Privacy policy

Ihsan Quest, 30 N Gould St, STE R, Sheridan, WY 82801, United States. For any question about your data: c***@ihsan.quest.

• When you fund a project: your email, first and last name, the language of the page, the projects funded and their personalisation (name and message on the sign) and, if you give it, your WhatsApp number.
• Payment: it is processed by Stripe. We receive the amount, currency and status of the payment, never your card number.
• Your donor account: your email and password, handled by our login provider (we never see it).
• The contact form: your name, email, message and, if you give it, a project number. To block abuse, we keep an encrypted fingerprint of your IP address, deleted after 30 days.
• Your review: the rating, comment and signature you choose.
• Statistics: simple counters (projects viewed, basket additions), with no cookie, no IP address and no identifier.
• Audience measurement, only if you accept it: Google Analytics records the pages viewed, where the visit comes from, the device and the approximate country, with a random identifier. Never your email or the content of your projects.

• To carry out the funded project, send you progress emails and the proof, and give you access to your account (performance of the contract).
• To keep our accounts (legal obligation).
• To send you a single reminder if your payment did not go through, to ask for your review after completion, publish project pages and protect the site against abuse (legitimate interest).
• To let you know on WhatsApp when your project is completed, if you gave your number (consent, which you can withdraw in your account).
• To measure the site's audience and improve it, if you accept it (consent, which you can withdraw at any time with “Cookie settings” at the bottom of the page).

By default, a funded project has a public page: project type, country, dates, photos and videos, name and message on the sign and, once published, your review. It never shows your email, the amount paid or your contact details.

At checkout, you can tick the box to keep your projects private. After payment, write to us to change a project's visibility.

Project photos and videos may also be used in our communication (website, social media, advertising); for a private project, without ever showing the sign or the name.

If you put another person's name on the sign, make sure they or their family do not object.

Only our team and the providers needed for the service have access to it, each for its own task:

• Stripe: payment, receipt and invoice.
• Supabase: database and login to your account.
• Vercel: website hosting.
• Cloudflare: storage of project photos and videos, and spam protection of the contact form (Turnstile).
• o2switch: sending emails.
• Meta (WhatsApp): project completion message, if you gave your number.
• Esri: satellite map images on project pages, loaded by your browser, which sends them your IP address.
• Google: audience measurement (Google Analytics), only if you accept it; font of the payment page, loaded by your browser.
• Our partner on the ground receives what it needs to carry out the project (model, options, name and message on the sign), never your email or contact details.

Ihsan Quest and several of its providers are based in the United States. These transfers are covered by the safeguards provided by the GDPR, such as the European Commission's standard contractual clauses or the Data Privacy Framework.

• Funding data and invoices: for the duration of the project, then for the period required by our accounting obligations.
• Donor account: as long as your account exists; you can ask for it to be deleted at any time.
• Contact messages: for as long as needed to follow up the conversation; you can ask for them to be deleted.
• Contact form IP fingerprint: 30 days.
• Basket: 30 days, in a cookie in your browser.
• Audience measurement: 2 months in Google Analytics.
• Your cookie choice: 6 months, then we ask you again.

Our cookies are used to make the site work, with no advertising. The only cookie that needs your consent is the audience measurement one (Google Analytics): it is only set if you accept it in the banner, and you can change your mind at any time with “Cookie settings” at the bottom of the page.

• Chosen language (iq_locale) and currency (iq_currency): 1 year.
• Basket (iq_my_projects, iq_basket_count): 30 days.
• Login to your account: for your session.
• Payment page: Stripe cookies, for payment security and fraud prevention.
• Your choice (iq_consent): 6 months.
• Audience measurement (_ga, _ga_*), only with your consent: 13 months at most.

You can access your data, correct it, have it deleted, restrict its use, object to its processing or ask for a copy. Write to us at c***@ihsan.quest: we answer within one month.

You can also lodge a complaint with the data protection authority of your country.

We may update this policy: the date of the last update is shown at the top of the page.