Privacy Policy

The Jada Bascom Foundation ("we," "our," or "us") is a 501(c)(3) nonprofit organization committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website jadabascomfoundation.org (the "Site") or interact with our services.

This policy explains our practices and your choices. Where consent is required, we ask for it separately. You can change the available preferences or contact us about your privacy rights.

Personal Information You Provide

We may collect personal information that you voluntarily provide when you:

• Fill out contact forms or volunteer applications
• Make a donation through our website
• Subscribe to our newsletter or updates
• Register for events or programs
• Use an authorized private contributor workflow for The Marrow Walk
• Communicate with us via email or other channels

This information may include:

• Name and contact information (email, phone, address)
• Payment information (processed securely by third-party providers)
• Communication preferences
• Any other information you choose to provide

Information Collected Automatically

When you visit our Site, we may automatically collect certain information, including:

• Device information (browser type, operating system)
• IP address and approximate geographic location (country level)
• Pages visited, time spent on pages, and navigation patterns
• Referring website or source

Device geolocation

This site does not request, access, or collect device geolocation data.

Country and optional age choices in the registry handoff are temporary interface state. We do not store the age choice or use it for advertising. If you follow a registry link, our first-party counters add to separate daily totals by visitor country and by selected registry. They do not store the age choice or an individual click record.

Private Marrow Walk Contributor Intake

An authorized walk contributor may submit one private daily package for editorial review. A package may include a selected route stop, a voice note, photos, short clips, private notes, and claimed miles or steps. The intake form has no location field and does not request geolocation.

Source files remain in private Cloudflare R2 storage and are not public merely because they were uploaded. Jay, the authorized publisher, reviews the copy and selects which media, if any, may become public. Unapproved source media, notes, and draft transcripts are not included in the public walk experience.

When the transcription service is available, the private voice note may be processed by Cloudflare Workers AI to create a draft transcript. Transcription is editorial assistance only. It does not publish content, approve claims, or replace human review, and a transcription failure does not prevent manual review.

We use the information we collect to:

• Process donations and provide tax receipts
• Respond to inquiries and provide support
• Send updates about our programs, events, and impact
• Improve our website and services
• Analyze website usage and trends
• Comply with legal obligations
• Protect against fraudulent or unauthorized activity

We use cookies and similar tracking technologies to enhance your experience on our Site. Cookies are small data files stored on your device that help us remember your preferences and understand how you use our Site.

We use the following types of cookies:

• Essential Cookies: Required for the Site to function properly
• Analytics Cookies: Help us understand how visitors interact with our Site (via Google Analytics)
• Functional Cookies and Local Storage: Remember preferences and settings, including whether the optional Marrow Walk map is off and local pledge checkmarks
• Private Intake Cookies: Maintain and protect an authorized contributor's path-scoped Marrow Walk session

You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of our Site.

The Marrow Walk pledge checkmarks stay in that browser and are not used to create an account or public supporter-mile total. Clearing Site data removes those checkmarks and the remembered map-off preference.

We record eligible outbound registry requests to understand how our referral service is used. We keep separate totals for each UTC calendar day: one by the approximate visitor country supplied by our hosting provider, and one by the canonical identifier of the selected registry. We do not store a link between a visitor’s country and registry or individual click records. These counters do not store IP addresses, device identifiers, precise click times, referrers, page addresses, health information, advertising IDs, or campaign and route-stop details.

These are approximate counts of recorded requests. They can include repeated requests and undetected automation, and omit legitimate requests because of preferences, filtering, rate limits or measurement failures. They are not unique people, verified arrivals, registrations or donations.

Country totals have been recorded since September 5, 2026. Registry totals are prospective only. When completed-day counts exist, their public report shows the first completed UTC day with recorded registry counts; that date does not establish complete coverage from the start of that day. Earlier country totals have no registry breakdown and are not backfilled into registry totals.

These totals are separate from optional analytics and advertising cookies. Declining those cookies does not stop these daily counts. You can separately exclude this browser from both daily totals below or in Cookie Preferences. We save only that preference in a necessary cookie; clearing it restores the default. Known bots, previews and link checks are excluded.

Public reports cover completed UTC days. Countries with fewer than five recorded referrals are grouped. The prospective registry report publishes up to three registries with at least five recorded referrals each and pools all remaining counts as Other.

Earlier registry-click records remain in our internal historical reporting; some contain timestamps, registry details and campaign attribution. They are not made anonymous by the daily counters. Hosting and security services may separately process connection data under their own retention arrangements.

We use bounded first-party events to understand use of the Marrow Walk experience. These other events may record the event type and time, campaign slug, an optional public waypoint slug, an allowlisted material identifier, an externally assigned registry campaign code, and consent-permitted UTM source, medium, campaign, content, or term.

Marrow Walk events do not include an age response, health information, exact location, private intake media or notes, access tokens, or user identity. A registry click records an outbound handoff; it does not mean that a person completed registration.

We work with trusted third-party service providers to operate our Site and programs:

• GiveButter: Processes donations securely. Their privacy policy governs donation transactions.
• Google Analytics: Provides website analytics subject to the applicable consent settings. Our explicit registry-conversion event is sent only after an analytics choice permits it. Google may process identifiers and other technical data under its own policies.
• Cloudflare: Provides website security, performance, private object storage, and optional Workers AI draft transcription for the authorized Marrow Walk contributor workflow.

These providers have their own privacy policies governing their use of your information. We encourage you to review their policies.

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (HTTPS/TLS)
• Secure data storage with access controls
• Regular security assessments
• Limited access to personal information on a need-to-know basis

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including:

• Donation records: Retained as required by IRS regulations (typically 7 years)
• Communication preferences: Until you opt out or request deletion
• Website analytics and registry counts: Retention depends on the reporting purpose and the service holding the records, subject to applicable privacy rights and legal obligations. Earlier registry-click records remain in our historical reporting.
• Marrow Walk private source files: Scheduled for deletion 30 days after the package is published or discarded; incomplete abandoned uploads may be removed earlier
• Marrow Walk intake access: Revoked when no longer needed and no later than seven days after the walk finale
• Marrow Walk map and pledge preferences: Remain in that browser until changed or Site data is cleared

You have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Opt-out: Unsubscribe from marketing communications at any time

To exercise these rights, please contact us using the information provided below.

Our Consumer Health Data Privacy Policy explains how we handle information about health, including visits to our disease library and other health pages, and the rights Washington and Nevada residents have over it.

Our Site is not directed to children under 13. We do not knowingly collect personal information from children under 13 without parental consent. If you believe we have collected information from a child under 13, please contact us immediately, and we will take steps to delete such information.

Our educational materials are designed for classroom use under teacher supervision and do not collect personal information from students.

Some browsers offer a "Do Not Track" (DNT) feature. Our Site does not currently respond to DNT signals. However, you can control tracking through your browser settings and cookie preferences.

California residents have additional rights under the California Consumer Privacy Act (CCPA). We do not sell personal information to third parties. California residents may request information about our data practices by contacting us.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.