Legal
Privacy & cookies.
How we use cookies and analytics on this site, and how you change or withdraw your consent whenever you like.
In progress
Our full privacy policy is being finalised. The complete legal text is in review and will be published here. It covers who we are, what personal data we handle, how long we keep it, and your rights over it.
Everything below about cookies and analytics is accurate and current. Your consent choices work today. Questions: hello@contentment.org
Change your mind anytime.
We ask before setting anything that isn’t strictly necessary. Nothing is permanent. Reopen Cookie Preferences from this page whenever you want to update or withdraw consent.
What we use, and why.
A small set of tools to understand how the site is used so we can improve it. We don’t sell your data, and we don’t run advertising. Every tool listed below is one that is actually running on this page. If a tool isn’t switched on, it isn’t listed.
-
Nothing loads until you accept: Google's tag is injected only once you grant statistics consent, and it runs in cookieless Consent Mode. Advertising and ad-personalisation signals are switched off at the tag, so this data is not used for ads.
-
Held in a consent-denied, cookieless state, and its tag is not injected at all until you accept.
-
Live on every page, and cookieless by configuration: it keeps nothing between page loads, so it cannot follow you from one page to the next. Being active and setting no cookies are both true at once, and that is the whole point of running it this way.
-
Records technical error details, not browsing behaviour. Session replay is switched off, so no recording of your visit is captured or sent.
-
Works before you choose, because it is what remembers your consent and lets you withdraw it.
-
Runs only on the signup forms, not on the rest of the site. It looks at signals your browser already sends, such as the request itself and basic browser characteristics, to score whether the submission is automated, and passes that score to us as a single pass/fail token. It does not build a profile of you, is not used for advertising, and does not follow you between pages. Most people never see anything: the check is invisible unless it is genuinely unsure, in which case a short verification appears above the button. See Cloudflare's privacy policy for retention.
-
Submitted over HTTPS to our /api/newsletter proxy, then stored in Flodesk. Signing up subscribes you straight away. There is no confirmation email to click, and you can unsubscribe from any email we send. See Flodesk's privacy policy for retention.
-
Card numbers and donor records stay on Keela's hosted checkout iframe; The Contentment Foundation never sees card data. Keela loads its own error monitoring inside that iframe, which is why a cookie scan of this site can list names we do not set ourselves. See Keela's privacy policy for retention.
Advertising and data sharing
We run no advertising or campaign tracking on this site, and Google Analytics is configured so the data it collects cannot be used for ads or ad personalisation.
The consent banner still offers a Marketing choice, and the cookie declaration below still describes what that category would allow. That is the consent tool’s standard wording, not a description of something we have switched on: accepting Marketing today permits nothing, because there is no advertising tool here to permit. It stays in the banner so that if we ever do add one, your existing choice already applies to it, rather than us adding a tracker and asking you afterwards.
How we comply by region.
| Region | Regulation | How we comply |
|---|---|---|
| EU | GDPR + ePrivacy | Cookiebot CMP; no non-essential cookies before consent; GA4 Consent Mode v2 |
| UK | UK GDPR + PECR | Same as the EU. Cookiebot geo-targets EU and UK visitors |
| US (California) | CCPA / CPRA | Disclosure of analytics tools on this page; link to cookie preferences |
| Rest of world | Best practice | This page + Cookiebot preferences available sitewide |
Cookie declaration.
Generated automatically by our consent tool, which re-scans the site on a schedule. Because it runs on its own schedule rather than on every deploy, it can briefly still list something we have just removed. Where the two disagree, the list above is the current one.
Still have a question?
Write to hello@contentment.org and we’ll point you to the right person.