Privacy Policy

Sharing Excess is a 501(c)(3) nonprofit based in Philadelphia. This policy explains what information we collect on sharingexcess.com, how we use it, and the choices you have. We are responsible for that information (its “controller” under European and UK law).

In short: we never sell your personal information. We count visits to our site, and we only store analytics or advertising cookies on your device if you allow them.

• Information you give us directly through forms. When you contact us, offer a food donation, sign up for updates, volunteer, or partner with us, we collect what you share — such as your name, email address, phone number, organization, and message.
• Online Charitable Donations. Online donations are processed by FundraiseUp. They handle your payment details directly; we never see or store your full card number. We receive your name, contact details, and gift details so we can thank you and keep tax records.
• Usage data. When you visit, we collect pages viewed, links clicked, the site that sent you here, your browser and device type, and your approximate location (country or city), which is worked out from your IP address.

We use information for the purposes below. For visitors in the EU, UK, and similar places, the legal basis for each is in brackets.

• Respond to your questions and requests [taking steps you asked for]
• Send updates you have asked to receive [your consent]
• Process and acknowledge donations, and keep tax records [legal obligation]
• Count visits to our site anonymously [our legitimate interest in running it]
• Understand how our site is used and improve it, using analytics cookies [your consent where required; otherwise our legitimate interests]
• Measure and show our advertising [your consent where required; otherwise our legitimate interests]
• Keep our site secure and prevent spam and abuse [our legitimate interests]

• Essential (always on). These remember your privacy choice, run the donation checkout and protect it from fraud (FundraiseUp), load our fonts (Adobe Fonts), and keep the site secure. Our host, Cloudflare, also tells us which country you are visiting from, so we know whether to ask before using cookies.
• Anonymous visit counting (always on). When analytics cookies are off, PostHog still counts your visit without storing anything on your device. It uses a one-way code made from your IP address and browser details that changes every day, so it cannot be used to recognize you on a later day.
• Analytics (if allowed). PostHog measures page views, clicks, errors, and usage behavior, with anything typed into forms hidden. We also use Mixpanel to count page views and clicks for a short time, to compare traffic with our previous website.
• Advertising (if allowed). Google Ads measures donations that come from our ads and lets us show our ads to people who have visited our site (remarketing). Google's code does not load at all unless advertising cookies are allowed.
• Embedded content. Some pages include videos (YouTube, in its privacy-enhanced mode), maps (Mapbox), a calendar (Google Calendar), an Instagram feed (Elfsight), and links to forms on other sites (Typeform). These providers may set their own cookies when you use them, under their own privacy policies.

• In the United States, analytics and advertising cookies are on by default. You can turn them off at any time with Your privacy choices, also linked at the bottom of every page.
• Everywhere else, a banner asks before we use them. Until you accept, we only count your visit anonymously. You can change your answer the same way.
• Global Privacy Control. If your browser sends a Global Privacy Control signal, we treat it as a request to turn off analytics and advertising cookies, including the sharing described below. Browsers' Do Not Track signals have no common standard, so we honor Global Privacy Control instead.
• Emails. Unsubscribe using the link in any email.

Your choice is saved in your browser, so it applies to that browser and device only.

We do not sell your personal information for money. We share it only with service providers that help us run this site and our programs, under contracts that limit how they use it:

• FundraiseUp — online donations
• Formspree — contact and food donation forms, protected by Google reCAPTCHA
• Mailchimp — email updates
• PostHog and Mixpanel — site analytics
• Google — advertising measurement and remarketing
• Cloudflare and Adobe Fonts — hosting, security, and fonts

Some US state laws call remarketing “sharing” or “targeted advertising.” You can opt out of it with Your privacy choices or Global Privacy Control. We may also disclose information when required by law, to protect the rights and safety of others, or as part of a merger with another organization. We may share aggregated statistics, such as traffic trends, that do not identify you.

We are based in the United States, and so are most of our service providers. If you visit from another country, your information is processed in the United States. Where the law requires it, our providers protect transfers with safeguards such as the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.

• Messages and form submissions: up to 3 years after we last hear from you
• Email list: until you unsubscribe
• Donation records: as long as tax law requires, generally 7 years
• Analytics data: up to 7 years, without your name or contact details

Wherever you live, you can ask us to:

• Tell you what personal information we have about you and send you a copy
• Correct or delete it
• Stop or limit how we use it, or withdraw consent you gave us
• Stop using it for targeted advertising

Email contact@sharingexcess.com. We may need to confirm your identity, and we will respond within one month. We will not treat you differently for using these rights. If we turn down your request, you can ask us to reconsider by replying to our answer. If you are still not satisfied, you can contact your state attorney general or, in the EU or UK, your data protection authority.

We use reasonable safeguards to protect personal information, and this site uses encrypted (HTTPS) connections. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

We update this policy when we change the tools we use, how we use information, or when the law changes. Each update is posted on this page with a new version number and effective date. If a change would let us use information you have already given us in a new way, we will post a notice on our site before it takes effect and ask for your consent where the law requires it.

Questions about this policy? Email contact@sharingexcess.com or write to us:

Sharing Excess
6700 Essington Avenue, Suite E207
Philadelphia, PA 19153