Privacy policy

What this policy is about

This policy explains what information the Shards of light association receives through the website, where it is kept, who sees it, and what your rights are. We wrote it in plain language, because it matters to us that you know exactly what happens with your details.

What information we receive

Only what you write yourselves in one of the two forms on the site:

  • Contact form: name (a first name is enough), email, and if you wish – phone and subject, and the message itself.
  • Event registration form: name, email, phone (optional), number of participants, and the event you registered for.

Please do not include medical information or details about the circumstances of the assault in the forms.

What we do not collect

There are no tracking or advertising cookies on the site, no statistics tools such as Google Analytics, no ads, and no sign-up with a password. The fonts are also stored on the site itself, so your browser does not contact Google to display them.

Like any website, the hosting provider (Netlify) records basic technical data about visits – for example IP address and time of visit – for security and operational purposes only.

Where the information is kept and who sees it

  • Netlify – the company that hosts the site. Every message and registration is stored with it, on servers outside Israel.
  • The association's email inbox – every message and registration is also sent by email, and your replies to the emails we send arrive there too.
  • A Google Drive spreadsheet of the association – event registrations are kept in a spreadsheet, in a separate tab for each event, with the registration status, the name of whoever holds the introductory call, and a log of actions (for example "invitation sent", "attendance confirmed").

Only board members and volunteers authorised by the association see the information. We do not sell it, do not share it for advertising, and do not keep it anywhere else.

External services

  • Netlify – hosting the site and receiving the forms. Netlify runs every submitted form through an automatic spam check by the Akismet service, and this check cannot be turned off.
  • Google – the registration spreadsheet, and sending emails to registrants from the association's Google account (request received, registration confirmed, waiting list, invitation when a place opens up, and a reminder). Also an alert to the association when an event is full.
  • CallMeBot – sends the association a WhatsApp message when an event is full. The message includes only the event name and the number of places – none of your personal details.
  • Bit and PayBox – only if you choose to donate with them (see "Donations").

Automatic request to Google on event pages: when you open an event page or the timeline, your browser contacts a Google service (Google Apps Script) by itself to check how many places are left. No personal details are sent – only the event's identifier – but as with any request to a server on the internet, Google sees the device's IP address. The same applies to the page opened from the buttons in our emails to registrants.

Event pages include links to open the location in Moovit, Waze and Google Maps, and to add the event to Google Calendar, and the site has links to WhatsApp and social networks. They open only if you click them, and from that moment the privacy policy of that service applies.

Donations

The site itself does not collect or store donor details.

  • Bank transfer – the donations page shows the association's bank account details. The transfer is made by you, at your bank. In its bank account the association sees only what the bank shows about the transfer (for example the sender's name and the amount).
  • Bit and PayBox – the links open the app, and the payment is made there according to its privacy policy. The association receives only what the app shows about the payment.
  • Receipts – if you ask for a receipt, we will use the details you send us only to issue it.

Why we use the information

  • To get back to you in reply to your message.
  • To manage event registration: to arrange an introductory call with you, confirm the registration, manage a waiting list (and invite you when a place opens up), and close registration when the event is full.
  • To send you emails about your registration: request received, confirmation with a calendar file, a reminder the day before the event, and an update if anything changes.

Every such email lets you cancel the registration or reply to us. We will not send you promotional messages or a newsletter unless you explicitly asked for it.

How long we keep it

Messages are kept for up to 3 months after we have handled them, and event registrations for up to 2 months after the event. After that they are deleted from Netlify, the email inbox and the spreadsheet.

Your rights

You can ask to see what information we have about you, to correct it or to delete it – and to cancel an event registration (also with the "I can't make it" button in our emails) – at any time. Write to us at the email address at the bottom of this page, and we will handle the request within 30 days at the most.

Security

The site is encrypted (https), the forms are protected against spam, and access to the email inbox and the spreadsheet is limited to people authorised by the association. No method is perfect, but we do our best to protect the information.

Changes to this policy

If we add anything to the site that involves information – for example a tool for counting visits – we will update this page beforehand and change the date at the top.

Questions about privacy

For any question or request about privacy: resisior2026@gmail.com, or through the contact page.