Privacy

Pledge operates this site and the ledger behind it, and is responsible for the data described in this policy. “Pledge”, “we” and “us” below mean Pledge.

This policy covers the Pledge site and the ledger behind it. It does not cover X, donate.gg's own site, donate.gg, pump.fun, pons.family, Robinhood or any other service Pledge reads from or pays through. Those services have their own policies, and what they do with your data is governed by them.

The ledger holds registered tokens, the fees claimed against them, what is owed to whom, and every attempt to pay it. In full:

Tokens

Mint address, name, symbol, image, description, and the fee sharing configuration read from the chain.

Recipients

The charity link taken from the token description, and the charity's public title, charity name and image.

Fees

Amount claimed, the claim's transaction signature, and when it settled.

Payouts

Amount owed, current status, and each attempt's transaction id and receipt.

Site requests

Ordinary server and CDN logs, including IP address and user agent, kept for security and debugging.

There is no account system, so there is no profile, no password, no email address and no contact record. Nothing on this list was typed into a form by the person it concerns.

Almost all of it is read from public sources. Token data comes from the chain and from the token's own metadata. The recipient charity comes from the description the deployer wrote, and its title, charity name and image come from the charity's public donate.gg page.

This is the part worth being direct about. If a token names you, Pledge holds a record about you that you did not give it and were not asked about. That is how the product works. It is also why a donation is announced publicly rather than quietly: the person it concerns should be able to find out that it happened.

Each field exists because a payment cannot be made or evidenced without it. The charity link identifies who is owed. The claim signature ties an obligation to the on-chain event that created it. The payout record is the receipt, and it is what makes the ledger auditable rather than merely asserted.

None of it is used to build a profile, to target advertising, or to make any automated decision about a person. There are no advertising or analytics trackers on this site.

No private keys and no seed phrases. No password or credential for your charity. No card, bank or payment instrument details: money moves through donate.gg, and Pledge never sees the instrument behind it. No government identity documents. No browsing profile, and no cross-site tracking.

The donation itself passes through donate.gg, since that is the rail. What reaches donate.gg is what a donation needs: the charity, the amount, and the token's name as the donor.

Infrastructure providers necessarily handle data in passing, including the hosting and database provider and the RPC provider the chain is read through. They act on Pledge's instructions and for no other purpose.

Data may be disclosed where the law requires it. Beyond that, nothing is sold, rented or shared. There is no data brokerage here, and nothing on the list in clause 2 that anyone would buy.

Registered tokens, amounts routed, and payout confirmations are meant to be seen. The transparency of the ledger is a feature of the product rather than an oversight, and the confirmation post is published on purpose.

None of that includes anything you gave Pledge privately, because you did not give it anything privately.

Ledger records are kept for as long as the ledger exists. They are the record of what was owed and what was paid, and deleting them would remove the evidence that a payment was made to the person it was made to.

Donations are tracked until they are made, or until the hold window ends and they pass to the protocol treasury. Server and CDN logs are kept for a short operational period and then discarded.

On-chain records are permanent and are outside anyone's control, including ours.

Access to the ledger is restricted, traffic is encrypted in transit, and treasury signing keys are held separately from the application. No system is perfectly secure, and Pledge does not claim otherwise. What limits the damage here is the shape of the data: there are no credentials, no payment instruments and no identity documents to lose.

Whether a charity accepts donations at all is a setting through donate.gg. Pledge honours it, and also keeps a do-not-fund list for organisers who ask.

You can ask Pledge to stop funding a charity you organise and to remove it from the site's surfaces. You can also ask for a copy of what the ledger holds about a charity, or for a correction if something is wrong. On-chain records cannot be deleted by Pledge or by anyone else, and a donation already made through donate.gg remains recorded by donate.gg.

Depending on where you live you may have further rights over personal data, and you may complain to your local data protection authority.

Pledge is not directed at children and is not intended for anyone under 18. Charities raised for a child are run by an adult charity; a charity will be removed from the site's surfaces at the request of its charity or the child's parent or guardian.

This policy may change as the product does. The version in force is the one published here, identified by the effective date and version at the top of the page. Material changes will be noted on the site.

Pledge is contactable at @launchonpledge on X and at admin@launchpledge.fun. A message sent anywhere else does not reach us.

Privacy questions, access requests, corrections and removal requests go to either.