Privacy policy.

Effective October 1, 2026.

Who we are

Project HeartPack is a student-led, volunteer-run initiative based in the Dallas–Fort Worth area of Texas. We are not yet a registered 501(c)(3). In this page, “we” and “us” mean Project HeartPack, and “the site” means projectheartpack.com.

The short version

• The site has no accounts, no forms, and no email signup.
• We do not set cookies of our own, and the site runs no analytics, advertising, or tracking scripts.
• We never sell personal information, and we never share it for marketing.
• The only personal information we hold about donors is what Zeffy shows us when a gift arrives.

When you visit the site

The site is hosted on Vercel. Like almost every web host, Vercel keeps standard server logs: your IP address, your browser and device type, the pages requested, and the time. That is how the site gets delivered to you and how problems and abuse get spotted. We do not use those logs to follow or profile visitors.

The site’s typefaces, Archivo and Newsreader, load from Google Fonts. That means your browser asks Google’s servers for the font files, and Google receives your IP address and browser details while doing so. Google’s privacy policy covers what it does with that.

We do not set any cookies ourselves. Nothing on the site asks you for your name, your email, or anything else about you.

Links to other services

The site links to Instagram. It is a plain link, so nothing is sent to Instagram unless you click through. The Give page and the Kits page are different: each embeds a donation form from Zeffy, so loading either page makes your browser connect to Zeffy, which may receive your IP address and set its own cookies. Their privacy policy applies to that form, not this one.

Donations

We take donations through Zeffy, as the Give page and the Kits page explain. We never see your card or bank account number. We see what Zeffy shows us: usually your name and the amount, and sometimes your email address, phone number, or a note you chose to add.

We use that to thank you, to keep honest financial records, and to account for how the money is spent. We keep those records for as long as we need them for that purpose. We do not sell donor information or share it for marketing, and we do not publish a donor’s name without asking first.

If we add another way to give later, such as Zeffy, that service will collect its own information under its own privacy policy, and we will update this page.

When you email us

If you write to info (at) projectheartpack (dot) com, we keep your message and your reply address so we can answer and remember what we discussed. We have no newsletter or mailing list, and we do not add you to anything.

The view counts on our homepage

The homepage shows the combined number of views on our own Instagram and TikTok posts. Our website’s server gets that number from Instagram’s and TikTok’s official APIs, using access that we, as the owners of those accounts, granted to the site. It reads only view counts on posts on our own accounts, and it keeps the result for about an hour so it is not asking the platforms on every page load.

This feature involves no information about you. Your browser asks our site for a single number; nothing about you is passed to Instagram or TikTok. Visitors never log in with either service. We do not collect or store data about the people who watch or follow our accounts.

The hygiene kits progress bar

The Kits page, the top of the homepage, and the since-April-2025 totals on the homepage and Give page show how much has been raised, using the hygiene kits campaign total. Our website’s server reads that total from Zeffy’s read-only API, using a key kept on the server, and keeps the result for about a minute. It reads only the campaign’s overall total and goal.

No donor names, emails, or individual gifts are read or shown, and nothing about you as a visitor is sent to Zeffy by this feature. (Zeffy still receives your IP address when the donation form loads, as described above.)

What we do not do

We do not sell personal information. We do not share it except with the service providers needed to run the site and take donations (Vercel, Google Fonts, and Zeffy, as described above), or when the law requires it.

Children

The site is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has sent us personal information, email us and we will delete it.

Your choices

You can email us to ask what information we hold about you, to correct it, or to have it deleted. We will reply as soon as we can. Some donation records may need to be kept for bookkeeping, and if that is the case we will tell you.

Changes to this page

If what we do changes, we will update this page and the date at the top. Our terms of use are a separate page.

Contact

Questions about privacy: info (at) projectheartpack (dot) com or @projectheartpack on Instagram. A student will answer.