Who is responsible for the data?
The Dollar Quest is operated as part of the M-Agro Open Farm Mission in Lithuania. For privacy requests, use the contact page.
Where Donorbox or a payment provider independently determines how it processes payment or account data, that provider may also act as a separate controller under its own privacy policy.
Data we may collect
Participation and payment-related data
- email address, when provided;
- a hashed email or other anti-duplicate identity value;
- payment-provider transaction reference;
- payment status and confirmation time;
- public participant number and public support ID;
- referral or invitation code;
- technical records needed to prevent duplicate or fraudulent participation.
Website and technical data
- IP address, user agent and basic request logs;
- session and essential cookie data;
- pages requested, timestamps and error or security logs;
- information supplied through contact forms or support messages.
Payment-card details are normally entered directly into the payment provider’s systems and are not intended to be stored by The Dollar Quest website.
Why we process data
- to create and confirm a participation record;
- to assign and maintain a permanent participant number;
- to prevent duplicate participation, abuse and payment fraud;
- to maintain public mission statistics and participant pages;
- to operate personal invitation and referral links;
- to respond to messages and support requests;
- to secure, troubleshoot and improve the website;
- to meet accounting, tax, legal and regulatory obligations where applicable.
Legal bases
Depending on the processing activity, personal data may be processed because:
- it is necessary to provide the participation service you requested or take steps before doing so;
- it is necessary to comply with legal obligations;
- there is a legitimate interest in preventing abuse, securing the website, keeping reliable project records and communicating about a requested participation;
- you have given consent, for example for optional marketing or non-essential cookies where such consent is requested.
Consent can be withdrawn for future processing, but withdrawal does not make earlier lawful processing unlawful.
Public participant information
After confirmation, the project may publish a permanent participant number, rank title, joining date, referral count, participant-page URL and non-personal public support identifier.
Public pages are designed not to show an email address, payment details or legal name. Because public pages may be indexed, cached or shared by third parties, removal from every external cache cannot always be guaranteed immediately.
Service providers and recipients
Data may be disclosed when necessary to providers such as:
- Donorbox and connected payment processors;
- website hosting, database, security and email providers;
- technical contractors acting under appropriate instructions;
- analytics or cookie providers where enabled and lawfully configured;
- public authorities, courts or advisers when disclosure is legally required.
Third-party services process data under their own terms and privacy policies.
International transfers
Some service providers may process data outside Lithuania or the European Economic Area. Where required, transfers should rely on an applicable legal mechanism such as an adequacy decision, standard contractual clauses or another safeguard recognised by data-protection law.
Data retention
Data is retained only as long as reasonably needed for the purposes described in this policy, including security, payment verification, accounting, dispute handling and legal compliance.
- incomplete pending records may be deleted or anonymised after they are no longer operationally useful;
- transaction and accounting records may be retained for the period required by applicable law;
- security logs are normally kept for a limited period unless needed to investigate abuse;
- confirmed participant numbers and public mission records may be kept long term because permanence is a core feature of the project.
Where a public record must remain for project integrity, directly identifying information may instead be restricted, deleted or anonymised where appropriate.
Cookies and local storage
The website may use essential session cookies or local storage for security, referral attribution, payment-flow continuity and basic functionality.
Non-essential analytics or advertising technologies should only be used with any consent required by applicable law. Third-party payment or embedded services may set their own cookies.
Security
Reasonable technical and organisational measures are used to protect data, including access controls, secure connections, limited public disclosure, hashed identity values and transaction-reference checks.
No online system can guarantee absolute security. Participants should avoid sending payment-card details or other sensitive information through ordinary contact messages.
Your data-protection rights
Subject to applicable law, you may have the right to:
- receive information about how your data is processed;
- request access to your personal data;
- correct inaccurate or incomplete data;
- request erasure in appropriate circumstances;
- restrict or object to certain processing;
- receive portable data where the legal conditions are met;
- withdraw consent where processing relies on consent;
- complain to the Lithuanian State Data Protection Inspectorate or another competent supervisory authority.
A request may require reasonable identity verification. Some information may need to be retained where required by law or necessary to protect legitimate project records.
Children
The service is not intentionally directed at children who cannot lawfully consent or enter the participation arrangement. Where required by local law, a parent or guardian must authorise participation.
Changes to this policy
This policy may be updated as the project, technology, service providers or legal requirements change. The latest version and update date will remain available on this page.
Contact and requests
Privacy questions and requests can be submitted through the contact page. Include enough information to identify the relevant participation record, such as the public support ID or participant number, but do not send payment-card information.