Privacy Policy — The Mission Mall

1. Who we are

The Mission Mall ("we", "us", "our") operates missionmall.org — a cause-driven shopping portal that directs purchases toward funding Trinity Kits (medicine, meals, and hope) for children in crisis.

2. Information we collect

Account info you provide: name, email, and any profile details.
Transaction info when you sponsor a kit or check out (processed by Stripe — we never store full card numbers).
Referral data if you arrive via a ?ref= link.
Usage data: pages visited, device, browser, anonymized IP for security and analytics.
Affiliate click data: when you click an outbound retailer link, the retailer (Amazon, Walmart, Target, Etsy, etc.) and their network (e.g., Amazon Associates, Awin, Impact) may set their own cookies.

3. How we use it

Operate your account, process sponsorships, and send receipts.
Track affiliate commissions so we can credit funds to Trinity Kits.
Send mission updates and transactional emails (you can unsubscribe anytime).
Improve the site and prevent abuse.

4. Cookies & tracking

We use first-party cookies for login sessions and referral attribution. Outbound affiliate links to retailers and their networks (Amazon Associates, Awin, Impact, Rakuten, CJ) place their own cookies on your device when you click. See those companies' privacy policies for details.

5. Sharing

We do not sell your personal information. We share limited data only with service providers who help us run the mall: Stripe (payments), Supabase / Lovable Cloud (hosting & database), email delivery providers, and affiliate networks (only the click event, never your account info).

6. Your rights

You can request access, correction, or deletion of your data at any time by emailing hello@missionmall.org. Residents of the EU/UK (GDPR) and California (CCPA) have additional rights including data portability and opting out of "sale" of personal info — though we do not sell data.

7. Children

The Mission Mall is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has given us info, contact us and we'll delete it.

8. Security

We use HTTPS, encrypted databases, row-level security, and reputable processors (Stripe, Supabase). No system is perfectly secure, but we take reasonable measures to protect your information.

9. Changes

We may update this policy. The "Last updated" date above will reflect changes. Continued use means you accept the updated policy.

10. Contact

Questions? Email hello@missionmall.org.