Privacy Policy

Scope and operator

This policy covers this public Ethical Capacity Lab website, its DoGoodie and Liberation Network pathways, and the forms implemented here. The public operator name is The Ethical Capacity Lab. No unprovided legal entity, registration, or physical address is claimed.

Information collected

The challenge, builder, Liberation, partnership, contact, and concern forms collect the fields visibly labeled on those forms. The submission also identifies the form type, source page, and consent version. Concern reports may omit name and email unless follow-up is requested.

A honeypot and limited request metadata may be used to prevent spam and repeated submissions. Do not submit passwords, private keys, account credentials, health records, legal case files, financial-account data, private political records, or information you are not authorized to share.

Purpose and use

Information is used only to review, route, respond to, protect, or administer the pathway requested; maintain consent and abuse-prevention records; and meet applicable operational or legal obligations. Form information is not published automatically and is not used for automated matching or scoring.

Processors and storage

This website does not operate a submissions database. After client and server validation, form information is sent to Formspree for processing, delivery, spam controls, and storage according to the configured Formspree account and settings. Formspree is therefore a third-party processor for every enabled website form. The Operations Hub separately handles 30-minute consultation requests at hub.ethicalcapacitylab.org and may use its own systems and privacy notice. The hosting provider may process ordinary server logs.

Formspree endpoint configuration remains server-side. If the appropriate endpoint is missing or Formspree rejects a request, the website reports that nothing was received. Concern reports require a separate Formspree endpoint so they are not routed through the shared normal-form destination.

Retention

No final legal retention schedule has been approved. Formspree retention and deletion settings must be reviewed by category: general inquiries and applications, declined or closed submissions, and concern reports. Information should be deleted when no longer reasonably needed, subject to safety, consent history, disputes, and applicable obligations.

Security limitations

The implementation uses validation, minimized fields, security headers, server-only endpoint configuration, and separate concern routing. No internet service, including Formspree or the Operations Hub, can promise absolute security. Avoid sending sensitive information and use the contact route to ask for a safer method when necessary.

Cookies and analytics

No third-party analytics, advertising tracker, session recording, fingerprinting, or non-essential cookie is enabled. A provider-agnostic event interface exists but is disabled by default. Hosting logs may still include request time, page, browser, device, network address, and approximate location.

Rights and requests

Depending on applicable law, you may ask to access, correct, delete, or limit information associated with you, or withdraw optional publication permission. Reasonable identity verification and lawful retention exceptions may apply. Use the contact page for a privacy request.

Third-party links and cross-border processing

Formspree, the Operations Hub, the current Impact Hack Google Forms, and other external destinations have their own terms and may process information in other countries. Review the relevant destination and privacy information before submitting. This website does not control every third-party security, location, or retention practice.

Children and updates

The current Impact Hack is limited to adults age 18 or older. The site is not designed to collect personal information from young children. This policy will be updated when processors, forms, retention, or operations materially change.