Project Witness – Privacy Policy
Last Updated: October 21, 2025
Project Witness ("we," "us," "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information in connection with our educational, archival, and commemorative mission.
By using our website or participating in our programs, you agree to the practices described here.
1. Who We Are
Project Witness is a 501(c)(3) non-profit organization dedicated to Holocaust education and remembrance through digital archives, educational programs, and storytelling initiatives. We operate online platforms that allow users to:
- Explore exhibits and educational materials;
- Make donations or purchases;
- Subscribe to newsletters;
- Submit personal or family stories;
- Volunteer or participate in translation, transcription, or research projects.
2. Information We Collect
We collect information directly from you and automatically through your use of our website and services.
2.1 Information You Provide
Depending on your interaction, we may collect:
| Activity | Information Collected |
|---|---|
| Account creation / profile | Name, email, organization, address, phone |
| Donations | Name, email, donation amount, frequency, Stripe IDs |
| Orders / product access | Purchase details, entitlements, product IDs |
| Newsletter subscription | Email address and subscription status |
| Forms / contact submissions | Name, email, message purpose, metadata |
| Story or volunteer submission | Uploaded text, images, or files voluntarily provided |
2.2 Information Collected Automatically
We may collect:
- IP address, device and browser type;
- Usage data (e.g., pages visited, time spent on page);
- Cookies or similar technologies used for session management, analytics, and security.
We do not use invasive tracking or sell behavioral data.
3. How We Use Your Information
Your information is used strictly for legitimate non-profit and educational purposes, including:
- Processing donations, purchases, and issuing receipts;
- Providing access to purchased media or resources;
- Managing volunteer contributions and submissions;
- Communicating updates, newsletters, and fundraising campaigns;
- Ensuring the security and performance of our website;
- Complying with applicable legal obligations (e.g., tax laws for donations).
We never sell your data or use it for commercial advertising.
4. Legal Basis for Processing
If you are located in the EU or a jurisdiction that follows GDPR-like standards, our lawful bases include:
- Consent (newsletter sign-up, voluntary submissions);
- Contract (fulfilling purchases or providing access to educational materials);
- Legal obligation (tax documentation for donations);
- Legitimate interests (ensuring site security, improving educational impact).
5. How We Share Information
We share limited data only when necessary and with trusted partners:
| Recipient | Purpose |
|---|---|
| Payment processors (e.g., Stripe) | Secure donation and purchase processing |
| Email service providers (e.g., Mailchimp or Supabase email) | Sending newsletters and transactional emails |
| Cloud hosting providers (Vercel, Supabase, Cloudflare) | Secure website hosting, database storage, and analytics |
| Auditors / tax authorities | Legal compliance for non-profit reporting |
| Researchers / educators (aggregated only) | Anonymized, aggregate data for educational or historical analysis |
We do not sell or rent your information.
6. Data Retention
We retain personal data only as long as necessary:
- Donations and purchases: retained for up to 7 years for accounting and audit compliance.
- Profiles and volunteer submissions: retained until you request deletion.
- Newsletter subscriptions: retained until you unsubscribe.
- Story contributions: retained indefinitely for archival and educational purposes unless a removal request is received.
7. Data Security
Our systems are hosted on secure platforms (Supabase, Vercel, and Cloudflare). We employ encryption, access controls, and audit logs to safeguard your data. Despite our best efforts, no online system is entirely risk-free; users share information at their discretion.
8. Your Rights
Depending on your location, you may have the right to:
- Access or request a copy of your personal data;
- Correct or update inaccurate information;
- Request deletion of your account or submission;
- Withdraw consent for communications;
- Lodge a complaint with your local data protection authority.
You can exercise these rights by emailing info@projectwitness.org.
9. Cookies
We use cookies solely for:
- Authentication and session persistence;
- Anonymous analytics (e.g., page performance, aggregate engagement).
You may disable cookies in your browser, but this may limit some functionality.
10. International Transfers
Our servers may be located in the United States. If you access our site from outside the U.S., your information may be transferred and processed there under U.S. data protection laws.
11. Children's Privacy
We do not knowingly collect personal data from children under 13 without parental consent. Educators and schools using our materials must ensure compliance with relevant child privacy laws (COPPA, GDPR-K).
12. Updates to This Policy
We may update this Privacy Policy to reflect changes in our practices. Significant changes will be communicated via email or a notice on our website.
13. Contact Us
For privacy questions, data access, or deletion requests:
📬 Project Witness
201 Foster Avenue
Brooklyn, NY 11230