PrismaOSDonate

Privacy Policy

How we collect, use, disclose, and protect personal information, and the choices available to you.

Last updated October 21, 2026

This Privacy Policy describes how PrismaCorp Foundation, Inc. ("PrismaCorp," "we," "us," or "our") collects, uses, discloses, and protects personal information in connection with theprismacorp.org and its subdomains (including PrismaOS, our standard website, and PrismaSpace), our mobile application, and the forms and features we make available through them (collectively, the "Services"). By using the Services, you acknowledge that you have read and understood this Privacy Policy. This Privacy Policy is incorporated into our Terms of Use.

1. Summary of Key Points

  • We collect personal information only when you choose to provide it through a form, together with limited, privacy-protective analytics on certain parts of the Services.
  • We do not sell or rent personal information, and we do not use it for targeted advertising.
  • Respawn supply requests receive heightened protection. We do not disclose them to law enforcement, landlords, employers, family members, or any other third party except as described in Section 5, and we do not retain your IP address with a request.
  • You may request access to, correction of, or deletion of your personal information at any time by emailing legal@theprismacorp.org.

2. Information We Collect

Information You Provide to Us

  • Volunteer applications: your name and email address, and any optional information you choose to provide, such as your phone number, pronouns, city or region, interests, availability, a message, and a résumé.
  • Contact form: your name, email address, subject line, and message.
  • Mailing list: your email address and, if you provide it, your name.
  • Respawn supply requests: your email address; a name, if you choose to provide one; the supplies and approximate quantities you request; your preferred method of receiving them; a mailing address, only if you ask us to ship supplies to you; whether you would like a training walkthrough; and any notes you add.
  • PrismaSpace comments: the display name and comment you submit.

Information Collected Automatically

  • Form security data: when you submit a volunteer application, contact message, or mailing list sign-up, we record the IP address and browser type associated with the submission to detect and prevent spam and abuse. We do not record this information with Respawn supply requests. For PrismaSpace comments, we retain only a one-way cryptographic hash of your IP address, which we use to limit how frequently comments may be posted.
  • Visit counts: we use Ahrefs Web Analytics, a cookieless service that counts visits and page views without identifying individual visitors. This is the only analytics tool that runs on Respawn pages.
  • Site analytics (excluding Respawn pages): on other parts of the Services, we may use PostHog to understand how the Services are used, including pages viewed, clicks, errors, performance data, and session recordings in which all form entries are masked. We do not use this information to identify you. PostHog is paused whenever Respawn is open in PrismaOS or our mobile view, and it stops when you use the Quick Exit button.
  • Hosting and security: Cloudflare, which hosts the Services, processes technical information such as your IP address to deliver content and protect the Services against attacks. When you submit a form, Cloudflare Turnstile uses your IP address and browser characteristics to verify that you are not an automated program.
  • Mobile application: if the app crashes, it may send a crash report through Sentry. Crash reports do not include your personal information, and you may disable them at any time in the app's Settings.

Information Stored Only on Your Device

Certain information is stored only in your browser or on your device and is never transmitted to us, including your display preferences, your PrismaOS desktop layout, your PrismaSpace customizations, drawings, game progress, and an in-progress draft of a volunteer application (which is cleared once you submit it). You can delete this information by clearing your browser's site data or by selecting "Clear data" in PrismaOS. The Photo Booth feature accesses your camera locally on your device only, and photos are never uploaded to us.

3. How We Use Information

We use the personal information we collect to:

  • respond to your inquiries and fulfill your requests, including processing volunteer applications and supply requests;
  • send our email newsletter, if you have subscribed to it;
  • review and publish PrismaSpace comments;
  • protect the security and integrity of the Services and prevent spam, fraud, and abuse;
  • analyze and improve the Services; and
  • comply with our legal obligations as a tax-exempt nonprofit organization.

4. How We Disclose Information

We do not sell, rent, or trade personal information, and we do not share it with data brokers or for targeted advertising. We disclose personal information only as follows:

  • Service providers. We use a limited number of service providers that process information on our behalf, subject to their own privacy and security terms: Cloudflare (website hosting, database and file storage, email delivery, and spam protection); Ahrefs and PostHog (the analytics described above); Sentry (mobile app crash reports); Sanity (content management; Sanity does not receive form submissions); our email provider (delivery of messages you send to us); and our donation platform (see Section 6).
  • Legal requirements. We may disclose information when required by law, subpoena, or court order, subject to the additional Respawn protections in Section 5.

5. Additional Protections for Respawn Supply Requests

Respawn exists so that people can obtain life-saving supplies without judgment or exposure. Accordingly:

  • Supply requests are accessible only to the PrismaCorp personnel who operate the Respawn program. We do not sell, disclose, or publish the identity of any requester, including to law enforcement, landlords, employers, or family members, except as required by law and described below.
  • Respawn pages do not use tracking technologies other than the cookieless visit counter described in Section 2. We do not use session recording, click tracking, or advertising tools on Respawn pages.
  • We do not ask why you are requesting supplies, and we do not retain your IP address with your request.
  • Shipped packages do not carry any external markings that identify their contents.
  • When we report to funders, including the Ohio Department of Health, we provide only aggregate data (such as the number of kits distributed) and never names or contact information.
  • If we receive a subpoena or court order seeking Respawn records, we will review it with legal counsel and, where legally permitted, notify the affected individual before responding.
  • We retain supply request records for no more than 24 months after supplies are provided and then delete them.

6. Donations

Donations are processed by our third-party donation platform. You provide your payment information directly to that platform, and we never receive or store your full payment card number. The platform shares your name, email address, mailing address (if provided), and donation details with us so that we can acknowledge your gift, issue receipts, and maintain the records required of a charitable organization. The donation platform's own privacy policy also applies to your donation.

7. Text Messaging Program

If you opt in to receive text messages from us, we collect your mobile phone number and, if you provide them, your name and email address, in order to send the messages to which you subscribed. Message frequency varies. Message and data rates may apply. Reply STOP to any message to opt out, or reply HELP for assistance. We retain your phone number only while you are subscribed and delete it within 30 days after you opt out. We share your phone number only with our text messaging service provider for the purpose of delivering messages. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent will not be shared with any third parties.

8. Data Retention

  • Respawn supply requests: no more than 24 months after supplies are provided, after which they are deleted.
  • Mailing list: until you unsubscribe.
  • Volunteer applications and contact messages: as long as reasonably necessary to respond to you and coordinate your volunteer service. We periodically review and delete records that are no longer needed, and we will delete yours sooner upon request.
  • PrismaSpace comments: until removed by us or at your request.

9. Your Choices and Rights

  • Access, correction, and deletion: you may request access to, correction of, or deletion of your personal information by emailing legal@theprismacorp.org. We aim to respond within 30 days. We may need to verify your identity before fulfilling a request, and we may retain information where required by law.
  • Email communications: you may unsubscribe from our emails at any time by replying to any email from us or by contacting us.
  • Analytics: our visit counter does not use cookies. You may also block analytics through your browser's privacy settings or a content blocker without affecting your ability to use the Services.
  • Information stored on your device: you may delete it by clearing your browser's site data or by selecting "Clear data" in PrismaOS.
  • Do Not Track: because we do not track you across third-party websites or use your information for targeted advertising, the Services do not respond differently to browser "Do Not Track" signals.

10. Children's Privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe that a child under 13 has provided personal information to us, please contact us and we will promptly delete it.

11. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. All information transmitted through the Services is encrypted in transit, access to personal information is limited to personnel who need it to perform their duties, and our administrative tools require authentication. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a security breach affects your personal information, we will notify you as required by applicable law.

12. Third-Party Websites

The Services contain links to websites operated by third parties, such as naloxone providers and our donation platform. This Privacy Policy does not apply to those websites, and we are not responsible for their privacy practices. We encourage you to review their privacy policies.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated policy on the Services and revise the "Last updated" date above. If we make material changes, we will also provide notice on the Services.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise any of the rights described above, please contact us by email at legal@theprismacorp.org, by phone at (614) 666-6960, or by mail at:

PrismaCorp Foundation, Inc., Attn: Privacy, 2025 Riverside Drive STE 35379, Columbus, OH 43221