Website & Cookie Privacy Policy
The Open Lunch Project (OLP) Effective Date: 07/06/2026 | Last Updated: 08/10/2026
1. Introduction
The Open Lunch Project ("OLP," "we," "us," or "our") respects the privacy of everyone who visits our website at www.openlunchproject.org (the "Site"). This Website & Cookie Privacy Policy ("Policy") explains what information we collect through the Site, how we use cookies and similar tracking technologies, and the choices available to you.
This Policy applies to general visitors browsing our Site. If you are a donor, please also review our Donor Information Security and Privacy Disclosure Policy, which specifically covers how we collect, use, and protect information related to donations.
By continuing to browse or use our Site, you agree to the practices described in this Policy.
2. Information We Collect Through the Website
When you visit our Site, we may collect the following types of information:
a. Information You Provide Directly
Name, email address, or phone number (e.g., if you fill out a contact form, sign up for our newsletter, or volunteer)
Messages or inquiries submitted through the Site
Donation and payment information, if you choose to donate (see our Donor Information Security and Privacy Disclosure Policy for details)
b. Information Collected Automatically
When you browse our Site, certain information is collected automatically through cookies and similar technologies, including:
IP address
Browser type and version
Device type and operating system
Pages visited, time spent on pages, and referring/exit pages
Approximate geographic location (based on IP address)
3. Cookies and Tracking Technologies
What Are Cookies?
Cookies are small text files placed on your device when you visit a website. They help the website function properly, remember your preferences, and understand how visitors use the Site.
Types of Cookies We Use
Cookie Type
Purpose
Essential/Strictly Necessary
Required for core Site functionality, such as page navigation, secure areas, and completing a donation. The Site cannot function properly without these.
Performance/Analytics
Help us understand how visitors interact with the Site (e.g., which pages are most visited) so we can improve content and user experience.
Functional
Remember choices you make (such as language preference) to provide a more personalized experience.
Third-Party/Advertising
May be set by third-party services (such as social media platforms) to enable sharing content or, in limited cases, to measure the effectiveness of outreach campaigns.
Third-Party Cookies and Services
We use the following trusted third-party services, which may place their own cookies or similar tracking technologies on your device:
Meta Pixel (Facebook/Instagram): Used to help us understand how visitors interact with our Site after seeing our social media content and to measure the effectiveness of our outreach on Meta platforms.
Google Ads: Used to measure the performance of any advertising campaigns and to understand how visitors arrive at our Site.
YouTube / Vimeo Embeds: When we embed videos on our Site, the video provider (YouTube or Vimeo) may set cookies to enable playback and gather viewing analytics once you interact with the embedded video.
Social Share Buttons (LinkedIn, Instagram): These buttons may set cookies or collect data if you choose to share our content on these platforms.
Zeffy: Used both for newsletter communications (e.g., email opens and link clicks) and to securely process online donations.
Flodesk: Used for newsletter communications and related email engagement tracking (e.g., opens and link clicks).
Payment Processors (Stripe, PayPal, and Zeffy): Used to securely process online donations.
These third parties have their own privacy and cookie policies, which we encourage you to review. OLP does not control the cookies or tracking technologies placed by these third parties and is not responsible for their individual privacy practices.
4. How We Use Collected Information
We use the information collected through the Site to:
Operate, maintain, and improve the functionality and security of our Site.
Understand how visitors use our Site so we can improve content, layout, and user experience.
Respond to inquiries submitted through contact or volunteer forms.
Send newsletters or communications to those who opt in.
Process donations securely, in accordance with our Donor Information Security and Privacy Disclosure Policy.
Comply with applicable laws, regulations, and legal requests.
We do not use website visitor data for purposes unrelated to those described in this Policy without your consent.
5. Your Choices and Cookie Controls
You have several options for managing cookies and tracking technologies:
Browser Settings: Most web browsers allow you to control or disable cookies through their settings. Please note that disabling certain cookies, particularly essential cookies, may affect the functionality of our Site (including your ability to complete a donation).
Meta (Facebook/Instagram) Ad Preferences: You can manage how Meta uses your data for advertising through your Meta Ad Preferences settings.
Google Ads Opt-Out: You can manage your Google ad personalization settings through Google Ads Settings, or opt out of interest-based Google advertising through the Digital Advertising Alliance's opt-out page.
Do Not Track Signals: Some browsers offer a "Do Not Track" (DNT) setting. Our Site does not currently respond to DNT signals, as there is no industry-standard interpretation of this signal at this time.
Email Communications: You may unsubscribe from our newsletter and other email communications at any time by clicking the "unsubscribe" link included in any email sent through Zeffy or Flodesk.
6. Data Security
We take reasonable administrative, technical, and physical measures to protect information collected through our Site from unauthorized access, disclosure, alteration, or destruction. This includes the use of encryption (TLS/SSL) for data transmitted through our Site and secure, PCI-DSS-compliant payment processing through Stripe, PayPal, and Zeffy for any online donations.
While we work hard to protect visitor information, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
7. Third-Party Links
Our Site may contain links to third-party websites (such as partner organizations, social media platforms, or news sources). We are not responsible for the privacy practices or content of those third-party sites. We encourage you to review the privacy policies of any third-party site you visit.
8. Children's Privacy
Our Site is not directed toward children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected such information, we will take steps to delete it promptly.
9. Your Privacy Rights
Depending on your state or country of residence, you may have additional rights regarding your personal information, such as the right to access, correct, or request deletion of information we hold about you. If you would like to exercise any such rights, please contact us using the information in Section 11 below, and we will respond in accordance with applicable law.
10. Updates to This Policy
We may update this Policy from time to time to reflect changes in our practices, technology, legal requirements, or other operational needs. Any changes will be posted on this page at www.openlunchproject.org, along with a revised "Last Updated" date at the top of this Policy. We encourage you to review this Policy periodically.
11. Contact Us
If you have any questions or concerns about this Policy or our use of cookies and website data, please contact us:
The Open Lunch Project
700 East Main St, #103, Richmond, VA 23218
This Policy is intended to provide transparency about our website and cookie practices. It does not constitute a legal contract or guarantee, and organizations should have this document reviewed by qualified legal counsel to ensure compliance with all applicable federal, state, and local laws (including but not limited to state privacy laws such as the CCPA/CPRA and, where applicable, international regulations such as the GDPR).