How we keep giving safe
Trust is the whole point of CauseHub. These are the checks behind every cause, and what they can and cannot promise.
Money
- Card donations are paid through Stripe straight into the organiser's own account. Bank transfers and PayPal gifts go straight into the bank or PayPal account the organiser gave us, which we checked. We never hold donor money, so it cannot get stuck with us or disappear with us.
- Card details are typed only on Stripe's secure page. They never reach our servers.
- Every card payment is confirmed by a signed message from Stripe, never by a browser redirect. A bank transfer or PayPal gift counts only once the organiser confirms it arrived. Every gift is recorded in a double-entry ledger that cannot be edited afterwards.
- Refunds only ever go back to the original card or account.
People
- Organisers confirm their email and pass Stripe's identity check before any card payment can arrive. We strongly recommend two-step verification to every organiser. Pages that take only bank transfers or PayPal have no Stripe identity check: a person reviews them before they go public, and their badge then says "Reviewed by CauseHub".
- Organiser and beneficiary names are screened against the EU, UN, UK and US sanctions lists, refreshed from the official sources.
- Registered organisations are checked against their official registry before they get a badge. Creators prove they own their channel.
- A person reviews every cause before it goes live. Emergencies, medical causes, humanitarian aid, children and memorials get extra checks, as do photos already used on another cause here.
Proof
- Organisers post receipts, deliveries and follow-ups on a public proof trail.
- Every proof item is written to an append-only, hash-chained impact log: each entry seals the one before it, so history cannot be quietly rewritten.
- We show what organisers report separately from what we have checked, and never add them together.
Your privacy
- No ads, no tracking cookies, no data sales. Public pages carry a cookieless page counter (Rybbit) that stores no IP addresses and never runs on donation, receipt, report or account pages. Your giving is never used to profile you.
- Your name stays hidden unless you choose to show it, and you can hide it from the organiser too.
- Photos are stripped of hidden data such as GPS location before they are published.
- Read the full privacy policy.
What we cannot promise
No platform can guarantee that every organiser keeps every promise. What we can do is check people before money moves, make misuse visible, act fast on reports, and help donors get their money back when something is wrong: for card gifts through the payment provider, for bank transfers and PayPal gifts by asking the organiser to return them.
Found a security problem?
Please tell us at the address in our security.txt. Test only against your own accounts, do not access other people's data, and give us reasonable time to fix the problem before you publish. We will not take legal action against anyone who follows these rules in good faith, and we will credit you if you want.