We count acts. Not people.

If you make a Random Act

We record anonymous events: that a Random Act was shown, which anonymous account number it was, whether someone continued by QR code or button, and when. If you later tell us you completed it, we record that too.

We don't record your name, email, IP address, location, device fingerprint or advertising identifier in these records, and they are never linked to our website analytics. There are no contributor accounts.

If you add an account

We store the contribution link encrypted, plus a one-way fingerprint so the same link can't be added twice. If you choose, we store a state (never a city or address). We don't ask for, collect, or copy anything about the child, and we don't ask who you are.

We never publish contribution links. Visitors only ever see an anonymous number and go through our short redirect link. Result pages are excluded from search engines, and there is no account directory.

When you continue to the official site

We send you to the official Trump Account contribution page. That system collects contributor information such as your name, email or phone, and payment details, under its own privacy policy. We never receive any of it, and we don't know whether or how much you contributed. Our pages set a no-referrer policy, so the official site isn't told which Random Act sent you.

Website analytics

We use Plausible Analytics to understand overall traffic: how many people visit each page, which sites send visitors, and broad device and location totals. Plausible uses no cookies, doesn't follow you across sites, and doesn't build a profile of you. It doesn't store your IP address; it uses it briefly, in a scrambled form that changes every day, to count unique visits and estimate a general location. We strip Random Act numbers from page addresses before anything is sent, so the analytics never show which account you were matched with.

Cookies and storage

Public pages set no cookies. Your browser's local storage remembers your most recent Random Act for up to two days so we can ask whether you completed it; that stays on your device. The admin area uses a functional session cookie for staff only.

Abuse prevention

To stop automated abuse, we keep short-lived counters keyed by a scrambled, rotating value derived from your connection. The address itself isn't written down, and the counters are deleted within a day. Our hosting infrastructure processes normal request metadata (such as IP addresses) to deliver the site and protect it from attacks.

Reports and removal requests

Link reports contain the reason you pick and an optional short note. Account-owner requests may include an email address so we can reply; we delete it once the request is handled. A link you paste into a removal request is used only to find the account and is not stored.

What we never collect

Questions? [email protected] or the account owner / privacy request page.