Privacy Policy and Legal Disclosures

The Virtual March to Retire Big Oil is a fiscally sponsored project of the Crane Institute of Sustainability, a nonprofit corporation operating pursuant to section 501(c)(3) of the Internal Revenue Code. We are committed to protecting your privacy and have created this policy to explain our privacy practices. This policy applies to the site accessible through the Virtual March to Retire Big Oil.

Collection, Use, and Disclosure of your Personal Information

The Virtual March to Retire Big Oil collects and uses your personal information to operate the website and deliver the services you have requested.

Personal information is made available to others for the following, limited purposes:

  • To Carry Out Your Requests. We may be required to disclose personal information in order to carry out your requests when you use the site. This may include sharing your personal information with our third-party vendors. For example, we may share personal information with third parties as necessary to deliver you email updates and to facilitate your participation in the Virtual March. This use and release to specific vendors is described in more detail below.
  • To Protect You and Ourselves. We release personal information when we believe release is necessary or appropriate to comply with the law (e.g., a lawful subpoena); to protect our rights or property; to protect our donors and supporters from fraudulent, abusive, or unlawful conduct; or if we reasonably believe that an emergency involving immediate danger of death or serious physical injury to any person requires the disclosure of communications or records.

In addition to your email address, we also gather other information, including session storage properties, metadata, basic information about your device, and IP address. We collect this information for the purpose of delivering the service. We use Supabase to securely store this application information, such as generated images and user subscription plans, ensuring data integrity and privacy. For further information on how your data is managed and protected while using Supabase, please refer to Supabase’s Privacy Policy.

Data Retention

We store the information we collect for as long as is necessary for the purpose(s) for which we originally collected it. This is described in more detail below.

How Do We Protect Your information?

We employ a variety of physical, electronic, and procedural safeguards to guard your personal information. For example, we use commercially reasonable tools and techniques to protect against unauthorized access to our systems. We restrict access to personal information about you to those employees and third-party vendors who need to know that information to provide services to you. Further, we store the personal information we collect from you behind a secure firewall and place the transaction site on a secure server.

Participation in the Virtual March

If you participate in the Virtual March, we will collect your email address, which allows us to manage your account, communicate with you, and provide support. We use MailerLite to collect your email address and deliver notifications by email. For further details on how your data is managed and protected while using MailerLite, please refer to MailerLite’s Privacy Policy. We will never share your email address with third parties outside of the vendors listed in this policy without your express consent.

You have the option to also share your employer’s name, which allows us to communicate with you about company-specific actions you can take to get climate-safe options in your retirement plan. You can also share the amount of money you would like to move into climate-safe investment options. This value will never be stored in association with your email address or other personally identifiable information and will only be used in aggregate with the values entered by other Virtual March participants.

If you participate in the Virtual March, you will upload one or several photos to the Virtual March app. We will never share the photos you upload with third parties, except for the specific purpose of creating the data that is required to make your virtual march image. Once the data is created, we will promptly delete the photo or photos you uploaded from our systems.

Once we generate your Virtual March images, we will store those generated images for thirty (30) days before deleting them, so that you can return to the site to access your Virtual March images during that time. We adhere to stringent privacy and security standards to ensure the protection and confidentiality of all data processed through our service.

We use the following third-party services to help us generate your virtual march images and operate our website:

1. RapidAPI

  • Purpose: We use RapidAPI to detect faces within images to personalize your experience. Please note that these images are processed in real time and are not stored.
  • To learn more about how they handle data, please see the RapidAPI Privacy Policy

2. OpenAI

  • Purpose: We use OpenAI's ChatGPT to generate creative and engaging prompts for images based on detected characteristics, enhancing the interactivity of our platform.
  • To learn more about how they handle data, please see the OpenAI Privacy Policy

3. Replicate

  • Purpose: We use Replicate as a backup service to generate prompts using an open-source Large Language Model (LLM) when our usage of OpenAI exceeds predetermined limits, ensuring uninterrupted service.
  • To learn more about how they handle data, please see the Replicate Privacy Policy  

6. OctoAI

  • Purpose: We use OctoAI to generate base images for the online march. These images are devoid of any user-specific references, ensuring your anonymity.
  • To learn more about how they handle data, please see the OctoAI Privacy Policy

7. Astria

  • Purpose: We use Astria to create artificial intelligence models for the thank you gift images that we generate for anyone who donates to the campaign, allowing for the generation of high-fidelity and accurate representations.
  • To learn more about how they handle your data, please see the Astria Privacy Policy

8. Render

  • Purpose: We use Render to host the frontend of our web application, providing a seamless and responsive user interface.
  • To learn more about how they handle data, please see the Render Privacy Policy

The images you generate belong to you and we will never use them without your express consent. We will never share your personal data with third parties outside of the vendors listed in this policy without your express consent.


When you donate to the Virtual March to Retire Big Oil, a project of the Crane Institute of Sustainability, we may receive your name, email address, phone number, and other information you decide to submit. Your credit card information, billing information, and any other financial information necessary to complete your purchase (“Payment Information”) is processed by Stripe, our third-party payment processor (“Payment Processor”), and we do not collect, store, or process your Payment Information. To learn more about how they handle your data, please see the Stripe Privacy Policy.

The Payment Processor may collect Personal Information from you, including your name, email address, and billing address. The use of your Personal Information by the Payment Processor is governed by its terms and conditions and privacy policy, and Personal Information we receive about you from our Payment Processor is governed by this Privacy Policy.

Emission Offsets

Emissions generated by server use for this Virtual March will be matched on a one-to-one basis with clean energy procured through WattCarbon's marketplace. The energy will come from solar panels installed on homes in West Virginia, displacing predominantly coal-powered electricity generation in one of the most carbon-intensive regions of the US electricity grid.

Third-Party Analytic Services

We use Plausible Analytics to collect information about use of this site. Plausible Analytics collects aggregate data such as how often users visit this site, what browser and device users use, what region they are in, what pages they visit on the site, and what other sites they used prior to coming to this site. No data is collected or stored for individual users – it is only collected in aggregate. For further details about how your data is managed and protected while using Plausible Analytics, please refer to Plausible Analytics’ Privacy Policy.

We use Sentry to understand any usage scenarios that cause errors that make the web app for the Virtual March to Retire Big Oil crash. Sentry collects system information that helps debug the website, such as screen resolution and device operating system. It does not collect personally identifiable information. For further details about how your data is managed and protected while using Sentry, please refer to Sentry’s Privacy Policy.

We only use the information we get from Plausible Analytics and Sentry to improve this site. Plausible Analytics collects only the browser signature assigned to you on the date you visit this site, rather than your name, IP address, or other identifying information. Sentry collects information about your device such as your browser type and your screen resolution. We do not combine the information collected through the use of Plausible Analytics or Sentry with personally identifiable information.

European Union Citizens

This website and the Virtual March are based in the United States, the website is directed to U.S. residents, and we process and store information in the U.S. If you are located outside of the U.S., we and our service providers may transfer your information to, or store or access your information in, jurisdictions that may not provide equivalent levels of data protection as your home jurisdiction.

Collection and Use of Children’s Personal Information

We care about the safety and privacy of children online, and we comply with the Children’s Online Privacy Protection Act of 1998 (COPPA). We do not knowingly collect personal information from children under the age of 13. To respect the privacy of children and to comply with COPPA, children under the age of 13 should not provide any personal information on this site. We urge parents to supervise their children while online.

Changes to this Policy

We may revise and update this policy if our practices change, if we add new features to the site, or if we change existing ones that affect these practices. You should refer back to this page often for the latest information.

Contact Information

We welcome your comments regarding this policy. If you have any questions, comments, or concerns, please contact us by email at or at the mailing address listed below:

The Crane Institute of Sustainability, Inc.

P.O. Box 983

Andover, MA 01810

Date Effective: January 29, 2024