Privacy Policy

Who we are

Brave Generation Inc. is a public charity organized in the United States under Internal Revenue Code section 501(c)(3), EIN 93-1717971. Our mission is mentorship, education access, and leadership support for Ukrainian youth.

Our website and primary administrative presence are associated with the United States (organization locality: New York, NY). Programs serve youth connected to Ukraine and partners internationally. Contact: [email protected].

What information do we collect?

Depending on how you use the site, we may process:

• Newsletter / contact details — first name, last name, and email address when you submit our subscribe form.
• Donation-related information — amount, frequency, and payment status handled through Stripe (see below). We do not store full payment card numbers on our servers.
• Technical and security data — IP address, browser/device signals, and similar data used for security (Cloudflare Turnstile), delivery of pages, and (where enabled) analytics.
• Usage data — pages viewed, approximate location, and interaction metrics via Google Analytics and Microsoft Clarity, subject to consent defaults described below.

How do we use Instagram and Meta?

We display recent public posts from Brave Generation’s official Instagram account on our homepage using the Instagram Graph API (Meta Platforms, Inc.). That integration fetches media we already publish as the page owner—such as captions, media URLs, permalinks, and timestamps—so visitors can see our public content without leaving the site.

This feed is not used to log into Instagram as a website visitor, and we do not ask you for your personal Instagram credentials through this feature. Meta/Instagram process data under their own terms and policies when you interact with Instagram itself.

Learn more in Instagram’s Privacy Policy and Meta’s Privacy Policy.

If Meta changes API access or policies, feed availability may change. We use the API only to show our organization’s public content and to operate our site features that depend on it.

How are donations processed with Stripe?

Online donations are processed by Stripe, a PCI-compliant payment provider. When you give, Stripe collects and processes payment details (for example card or wallet information) according to Stripe’s terms and privacy policy. We receive confirmation details needed for receipts, accounting, and donor stewardship—not your full card number.

As a U.S. 501(c)(3) public charity, donations are tax-deductible to the extent permitted by law. For Stripe’s practices, see Stripe’s Privacy Policy.

How does Cloudflare Turnstile protect our forms?

Our newsletter form uses Cloudflare Turnstile in invisible mode to help distinguish people from bots and reduce spam and abuse. Turnstile may process technical signals such as IP address, TLS and browser characteristics, and related security data for that purpose.

As a condition of invisible mode, we reference Cloudflare’s Turnstile Privacy Addendum, which supplements Cloudflare’s main privacy policy.

Analytics, cookies, and similar technologies

We use:

• Google Analytics — aggregate traffic and content performance only if you accept analytics in our cookie banner.
• Microsoft Clarity — interaction insights (for example heatmaps) to improve usability — only after the same analytics consent.

We follow an opt-in model for analytics (aligned with EU/UK ePrivacy): Google Analytics and Clarity scripts are not loaded until you Accept. Consent Mode v2 keeps analytics/ads storage denied by default; ads storage stays denied even after Accept. We honor Global Privacy Control (GPC) and provide a Do Not Sell or Share My Personal Information control in the footer. Details: Cookie Policy.

Necessary cookies for security (Cloudflare Turnstile), donations (Stripe), and remembering your cookie choice may still be used if you reject analytics. We do not sell personal information.

How we use information

• To send newsletters or updates you requested
• To process donations and related confirmations or stewardship communications
• To display our public Instagram content via Meta’s API
• To protect forms and systems from spam, fraud, and automated abuse
• To measure and improve the website experience (analytics only with your consent)
• To meet legal, accounting, and nonprofit compliance obligations

Who do we share information with?

We do not sell your personal information. We use service providers that process data on our behalf or as independent controllers for their services, including:

• Brevo — transactional / notification email related to newsletter signups
• Stripe — payment processing
• Cloudflare — Turnstile bot protection
• Meta / Instagram — Graph API for our public content feed
• Google and Microsoft — analytics tools described above
• Hosting and infrastructure providers that deliver this website

We may also disclose information if required by law, to protect rights and safety, or in connection with a reorganization of the nonprofit, subject to applicable protections.

Retention and your rights

We keep personal information only as long as needed for the purposes above, nonprofit recordkeeping, and legal requirements, then delete or anonymize it when appropriate.

Depending on where you live, you may have rights to access, correct, delete, or restrict certain processing, or to object to marketing emails (unsubscribe links are included where required). California residents and others may use Do Not Sell or Share My Personal Information in the footer (we do not sell personal information; this opts analytics off on this site). To make a request, email [email protected].

Do Not Track / GPC (CalOPPA): we do not respond to legacy browser “Do Not Track” headers alone. We do honor the newer Global Privacy Control (GPC) signal as an opt-out of analytics on this site. See the Cookie Policy.

Children’s privacy

The website is not directed at children under 13 in the United States, and we do not knowingly collect personal information from children under 13 through this site. Program participants may be youth served through separate application and safeguarding processes outside this public website form.

How can you contact us about privacy?

Brave Generation Inc.
Email: [email protected]
Website: www.bravegeneration.org

For website rules and donation terms, see our Terms of Conditions. For organizational collaboration, see Partnership & Collaboration.