Privacy & Data Policy

How We Get Our Data (Yes, We Track Your Website)

We track the hell out of the nonprofit internet.

We run automated crawlers across 700,000 public nonprofit websites. We check your SSL certificates, we look at your DNS records, we figure out what CMS you are using, and we track how fast your servers respond. We pull every piece of public data we legally can.

Why do we do this?

Because the nonprofit sector’s digital infrastructure is crumbling, and you can’t fix what you don’t measure. We don’t track this data to sell it to advertisers or brokers. We track it so we can highlight the massive technical gaps, hold enterprise vendors accountable, and build the free tools the sector actually needs to survive.

We don’t track people (we don’t care what you click on in your living room). But if your organization puts a website on the public internet, we are going to audit it.

The Rules of Engagement

We are aggressive about data collection, but we operate with strict ethics.

1. We are passive. Our scanner never attempts to access protected directories, bypass authentication, execute scripts, or inject code. We don’t touch your databases.
2. We are transparent. We always declare our User Agent (TSNI-Scanner/1.0) during scans.
3. We respect boundaries. If your robots.txt tells our crawler to go away, it goes away. If you email us and tell us to stop monitoring your domain, we stop within 24 hours.
4. No personal data. We strip all Personally Identifiable Information (PII) from the IRS Form 990 data we import. We only keep organizational entity data.
5. No spam, ever. We use organizational contact info (info@organization.org) strictly to alert you to critical technical issues or publish our research. We never sell your data, and we never use it for commercial solicitation.

How We Track Visitors on This Site (Yes, We Track You Too)

Earlier we said our automated crawlers don’t track people. But when you visit this website? That’s a different story.

We track the hell out of how you use this site. We track when you visited, what forms you submitted, which buttons you clicked, and exactly how far down the page you scrolled.

We do this entirely within ethical and legal limits. We don’t sell this data to data brokers. We do this for one simple reason: we need to reach as many nonprofits as humanly possible.

Our platforms are completely free, non-commercial, and built specifically for the betterment of the sector. But a free tool is useless if nobody knows it exists. We track our own website analytics ruthlessly so we can optimize our outreach, refine our messaging, and spread the word about what we are building.