requirements, fraud prevention, public-interest records, backups, or verification limits.
18. No Public Physical Address or Jurisdiction Listing
To preserve public-facing anonymity, this Policy does not list a public physical mailing address, city, county, state venue, registered agent, or local jurisdiction. Required disclosures may still be made privately to payment processors, banks, tax authorities, regulators, courts, or other appropriate parties when legally required.
19. Changes to This Policy
We may update this Privacy Policy at any time. Updates become effective when posted with a revised effective date.
20. Contact
Privacy questions and rights requests can be sent to: info@themilliondollarask.com.