The data controller for this website is the charitable foundation «Янголи серед нас» (Angels Among Us / Sheltering Wings), a nonprofit registered in Ukraine.
Wohltätigkeitsstiftung «Янголи серед нас»You may contact us in Ukrainian, German, Polish, or English. We will respond within 30 days.
When you load any web page, your browser automatically sends your IP address and browser headers to the hosting server. We have no control over this — it is how the internet works.
Our hosting provider Netlify receives and logs this data for every visitor. See Netlify's privacy policy for their retention periods and data practices.
On your first visit, your IP address is sent to ipapi.co to determine your country. We use this solely to decide which privacy consent banner to show you (EU/GDPR rules differ from US/CCPA, etc.). This is a one-time check, cached in your browser for 24 hours.
Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) — we have a legal obligation to show jurisdiction-appropriate consent UI, and this is the least intrusive way to determine which rules apply. We disclose it here, and it is proportionate to the goal.
See ipapi.co's privacy policy for their data practices.
We use Google Fonts (DM Serif Display, Source Sans 3, Caveat — all licensed under SIL OFL 1.1) for typography. When the page loads, your browser contacts Google's servers to download these fonts, which transmits your IP address and browser headers to Google.
Google Fonts loads for all visitors regardless of consent status. The privacy consent banner informs you of this. If you are in an EU/GDPR jurisdiction, you may record your preference via the banner — this is stored locally and does not affect font loading.
See Google's privacy policy. If you wish to avoid this, you may block Google Fonts at the browser or network level (e.g. using uBlock Origin or similar).
We save the following items in your browser's localStorage. These never leave your device and are not transmitted to our servers:
| Key | What it stores | Purpose | Consent needed? |
|---|---|---|---|
sw_lang |
Your language choice (en / de / uk / pl / ru / es / fr) | Remembers your language so you don't have to reselect it | No — strictly functional |
sw_consent |
Your consent decision (accepted / rejected / optout / auto) | Remembers your privacy choice so the banner doesn't reappear | No — necessary to honour your choice |
sw_regime |
Detected legal regime (gdpr / ccpa / general) | Cached so we don't call ipapi.co on every page load | No — necessary for compliance |
sw_cv |
Consent version number ("1") | Lets us re-ask if we update our privacy practices | No — necessary for compliance |
sw_regime_ts |
Timestamp of last geo check | Ensures the geo check is refreshed after 24 hours | No — necessary for compliance |
Under the EU ePrivacy Directive (Art. 5(3)), localStorage is treated the same as cookies. The items above are all either strictly necessary (functional) or used to comply with a legal obligation, so they do not require prior consent under the exception in Art. 5(3).
When you click a donate button, you leave our website and go directly to PayPal, your bank, or Paysend. We do not receive or store any payment data. Processing is governed entirely by those third parties' own privacy policies.
If you email us at info@shelteringwings.charity, we receive your email address and message. We use it only to respond to you. We do not add you to any mailing list. Emails may be stored in our email provider's servers.
Regardless of where you are, you can always:
You have the right to: access your data · correct inaccurate data · erase your data · restrict processing · data portability · object to processing · withdraw consent at any time (without affecting prior processing).
Because we hold almost no personal data beyond what Netlify and ipapi.co log, most access/erasure requests will result in: (1) confirmation that our browser storage has been cleared, and (2) direction to the relevant third party (Netlify, ipapi.co, Google) for server-side log deletion.
You have the right to lodge a complaint with your national data protection authority. For Germany: BfDI. For the EU generally: find your authority at edpb.europa.eu.
We are a Ukrainian nonprofit. The CCPA applies only to for-profit businesses meeting certain revenue or data thresholds, so it does not legally apply to us. Nevertheless, we honour CCPA-equivalent rights voluntarily: you may opt out of Google Fonts (data sharing with Google) via our cookie settings, and you may request deletion of any data we hold about you by emailing us.
We do not sell personal information. We do not use personal information for cross-context behavioural advertising.
Brazil's Lei Geral de Proteção de Dados applies to all organisations processing data of Brazilian residents, with no size exemption. We treat Brazilian visitors as GDPR-equivalent: opt-in consent before Google Fonts, full right to erasure, and right to data portability. Exercise your rights by emailing us or using the "Delete all my data" button. The supervisory authority is the ANPD.
Canadian visitors (and especially Quebec residents) have rights similar to GDPR. Quebec's Law 25 requires express consent before non-essential tracking — we treat Quebec visitors as GDPR-equivalent. You may request access to or deletion of any personal information we hold by emailing us.
We collect minimal personal information and maintain appropriate security. You may request access to or correction of personal information we hold by contacting us. Australia's Privacy Act is enforced by the OAIC.
Click Privacy / Cookies in the footer → Delete all my data. This immediately removes all sw_* localStorage keys from your browser. The page reloads clean with no memory of your previous visits.
Email us at info@shelteringwings.charity and we will delete any email correspondence we hold with you within 30 days.
Server-side logs held by our infrastructure providers are not under our direct control for deletion. Please contact these providers directly:
Our host Netlify operates servers in the US and EU. ipapi.co operates internationally. Google operates globally. When your IP address is processed by these services, it may be transferred to countries outside the EEA.
Netlify and Google participate in EU–US adequacy frameworks (Standard Contractual Clauses / Data Privacy Framework). ipapi.co transfers are covered under legitimate interest as described in section 2.2.
| Data | Held by | Retention |
|---|---|---|
| localStorage keys (sw_*) | Your browser only | Until you delete them or clear browser storage |
| Server access logs | Netlify | Typically 30 days (see Netlify policy) |
| Geo-detection query | ipapi.co | Per ipapi.co policy |
| Fonts request | Per Google policy (if consent given) | |
| Email correspondence | Our email provider | Until you request deletion or 3 years |
We will update the "Last updated" date at the top when we make material changes. If we change the types of data we process or the tools we use, we will increment the consent version key (sw_cv), which will cause the consent banner to reappear for returning visitors.
For any privacy question or to exercise your rights: info@shelteringwings.charity
We respond within 30 days. You may write in Ukrainian, German, Polish, or English.
If you are unsatisfied with our response, you have the right to contact your national supervisory authority (see Section 3 for links).