Privacy Policy

Active Affair is owned and operated by GigGame (www.giggamestudios.com), a qualified subchapter S subsidiary of Spark Innovations Corp, a Florida corporation headquartered in Orlando, Florida. This Privacy Policy explains what information we collect through Active Affair (the "Service"), how we use it, and who we share it with. In this policy, "GigGame," "we," "us," and "our" refer to GigGame and Spark Innovations Corp together.

1. Information We Collect

If you volunteer, register, donate, or sponsor through a public event page: your name, email address, phone number (if asked), any answers you give to an event's or slot's custom questions, and — for paid/team registrations — details like age, shirt size, or emergency contact if the Organization asks for them. If an event organizer records volunteer hours for you, we store the number of hours, which administrator recorded them, and when. If you upload a receipt through your signup management link, we store that image or PDF file and its filename.

If you donate or sponsor via PayPal: we may store the donor or sponsor's display name and the amount shown as raised, but your actual payment details are entered directly on PayPal's site — Active Affair never receives, sees, or stores your card or bank information for these payments.

If you create or administer an Organization: your email address, a securely hashed password (we never store your password in readable form), your full name, and your role within the Organization. If your Organization pays to send email campaigns, we store the resulting transaction ID and authorization code from our payment processor, and the billing name used — never your full card number, which is sent directly from your browser to our payment processor and never touches our servers.

About an Organization itself: its name, logo, cover photo, description, location, category, and the PayPal address or link it wants to display to its own supporters.

2. How We Use Information

We use the information above to operate the Service: running signups and registrations, tracking rosters and volunteer hours, generating hours-verification PDF receipts, sending confirmation and reminder emails, showing an Organization its own donation/sponsorship activity, powering the public event directory and public organization/volunteer profile pages, and — when an Organization chooses to use it — helping draft outgoing emails with AI assistance.

3. What's Shown Publicly

Some information is public by design, since Active Affair includes public event pages, team/participant fundraising pages, organization profiles, and volunteer profiles. Publicly visible information may include: an event's own public details; a volunteer or participant's first name and last initial only (never full name, email, or phone) on rosters shown on the public event page or on a volunteer's own profile; a volunteer's earned badges and total number of events volunteered; a donor or sponsor's display name and amount, if the Organization shows a public fundraising total; and any photo uploaded to an event's gallery or an organization's profile — uploaded files are served from a public content-delivery URL that isn't access-restricted once uploaded. We never publicly display email addresses, phone numbers, custom question answers, uploaded receipts, or hours records.

4. Who We Share Information With

We share the information described above with the specific Organization you interact with (they need it to run their event and roster). We do not sell personal information to anyone. We share limited information with the service providers below, only as needed to operate the Service:

• MongoDB Atlas — our database host, where all Service data is stored.
• Bunny.net (BunnyCDN) — stores and serves uploaded images (organization logos/photos, event header and gallery photos) and volunteer-uploaded receipts. Once uploaded, these files are reachable at a public URL to anyone who has the link.
• SMTP2GO — delivers most outgoing email: confirmations, campaigns, reminders, and receipts.
• Our own email relay — delivers account-security email only (account confirmation, sign-in verification codes, password reset).
• OpenAI — when an Organization uses the AI writing assistant, we send the event's title, date, and location plus whatever instruction the administrator types — never a volunteer's or donor's personal information.
• Authorize.Net — processes the card payment when an Organization pays to send an email campaign. Card details are tokenized directly from your browser to Authorize.Net and never pass through our servers.
• PayPal — when someone pays a donation, registration fee, or sponsorship, they pay directly through a link to the Organization's own PayPal account. Active Affair is not integrated with PayPal's systems for this and never receives any payment data from these transactions.
• OpenStreetMap / Nominatim — we send an event's address to this public geocoding service to place it on a map; no personal information is sent.

We may also disclose information if required by law, to protect the rights or safety of Active Affair, our users, or the public, or in connection with a merger, acquisition, or sale of assets.

5. Cookies and Sessions

We use a small number of cookies required for the Service to work: a sign-in session cookie for Organization administrators, a session cookie used to remember your active organization, and, if you choose "remember this device" during sign-in, a cookie that lets you skip re-entering a verification code on that browser for 30 days. We don't use third-party advertising or tracking cookies.

6. Data Retention

We retain information for as long as the relevant Organization's account is active, or as needed to provide the Service (for example, so a volunteer's management link and hours receipt keep working). An Organization can remove a volunteer's record from their roster at any time. If an Organization closes its account, or if you ask us directly at support@gig.game, we will delete or anonymize personal information except where we're required to keep it (for example, payment transaction records).

7. Security

We use industry-standard measures to protect information, including encrypting passwords and never storing full payment card numbers on our servers. No online service can guarantee perfect security, and we encourage you to use a strong, unique password for your Organization account.

8. Your Choices

You can ask any Organization you've interacted with to update or remove your information from their roster or contacts list, or to mark you as unsubscribed from their emails. You can also contact us directly at support@gig.game to ask what information we have about you or to request its deletion, subject to the retention exceptions above.

9. Children's Privacy

Active Affair is intended for use by adults creating and administering Organization accounts. Because many events run through the Service are school or youth-oriented, information about a minor may be submitted by a parent, guardian, teacher, or the school itself on the minor's behalf as part of signing up for a specific event — Organizations are responsible for handling this appropriately and in compliance with applicable law. We do not knowingly allow a child under 13 to create an Organization account directly.

10. International Users

Active Affair is operated from the United States, and information you provide is stored and processed in the United States, regardless of where you access the Service from.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date above.

12. Contact Us

Questions about this Privacy Policy or your information? Email support@gig.game.