Privacy Policy

We collect only what we need to run MAWL and keep it safe:

• Account details — your name, email address, password (stored encrypted), and anything you add to your profile such as a photo, phone number, location or bio.
• Activity on MAWL — gifting cycle entries, marketplace orders, crowdfunding campaigns and pledges, business listings, posts and messages.
• Payment and wallet records — deposits, payouts, transfers and withdrawals. Card payments are handled by our payment processor, Stripe; we never see or store your full card number.
• Sign-in with Google or Facebook — if you use it, we receive your name, email and profile picture from that provider.
• Technical data — IP address, browser and device type, and sign-in times, used for security and to prevent fraud.

• To create and run your account, wallets, and the services you use.
• To process payments, payouts and withdrawals, and to keep accurate financial records.
• To send you account emails — verification, receipts, payout notices and security alerts — and, only if you opt in, news and offers.
• To keep MAWL safe: detecting fraud, abuse and suspicious sign-ins, and enforcing our Terms of Service.
• To improve MAWL and fix problems.

We do not sell your personal information. We share it only:

• With other members where the feature needs it — for example, a vendor sees the name and delivery address on an order you place, and campaign backers can see a campaign creator's public profile.
• With service providers who help us run MAWL, such as payment processing, email delivery and secure hosting. They may use it only to provide their service to us.
• When the law requires it, or to protect the rights and safety of our members and MAWL.

MAWL uses a small number of cookies and similar browser storage:

• Essential cookies keep you signed in and protect your account. MAWL can't work without them.
• Preference storage remembers choices such as light or dark mode.

We don't use advertising cookies to track you across other websites. You can clear cookies in your browser at any time; you'll then need to sign in again.

We keep your information while your account is open. If your account is deleted, it can be restored for 30 days. After that, your personal details (name, email, phone, photo and password) are permanently removed.

Financial records — payments, payouts and wallet transactions — are kept in anonymised form after deletion, because we need accurate accounts and may be legally required to keep them.

• See and update your details at any time from your profile settings.
• Control emails — turn off notifications and marketing emails in your settings. Essential account and security emails will still be sent.
• Close your account — contact us and we'll delete it as described above.
• Request a copy of the personal information we hold about you by emailing us.

Passwords are stored encrypted, connections to MAWL are encrypted, and sensitive actions such as withdrawals have extra checks. No system is perfectly secure, so please use a strong, unique password and tell us right away if you notice anything unusual on your account.

MAWL is for people aged 18 and over. We don't knowingly collect information from children. If you believe a child has created an account, please contact us and we'll remove it.

We may update this policy as MAWL grows. When we make important changes we'll let you know by email or on the site, and the date at the top of this page will change.

Questions about your privacy? Email us at info@mawl.org.