Last updated November 13, 2026
The Golden Goblet Guild (“the Guild”, “we”) is a nonprofit organization in Chico, California. This page explains what this website collects, why, who else handles it, and the choices you have.
The short version: we collect only what you give us through our forms, donations and accounts. We use it to run the Guild and to stay in touch with you. We also use Google Analytics to count visits and see which pages people read. We never sell your information, and we do not use advertising trackers.
What we collect and why
The email list
When you sign up on our homepage, we keep your email address. If you leave “Send me Guild news by email” ticked on one of our other forms, we also add your name and email address to the list.
We use the list to send occasional news about Guild gatherings, calls for artists and volunteers, and ways to help. Every newsletter will include a way to unsubscribe, and you can ask us to remove you at any time.
Artist, vendor, volunteer and contact forms
These forms ask for your name and email address, plus the answers you choose to give: for example your phone number, the kind of art you make or goods you sell, links to your work, when you are free, and whether you are 18 or older.
Each submission is stored privately on our website, and a copy is emailed to the Guild’s inbox. We use it to reply to you, to plan events, and to keep track of people who would like to take part.
Donations
When you donate, we collect your name, email address and billing address (and your phone number, if you choose to give it), along with the amount, whether the gift is monthly, and whether you chose to cover the processing fee.
Card details go directly from your browser to our payment processor, Stripe. We never see or store your full card number. If you give monthly or choose to save a card, Stripe keeps the card and our site keeps only a reference to it so future gifts can be charged.
We email you a receipt for every gift.
Our Donate page shows a list of recent supporters by first name and amount. Tick “Do not show my name in the leaderboard” when you give, and you will not appear on it.
Accounts
Donating creates an account on this site, so you can see past gifts and manage or cancel a monthly gift. Your account holds your name, email address, billing details and donation history. If you upload a profile photo, we store that too. You can update your details from your account page at any time.
Comments and profile pictures
If you leave a comment, we keep your name, email address, website (if given), the comment itself, your IP address and your browser’s user agent string, to help stop spam.
Where a profile picture is shown and you have not uploaded one, your email address is turned into a scrambled string (a “hash”) and sent to Gravatar, a service run by Automattic, to see whether you have a Gravatar picture. Gravatar’s privacy policy is at automattic.com/privacy.
Security and server logs
Like every web server, ours keeps basic logs of each visit: IP address, the page requested, the time and the browser used.
We use Wordfence to protect the site from attacks. When it blocks suspicious traffic or a failed login, it records the IP address and request. It shares the IP addresses of attackers with the Wordfence network (run by Defiant, Inc.) so other sites can block them too. For accounts that can manage the site, it also checks passwords against lists of known leaked passwords, using a partial, scrambled form of the password rather than the password itself.
Visitor statistics (Google Analytics)
We use Google Analytics, connected through Google’s Site Kit plugin, to understand how the site is used: how many people visit, which pages they read, how they found us (for example a link on Facebook), roughly where they are (city or country) and what kind of device and browser they use.
To do this, Google Analytics sets cookies in your browser and receives your IP address, which Google uses to estimate your location. We see only totals and trends, never who you are, and we do not send Google your name, email address or anything you type into our forms. Visitors who are signed in to the site are not counted.
We have not linked Google Analytics to Google Ads or AdSense, and we do not use it for advertising. Google’s privacy policy is at policies.google.com/privacy, and this page explains how Google uses information from sites like ours. You can opt out of Google Analytics on every website with Google’s opt-out browser add-on, or by blocking cookies in your browser.
We also use Google Search Console, which shows us, as totals, which Google searches lead people to the site. It does not collect anything from your visit.
Cookies
We use the cookies the site needs to work, plus cookies that tell us how the site is used:
- Donating: WooCommerce, the software behind our Donate page, sets cookies that remember what is in your basket while you complete a gift.
- Signing in: if you sign in, cookies keep you signed in for two days, or two weeks if you tick “Remember Me”.
- Comments: if you leave a comment and choose to, cookies remember your name and email address for a year.
- How you found us: WooCommerce records where your visit came from (for example a link on Facebook) in short-lived cookies. If you then donate, that source is saved with the gift, so we can see which outreach works. It is never used for advertising.
- Payments: on the Donate and checkout pages, Stripe sets cookies to help prevent fraud.
- Visitor statistics: Google Analytics sets cookies (named _ga and _ga_ followed by an ID) that tell one visit from another. They last up to two years unless you clear them.
We do not use a Facebook pixel or any advertising cookies.
Who else handles your information
We share information only with the services that help us run the site, and only as much as each one needs:
- Stripe processes donations. See stripe.com/privacy.
- Our email provider receives the copies of form submissions sent to the Guild’s inbox, and the receipts and account emails we send you.
- Our hosting provider runs the server this website and its data live on.
- Google provides Google Analytics and Search Console, as described above.
- Wordfence (Defiant, Inc.) and Gravatar (Automattic), as described above.
- WooCommerce (Automattic) receives general statistics about how our shop software is set up. This does not include your personal information.
When we begin sending newsletters, we will use an email service to send them. It will hold the names and email addresses on our list for that purpose only, and we will name it on this page.
We may also share information if the law requires it.
We never sell or rent your information, and we do not share it with anyone for their own marketing.
Links to Facebook, Instagram and calendar services take you to those sites, and their own privacy policies apply there.
How long we keep it
- Email list: until you unsubscribe or ask to be removed.
- Form submissions: for as long as they help us plan events and stay in touch, or until you ask us to delete them.
- Donation records: for as long as we need them for our financial records, even if you close your account.
- Accounts: until you ask us to close yours.
- Visitor statistics: Google keeps the detailed Analytics data for the period set in our account, no longer than 14 months; after that only totals remain.
- Security logs and backups: for a limited time, after which they are deleted or replaced.
Your choices
- Unsubscribe from the email list at any time, using the link in any newsletter or by contacting us.
- See, correct or delete the information we hold about you: contact us and we will reply within 30 days. We may need to keep donation records for accounting.
- Update your account details yourself from your account page.
California residents: we do not share personal information with other companies for their own marketing. Some browsers send a “Do Not Track” signal. Our site does not currently change what it does when it receives one, and Google Analytics still runs. To stop Google Analytics, use Google’s opt-out add-on linked above or block cookies. Google may collect information about your activity on our site, and Google’s own policy explains how it handles information across the websites that use its services.
Children
This site is not meant for children under 13, and we do not knowingly collect their information. Volunteers under 18 need a parent or guardian to sign off. If you think a child has sent us information, let us know and we will delete it.
Keeping it safe
Access to the information on this site is limited to the people who run the Guild. Payment details are sent straight to Stripe over an encrypted connection. No website is perfectly secure, but we take reasonable care and keep the site and its software up to date.
Changes to this policy
If we change how we handle information, we will update this page and the date at the top.
Contact us
Questions about your information or this policy? Send us word and we will answer within a few days.