Privacy Policy

Privacy Policy

Last updated: May 21, 2026

This Privacy Policy describes how Sponsor-A-Can (“we,” “us,” “our”) collects, uses, and protects information when you visit our website at www.sponsor-a-can.org, donate to our organization, report an abandoned shopping cart, or otherwise interact with our services.

Sponsor-A-Can is a Washington State 501(c)(3) nonprofit corporation (EIN: 93-1624890), with its principal office at 4126 NW Oliver Way, Silverdale, WA 98383.

By using our website or services, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the site. We may update this policy from time to time and will revise the date above when we do.

Information We Collect

We collect different types of information depending on how you interact with us:

When you make a donation

If you choose to donate through our website, we collect your name, email address, donation amount, and an optional message. Payment information (credit card details) is processed directly by Square and never stored on our servers. We retain donation records as required by IRS recordkeeping rules for tax-exempt organizations.

When you report an abandoned shopping cart

Our public cart reporting form (the “Save-A-Cart” form) collects:

• Your name and email address (if you provide them — these fields are optional for some report types)
• The GPS coordinates of the cart’s location, captured via your browser if you grant location permission
• Photos of the cart, if you choose to upload them
• A description of the cart, its location, and any relevant notes

This information is used solely to dispatch our field team for cart recovery and to maintain accurate records of our operations under our contract with Kitsap County.

When you register as a Samaritan reporter

Our Samaritan tier is a vetted community reporting role. To register, we collect your name, email address, optional mailing address, and any background information you choose to provide. Approved Samaritans receive a 6-digit PIN by email and may submit cart reports through a dedicated form.

When you access stakeholder portals

Our Live Operations Map and Impact Report are PIN-gated resources available to county officials, board members, and approved community partners. When you authenticate with a stakeholder PIN, we log:

• The date and time of access
• Your IP address and approximate geographic location (looked up via ip-api.com)
• A device fingerprint (browser user-agent hash) used to flag unusual access patterns
• The number of times the PIN has been used

This audit log is used to protect the integrity of our stakeholder data and detect unauthorized PIN sharing. It is not used for marketing or any external purpose.

When you subscribe to push notifications

If you opt in to browser-based push notifications, your browser provides us with an anonymized subscription token. We use this token solely to deliver the notifications you opted in to receive. You may unsubscribe at any time through your browser settings.

When you leave a comment or contact us

Comments on our website collect the data shown in the comment form along with your IP address and browser user-agent string for spam prevention. If you contact us directly by email, we retain your message and your reply address.

Standard WordPress and analytics data

Our website runs on WordPress, which sets standard cookies for site functionality (login sessions, comment preferences, etc.). We may also use web analytics tools to understand aggregate visitor behavior. We do not sell or share individual analytics data.

How We Use Your Information

We use the information we collect to:

• Process donations and provide tax-deductible receipts
• Dispatch our field team to recover reported abandoned shopping carts
• Communicate with donors, supporters, Samaritans, and stakeholders about our work
• Maintain operational records required by our contract with Kitsap County and by IRS recordkeeping rules
• Detect and prevent fraud, abuse, or unauthorized access to our systems
• Comply with applicable legal obligations
• Improve our website and services

How We Share Your Information

We do not sell your personal information. We share information only with trusted third parties as necessary to deliver our services:

• Square — processes donations. See Square’s Privacy Notice.
• OpenStreetMap — provides map tiles for our operations map. See OpenStreetMap’s Privacy Policy.
• ip-api.com — provides approximate geographic lookup for stakeholder access auditing.
• Our web hosting provider — stores our site data on its servers.
• Kitsap County government — receives aggregate operations data and cart-recovery records as required by our service contract.
• Government agencies and law enforcement — only when required by law, valid legal process, or to protect the safety of individuals.
• Other nonprofits or partner organizations — only with your explicit consent, such as when you ask us to refer a welfare concern to the Kitsap County HEART program.

How Long We Retain Your Information

We retain information only as long as necessary for the purposes described above:

• Donation records: retained as required by IRS rules (typically 7 years)
• Cart reports and operational data: retained for the life of our county contract and for reporting purposes
• Stakeholder access logs: retained for audit purposes, typically 2 years
• Comments and contact messages: retained indefinitely unless you request deletion
• Push notification subscriptions: retained until you unsubscribe

Sensitive Data: GPS, Photos, and Encampment Locations

Because our work involves reporting on cart locations that may be near homeless encampments, we treat GPS coordinates and photos with particular care:

• Public-facing cart reports submitted through the Save-A-Cart form are displayed with fuzzed (approximate) coordinates to protect the privacy of nearby unsheltered individuals.
• Full-precision GPS data is accessible only to authorized SAC field staff and verified stakeholders (county officials, board members) via PIN-gated portals.
• If you upload photos, please avoid including identifying images of individuals without their consent. We strip EXIF location data from uploaded photos.

Your Rights

You have the following rights regarding your personal information:

• Right to access: You may request a copy of the personal information we hold about you.
• Right to correct: You may request that we correct inaccurate information.
• Right to delete: You may request deletion of your personal information, subject to legal and operational retention requirements (e.g., donation records required by IRS rules).
• Right to object: You may opt out of marketing communications and certain processing activities.
• Right to portability: You may request your data in a portable format.
• Right to complain: If you reside in a jurisdiction with a data protection authority (such as the EU or California), you may file a complaint with that authority.

To exercise any of these rights, contact us using the information below.

International Visitors

Sponsor-A-Can operates in the United States. If you visit our website from outside the U.S., your information will be transferred to and processed in the United States, which may have different data protection laws than your jurisdiction.

Children’s Privacy

Our website and services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will delete it.

Cookies

Our website uses cookies for the following purposes:

• Functional cookies — keep you logged in, remember your preferences, store your stakeholder PIN session
• Comment cookies — if you leave a comment, we may store your name and email so you don’t have to re-enter them next time
• Analytics cookies — help us understand aggregate site usage

You can control cookies through your browser settings. Disabling cookies may affect functionality of the site, particularly the stakeholder portal.

Third-Party Embedded Content

Pages on our site may include embedded content (such as maps, videos, or images) from other websites. Embedded content from other websites behaves as if you had visited those websites directly, and those sites may collect data about you, use cookies, or track your interaction with the embedded content.

Security

We use reasonable administrative, technical, and physical safeguards to protect the personal information we collect. However, no method of internet transmission or electronic storage is 100% secure, and we cannot guarantee absolute security.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our services, or applicable law. We will revise the “Last updated” date at the top of this policy when we make changes. We encourage you to review this policy periodically.

How to Contact Us

If you have any questions or concerns about this Privacy Policy or our handling of your personal information, please contact us:

Sponsor-A-Can
Matthew S. Boisson, President
4126 NW Oliver Way
Silverdale, WA 98383
Email: matthew@sponsor-a-can.org
Phone: (360) 328-1092

Sponsor-A-Can is a Washington State 501(c)(3) nonprofit corporation. EIN: 93-1624890. Federally recognized as tax-exempt effective April 16, 2026.

• None