Loading
Last Updated: 26 July 2026
Rally is operated by Jay Digital. Two other companies process data on Rally’s behalf: Stripe handles payments and identity verification, and Neon hosts the database. Rally does not sell personal information and does not share it for advertising.
When you create an account: your name, your email address, and a password stored only as a one way cryptographic hash. Rally cannot read your password and cannot recover it for you.
When you contact support: your message, the page you were on, your browser and screen size, your timezone, and any errors that page reported while you were on it. This is shown to you on the form before you send it.
A record of each payment: the amount, the date, where the contribution was routed, and Stripe’s reference for the charge.
Rally never sees or stores your card number. Card details go directly to Stripe and Rally receives only a reference and the last four digits.
What you asked for, how much you asked for, and the description you wrote. These are shown publicly on the queue, which is stated on the form before you submit it. Write nothing there you would not want a stranger to read.
Identity verification is handled entirely by Stripe. Your date of birth, government identification, tax identification, and bank details go to Stripe and are never sent to Rally. Rally receives only a confirmation that verification succeeded and an account reference.
If you join the queue, your username, what you asked for, the amount, the story you wrote, and your funding progress are visible to anyone who opens the page. Nothing else is. Your real name, your email address, your payment history, and whether you contribute are never shown publicly.
The queue is a public page, but Rally asks search engines not to index it, and it is left out of the sitemap. That keeps it open to anyone who visits while keeping what you wrote out of search results under your name.
If you hold a contribution for a cycle, nobody is told. That is between you and your account.
Account and payment records are kept while your account exists and for as long afterwards as tax and financial record keeping requires. Support tickets are kept until they are resolved and for a reasonable period after, so that a repeat problem has history behind it.
You can see and correct your account details from your settings, stop contributing at any time without asking anyone, and request a copy of your data or ask for your account to be deleted through the support page.
Deletion has one limit worth stating plainly. Records of payments that actually happened cannot be erased, because they are financial records and other people received that money. Everything that is not a financial record can be removed.
Depending on where you live you may have additional rights, including under the California Consumer Privacy Act. Requests are handled the same way for everybody regardless of where you are.
Rally sets a cookie to keep you signed in, and a short lived cookie holding the answer to the character check on public forms. There are no advertising cookies, no analytics cookies, and no third party trackers, so there is no consent banner to dismiss.
Passwords are hashed, traffic is encrypted in transit, and payment and identity data stay with Stripe rather than being copied into Rally’s database. No service is perfectly secure, and Rally is operated by one person, which is worth knowing when you decide what to write in a public request.
If this policy changes materially, notice will be given by email before the change takes effect.
Written by the person who runs Rally, not by a lawyer. It is published in full, in plain language, so it can be read and argued with rather than skimmed and accepted. If anything here is wrong, unclear, or does not match what Rally actually does, say so and it gets corrected.