Privacy policy

When you contribute we collect the name and email you enter at Stripe's hosted checkout. Payment details (card number, expiry, CVC) are entered directly into Stripe and never touch our servers; we receive only a transaction id and the last four digits of the card.

When you visit the Site we receive basic technical information through our hosting provider: IP address, browser user-agent, request path, and timestamp. We use this for security and aggregate analytics. We do not use third-party advertising cookies.

Contribution records are used to issue receipts, handle refund requests, and meet our tax and accounting obligations. We retain them for seven years.

Email addresses entered at checkout are used to send the contribution receipt and to reply if you write to us. We do not send marketing emails unless you opt in.

Stripe processes payments and receives the card and billing information you enter at checkout. Stripe's privacy policy is at stripe.com/privacy.

We do not sell personal information.

You may request a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it (subject to our legal record-keeping obligations). Email info@arsmedicaarchive.org to make a request.

If you are in the EU or UK, the lawful bases on which we process your information are contract performance (for contributions) and legitimate interests (for site security).

The Site uses only the cookies necessary for the checkout flow and basic session state. We do not set tracking or advertising cookies.

Questions about this policy can be sent to info@arsmedicaarchive.org.