PRIVACY NOTICE

Last updated: 27 September 2026

1. Who we are

This site is operated by Farah Shams, a sole trader based in the United Kingdom (the “controller”, “we”, “us”). We are the data controller for any personal data processed through this site.

For any privacy question or to exercise your rights below, send a direct message to Farah on Instagram (@fdntcaree) or TikTok (@fdontcare). Start your message with “Privacy request” and we will respond within one month. Instagram and TikTok also handle those messages under their own privacy policies.

2. What this site collects

Since 27 September 2026 this site has no forms, accounts, or payments, so we don't ask you for any personal data.

Technical data. Like any website, our hosting provider receives your IP address, browser type, and the page you requested so it can deliver the page and protect the site from abuse. Lawful basis: legitimate interest (running the site securely).

3. Cookies, analytics, and tracking

This site sets no cookies and stores nothing in your browser. It runs no analytics, site-speed monitoring, error tracking, or advertising pixels, and it loads no third-party scripts or fonts. That is why there is no cookie banner.

Links to social media platforms and other sites take you to those services, where their own privacy policies and cookies apply.

4. Data from before 27 September 2026

Until then the site had a contact form and accepted donations. We still hold the following from that period:

Contact form messages. Your name, email address, and the contents of your message, kept so we could read and reply to you. Lawful basis: legitimate interest (responding to you).

Donation records. The amount, currency, date, status, Stripe payment references, and the challenge the donation counted toward. If you opted in, also the display name you chose for the leaderboard, and your name and email address if you gave them. Lawful basis for the financial record: legal obligation (tax and anti-fraud record-keeping); for the optional details: your consent, which you can withdraw at any time. The leaderboard has been removed, so display names are no longer shown anywhere on the site.

Card details. Card numbers and CVCs were never sent to or stored by us. Stripe collected them directly in its payment form and we only received a tokenised reference.

Services we no longer use. On 27 September 2026 we switched off Cloudflare Web Analytics (cookieless traffic and site-speed statistics that kept no personal data), Sentry error tracking, and Upstash rate limiting.

5. Who else handles your data

  • Vercel: hosting. Processes request data such as IP addresses to serve the site.
  • Prisma: database hosting for the past messages and donation records described above.
  • Stripe: processed past donations. Stripe is the data controller for payment data; see stripe.com/privacy.
  • Sentry: holds error reports collected before 27 September 2026 until its retention period ends. Session replays were masked before they left your browser, so they contain no form inputs or page text.
  • Instagram (Meta) and TikTok: if you message us there, the platform handles your message under its own privacy policy.

Some of these providers process data outside the UK (typically in the EU or USA). Where they do, transfers are protected by the UK Addendum to the EU Standard Contractual Clauses or by adequacy regulations (for example, the UK-US data bridge). We do not sell or rent your data to anyone.

6. How long we keep it

  • Request logs: kept by Vercel for a short period under its own retention settings.
  • Contact form messages: kept until we have replied and resolved the conversation, then deleted in a periodic clean-up.
  • Donation records: kept for 7 years to meet UK tax and accounting record-keeping rules (HMRC).
  • Optional donation details (display name, name, email): kept with the donation record until you ask us to delete them.
  • Error reports in Sentry: deleted automatically when Sentry's retention period ends.
  • Direct messages on Instagram or TikTok: kept only as long as we need them to deal with your request.

The same periods apply to backups of our database.

7. Your rights

Under UK GDPR you have the right to:

  • Ask for a copy of the personal data we hold about you (subject access).
  • Ask us to correct data that's wrong.
  • Ask us to delete data where we no longer have a lawful basis to keep it. We can always delete the optional details stored with a donation, but the donation record itself must be kept for 7 years.
  • Object to processing based on legitimate interest.
  • Withdraw consent for any processing that relies on consent (for example, the optional details stored with a donation).
  • Ask for your data in a portable format.

To exercise any of these, send a direct message to Farah on Instagram (@fdntcaree) or TikTok (@fdontcare). We don't require ID for simple requests but may ask you to confirm details that match a donation record so we can find your data. Never send full card details in a message.

You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk. We'd appreciate the chance to put things right first.

8. Children

This site isn't directed at under-16s and we don't knowingly collect data from them. If you believe a child sent us data through the old contact or donation forms, contact us and we will delete it.

9. Changes

If we change anything material we will update the “last updated” date at the top of this page. The current version is always the one published here.