How we keep giving safe

Trust is the whole point of CauseHub. These are the checks behind every cause, and what they can and cannot promise.

Money

• Donations are paid through Stripe straight into the organiser's own account. We never hold donor money, so it cannot get stuck with us or disappear with us.
• Card details are typed only on Stripe's secure page. They never reach our servers.
• Every payment is confirmed by a signed message from Stripe, never by a browser redirect, and recorded in a double-entry ledger that cannot be edited afterwards.
• Refunds only ever go back to the original card or account.

People

• Organisers confirm their email, turn on two-step verification, and pass Stripe's identity check before any money can arrive.
• Organiser and beneficiary names are screened against the EU, UN, UK and US sanctions lists, refreshed from the official sources.
• Registered organisations are checked against their official registry before they get a badge. Creators prove they own their channel.
• A person reviews every cause before it goes live. Emergencies, medical causes, humanitarian aid, children and memorials get extra checks, as do photos already used on another cause here.

Proof

• Organisers post receipts, deliveries and follow-ups on a public proof trail.
• Every proof item is written to an append-only, hash-chained impact log: each entry seals the one before it, so history cannot be quietly rewritten.
• We show what organisers report separately from what we have checked, and never add them together.

Your privacy

• No ads, no tracking cookies, no data sales. Public pages carry a cookieless page counter (Rybbit) that stores no IP addresses and never runs on donation, receipt, report or account pages. Your giving is never used to profile you.
• Your name stays hidden unless you choose to show it, and you can hide it from the organiser too.
• Photos are stripped of hidden data such as GPS location before they are published.
• Read the full privacy policy.

What we cannot promise

No platform can guarantee that every organiser keeps every promise. What we can do is check people before money moves, make misuse visible, act fast on reports, and help donors get their money back through the payment provider when something is wrong.

Found a security problem?

Please tell us at the address in our security.txt. Test only against your own accounts, do not access other people's data, and give us reasonable time to fix the problem before you publish. We will not take legal action against anyone who follows these rules in good faith, and we will credit you if you want.