Privacy policy draft.
The public site should minimize personal data, avoid ad tracking, and keep donor identities out of public transparency views.
Current prototype data
The local prototype stores site content, admin records, and ledger entries in a local JSON file. It does not process cards or publish donor names.
Production requirements
Add final controller details, hosting region, retention periods, processor details, rights requests, cookie policy, and donation-provider privacy terms.