Privacy Policy.

What we never collect

The form does not request, and we do not want, any of the following. If a submission contains them we may reject it.

• A child's name, date of birth, or age.
• Any Social Security number or taxpayer identification number.
• Tax returns or tax forms of any kind.
• Usernames, passwords, or one time codes for a Trump Account.
• Bank account or card numbers.
• Identity documents, private keys, or recovery phrases.

We do not knowingly collect personal information from anyone under 18. The form is directed at adults acting for a child. The share link identifies a Trump Account. We collect it from the adult submitter so a contribution can be directed correctly.

What we collect and why

• Guardian name and email address, to send a receipt and to contact you if the entry is selected.
• State or territory, to apply eligibility rules and to report aggregate reach.
• Relationship to the child, to confirm the submitter is authorized.
• The Trump Account share link, so a contribution can be directed to the right account.
• An optional note, the attestations, and timestamps.
• A truncated hash of your IP address, used only to slow repeated form abuse. The raw address is not stored with your submission.
• If you use the notify box, the email address you enter.

Where it is stored

Submission records are written on this server, in encrypted files kept outside the public website folder. Published contribution and draw pages never include your name, email, or share link.

How it is protected

• Name, email, share link, and notes are encrypted with AES 256 GCM before they are written to disk.
• Duplicate detection uses a SHA 256 fingerprint of the share link, not the plaintext link.
• Receipt codes are stored only as a hash. We cannot recover a lost receipt code.
• The operator desk lists entries with the encrypted fields masked. Decrypting an entry is a separate action.
• Submit, status, and notify routes are rate limited on this server.
• The site process does not hold the treasury wallet key and cannot move funds.

What is public

Published contribution records show a contribution identifier, state, amount, funding date, method, and proof link. Draw pages show entry counts, hashes, block numbers, the winning entry number, and the winner's state. Form fields from your submission are not published.

How long we keep it

We keep submissions while the program is active and as needed to complete a contribution or respond to a dispute. To ask for access, correction, or deletion, contact us on X from an account you control and quote your entry identifier.

Sharing

We do not sell personal information and we do not share it for advertising. The only third party that sees a share link is the Trump Accounts contribution page, at the moment a deposit is made.

Changes

This policy is versioned. Material changes are published with a new version number.