Skip to main content
Testicular Cancer FoundationThe Cojone Club™

Privacy Policy

Last updated June 25, 2026

Last Updated: June 25, 2026

The Testicular Cancer Foundation ("TCF," "we," "our," or "us") is committed to protecting your privacy and safeguarding the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and protect information obtained through our website, programs, services, events, text message communications, online community spaces (including our official Discord server and The Cojone Club® App), and digital platforms (collectively, the "Services").

By accessing or using our Services, you agree to the terms of this Privacy Policy.

> Important: TCF is not a clinical, medical, or crisis service. If you are in crisis or experiencing a medical or mental health emergency, please see Section 9 (Mental Health and Crisis Resources) for help.

1. Information We Collect

We may collect the following categories of information:

a. Personal Information You Provide

  • Name
  • Email address
  • Mailing address
  • Phone number (including mobile numbers used for text message communications)
  • Date of birth or age range
  • Donation and payment information, including subscription payments for The Cojone Club® App Premium membership
  • Event registration details
  • Communications with us, including emails, text messages, Discord messages, in-app feed posts, forms, surveys, or messages
  • SMS opt-in records, including the date, time, source, and method of consent
  • Discord username, display name, server roles, and other profile information you make available on our Discord server
  • The Cojone Club® App account profile information you choose to provide, including display name, profile photo, location/ZIP, role in community (e.g., survivor, caregiver, ally), survivor-since year, story, and links to your public social media profiles

b. Health-Related and Mental Health Information (Voluntarily Provided)

You may choose to share health-related information, including diagnosis, treatment, survivorship, and mental health experiences (such as anxiety, depression, or other distress related to cancer), when participating in programs, surveys, stories, support communities (including Discord and The Cojone Club® App), text-message conversations, or advocacy efforts. This information is provided voluntarily and used only for mission-related purposes. Where applicable law treats mental health information as a sensitive subcategory of personal information, we handle it accordingly.

In The Cojone Club® App specifically, certain fields — diagnosis date, treatment path, survivor-since date, story, ZIP code, and role in community — are treated as sensitive and are subject to additional protections. See Section 8 for details.

See Section 9 for additional information about how mental health content is handled.

c. Automatically Collected Information

When you visit our website or use The Cojone Club® App, we may automatically collect:

  • IP address
  • Browser type and device information
  • Pages visited and time spent on the site
  • Referring URLs
  • Cookies and similar tracking technologies (see Section 4)
  • For The Cojone Club® App: sign-in events and session metadata

d. Information from Text Message Communications

When you participate in our SMS program, we may collect mobile carrier information, message content you send to us, delivery and engagement data (such as whether messages were delivered, opened, or responded to), and opt-in and opt-out status. See Section 6 for details.

e. Information from Our Discord Community

When you participate in our official Discord server, we may collect or have access to your Discord username and display name, server activity, public-channel messages, messages you send to TCF bots or staff accounts, voluntary disclosures (including health and mental health experiences), and content you submit through Discord forms, polls, or events. See Section 7 for details.

f. Information from The Cojone Club® App

When you create an account or use The Cojone Club® App, we collect account information, profile fields you choose to fill in (including the sensitive fields listed in Section 1(b)), content you post to the in-app feed, reactions ("hearts") you give to other members' posts, your premium subscription status if applicable, and your saved preferences (such as directory visibility and email reminder opt-in). We also display aggregate, non-identifying community statistics in the App (see Section 8(g)). See Section 8 for details.

2. How We Use Your Information

We use the information we collect to:

  • Advance our mission of education, awareness, and support
  • Process donations and send acknowledgments or receipts
  • Process and administer The Cojone Club® App Premium subscriptions, including recurring billing through our payment processor
  • Communicate with you about programs, events, and resources, including by email, text message, Discord, and The Cojone Club® App where you have opted in or chosen to participate
  • Provide survivor, caregiver, and community support, including peer connection through our Discord server and The Cojone Club® App
  • Operate and improve the member directory, member map, feed, and other community features within The Cojone Club® App
  • Improve our website, content, and user experience
  • Measure the reach and effectiveness of our awareness and fundraising campaigns on our public website
  • Conduct research, reporting, and impact measurement in aggregated or de-identified form
  • Comply with legal, regulatory, or reporting obligations
  • Maintain records of SMS consent and opt-out requests as required by law
  • Maintain records of cookie consent choices as required by law
  • Moderate community spaces and enforce community guidelines

We do not sell personal information.

3. Sharing and Disclosure of Information

We may share information only as necessary and appropriate, including:

  • Service Providers. Trusted third parties that support our operations and act as data processors on our behalf. These include:

- Supabase — database, authentication, and file storage for The Cojone Club® App - Vercel — application hosting for The Cojone Club® App - Squarespace — hosting and built-in platform analytics for our public website (testicularcancer.org) - Stripe — payment processing for The Cojone Club® App Premium subscriptions and other online donations - Fundraise Up — donation and fundraising form processing on our public website and within The Cojone Club® App - Fathom Analytics — privacy-respecting, cookieless website and in-app analytics - Google (Google Analytics & Google Ads) — website analytics and advertising/campaign measurement on our public website only, delivered through Google Tag Manager and governed by our cookie consent banner (see Section 4). These tools are not used within The Cojone Club® App. - Trustpilot — independent review collection and display of our ratings on our public website - CookieYes — cookie consent management and recordkeeping of your consent choices - SendGrid (a Twilio service) — transactional email delivery (account magic links, receipts, reminders) - Twilio — SMS delivery and other text-message services - Mailchimp — email newsletter distribution (only for members who opt in) - Discord, Inc. — community server platform - Chatbase — AI conversational platform underlying TC Navigator and Atlas - Mobile carriers — for the limited purpose of message delivery - CRM systems, event management services, and similar operational tools

  • Legal Requirements. When required by law, regulation, subpoena, or court order.
  • Mission-Related Partnerships. Limited, purpose-driven sharing with partners supporting education, awareness, or patient support initiatives, where appropriate and consistent with this policy.

All service providers listed above are required by contract or by their published terms to protect your information and to use it only for the authorized purposes for which we engage them.

We do not share mobile information, phone numbers, or SMS opt-in data with third parties or affiliates for marketing or promotional purposes.

We do not share information from The Cojone Club® App — including profile fields, sensitive health information, feed posts, or membership status — with third parties or affiliates for marketing or promotional purposes.

4. Cookies and Tracking Technologies

We use cookies and similar technologies (such as pixels, tags, local storage, and software development kits) to operate our Services, remember your choices, understand how our Services are used, and — on our public website — to measure the reach and effectiveness of our awareness and fundraising campaigns. This section explains what we use, how those technologies differ between our public website and The Cojone Club® App, and how you can control them.

a. Categories of Cookies We Use

  • Strictly necessary. Required for core functionality and security — for example, the authentication and session cookies that keep you signed in to The Cojone Club® App, and security cookies that protect our website from fraudulent activity. These cannot be switched off.
  • Functional. Enable enhanced features and the third-party tools you interact with — for example, our donation platform and our on-site review and chat widgets.
  • Analytics / performance. Help us understand how our Services are used so we can improve them.
  • Advertising. Used on our public website only to measure the effectiveness of our awareness and fundraising campaigns.

b. Consent Management

We use CookieYes, a consent management platform, to present a cookie banner and to record and honor your choices. Where required by applicable law, non-essential cookies (functional, analytics, and advertising) are not set until you provide consent through the banner. You can accept, reject, or selectively enable categories, and you can change or withdraw your choices at any time using the "Cookie Settings" link in our website and App footers, which reopens the consent preferences.

For Google-based tools, we apply Google Consent Mode so those tags respect your consent selections, and we configure them not to fire before consent is given. We also honor recognized opt-out signals such as Global Privacy Control (GPC) where applicable. CookieYes stores a record of your consent (including a consent identifier and the categories you selected) so that we can demonstrate compliance; your consent choice is shared across testicularcancer.org and app.testicularcancer.org.

c. Our Public Website (testicularcancer.org)

Our public website is hosted on Squarespace and uses cookies and tags from several providers, all governed by the consent banner described above:

  • Strictly necessary: Squarespace security and session cookies (for example, a cross-site-request-forgery protection cookie).
  • Analytics: Google Analytics 4 and Squarespace's built-in visitor analytics, together with Fathom Analytics (a privacy-respecting, cookieless tool that sets no cookies and collects no identifying information).
  • Advertising / measurement: Google Ads conversion and measurement tags, delivered through Google Tag Manager.
  • Functional: Fundraise Up (our donation platform) and Trustpilot (our reviews/ratings widget), which set cookies to support donations and display our ratings.

We do not run a Meta/Facebook Pixel or a LinkedIn Insight Tag.

d. The Cojone Club® App (app.testicularcancer.org)

The App is engineered to be analytics-light and does not run Google Analytics, Google Ads, Meta, or LinkedIn tags within the App itself. The App uses:

  • Strictly necessary: authentication and session cookies (provided by Supabase) that are required to keep you signed in. Disabling these will prevent you from using the App.
  • Analytics: Fathom Analytics, which is cookieless and collects no personal identifying information.
  • Functional (consent-gated): our donation platform (Fundraise Up) and the in-app TC Navigator chat assistant (Chatbase) load only after you have provided consent through the cookie banner, and set cookies when they do.

Because the App and our public website share the testicularcancer.org parent domain, certain cookies set by the public website (such as Google Analytics cookies) may be readable on the App's domain even though the App does not itself run those tags.

e. Managing Cookies

In addition to the cookie banner and the "Cookie Settings" link, you can control cookies through your browser settings, including deleting existing cookies and blocking new ones. Disabling cookies may affect certain site or app features, including your ability to stay signed in to The Cojone Club® App. Because Fathom Analytics uses no cookies and collects no personal data, there is nothing to opt out of for that tool.

5. AI-Powered Tools and Agents

TCF uses artificial intelligence tools to expand access to education, support, and community resources. This section explains how those tools work and how they handle your information.

a. TC Navigator

TC Navigator is an AI-powered information tool designed to help patients, survivors, and caregivers find relevant educational content and resources related to testicular cancer. TC Navigator does not provide medical advice or replace the guidance of a qualified healthcare provider.

When you use TC Navigator:

  • Your queries and interactions may be processed by a third-party AI platform operating on TCF's behalf.
  • Conversation data may be retained to improve the tool's performance and relevance.
  • We do not use TC Navigator interactions to identify you personally, unless you voluntarily provide identifying information in your messages.
  • TC Navigator is not a secure channel for sensitive personal or medical information. We encourage you to use general, non-identifying language when asking questions.
  • Within The Cojone Club® App, the TC Navigator chat assistant loads only after you have provided cookie consent (see Section 4(d)).

b. Atlas — Survivor Voice Research Tool

Atlas is an AI-powered conversational tool that invites testicular cancer survivors, patients, and caregivers to share their experiences anonymously. Information collected through Atlas is used to support TCF's patient research, survivorship reporting, and advocacy efforts.

Consent. Before any information is collected through Atlas, you will be asked to provide explicit consent for your anonymous responses to be included in TCF's research. You may decline consent and still use Atlas as a general support tool; in that case, your responses will not be included in any research or reporting.

Anonymity. Atlas is designed to collect responses without linking them to your identity. We ask that you do not include your name, contact information, or other directly identifying details in your responses. If identifying information is inadvertently shared, TCF will make reasonable efforts to remove it before any aggregated reporting is produced.

What we collect. Through Atlas, we may collect voluntarily provided information including: age at diagnosis, stage at diagnosis, treatment type, care experience, survivorship impacts, and resource gaps. These responses are used only in aggregate or de-identified form and are never published at the individual level.

How responses are used. Aggregated, de-identified findings from Atlas conversations may be used in:

  • TCF's annual Patient Voice Report and related research publications
  • Advocacy materials presented to healthcare providers, policymakers, or media
  • Grant applications and impact reporting
  • Educational content development

Data processing. Atlas conversations are processed through Chatbase, a third-party AI platform. Chatbase operates as a data processor on TCF's behalf and is required to protect conversation data in accordance with applicable privacy standards. Conversation logs may be retained by Chatbase for a period consistent with their platform terms. TCF periodically reviews and exports conversation data for research analysis and does not use this data for advertising or commercial purposes.

Not a crisis or medical resource. Atlas is not a substitute for clinical care, crisis support, or professional mental health services. See Section 9 for crisis resources.

c. Future AI Tools

TCF may introduce additional AI-powered tools in the future. When we do, this Privacy Policy will be updated to describe how those tools collect and use information. We will notify users of material changes as described in Section 15.

d. General AI Data Practices

Across all AI tools operated by TCF:

  • We do not use your interactions to train external AI models without your explicit consent.
  • We do not sell or license conversation data to third parties.
  • Third-party AI platforms used by TCF are selected based on their privacy and security standards and are contractually prohibited from using TCF user data for their own commercial purposes.
  • You may request deletion of conversation data associated with your use of any TCF AI tool by contacting us at info@testicularcancer.org.

6. Text Message (SMS) Communications

TCF offers text message (SMS) communications to keep our community informed and engaged. This section explains how our SMS program works and how we handle the information associated with it.

a. Types of Messages

If you opt in to receive text messages from TCF, you may receive messages related to:

  • Program and support messages, including survivor and caregiver support resources, peer connection updates, program announcements, and event reminders
  • Educational and awareness alerts, including new resources, awareness campaigns, and advocacy calls to action
  • Fundraising and donation communications, including campaign appeals, giving day reminders, and donation acknowledgments

b. How You Opt In

You may opt in to receive text messages from TCF in several ways, including:

  • Submitting your mobile number through a web form, donation form, or sign-up page where SMS consent language is provided
  • Texting a designated keyword (such as JOIN, INFO, or a campaign-specific keyword) to a TCF short code or phone number
  • Providing your mobile number and consent during event registration
  • Otherwise affirmatively agreeing to receive text messages from TCF

By opting in, you consent to receive recurring autodialed and prerecorded text messages from TCF at the mobile number provided. Consent is not a condition of any donation, purchase, or participation in TCF programs. Message frequency varies. Message and data rates may apply based on your mobile carrier plan.

c. How to Get Help or Opt Out

You can opt out of TCF text messages at any time by replying STOP to any message you receive. After you reply STOP, you will receive a one-time confirmation message and will not receive further marketing or program text messages from that program, except where required to confirm your opt-out or as otherwise permitted by law. You may rejoin at any time by texting the applicable keyword again or signing up through one of the methods above.

For help, reply HELP to any message or contact us at info@testicularcancer.org. Standard message and data rates may apply to all messages sent or received.

Opting out of SMS communications will not affect your receipt of other communications from TCF, such as email or postal mail. To manage other communication preferences, see Section 11.

d. Carriers and Service Providers

TCF uses third-party SMS service providers — currently Twilio — to send and manage text messages on our behalf. These providers operate as data processors and are required to protect your information consistent with this Privacy Policy. Mobile carriers are not liable for delayed or undelivered messages. Supported carriers may change without notice.

e. Information Collected Through SMS

In connection with our SMS program, we may collect and process:

  • Your mobile phone number
  • The date, time, source, and method of your opt-in consent
  • The content of messages you send to us and that we send to you
  • Delivery, engagement, and opt-out data
  • Mobile carrier information necessary to deliver messages

f. Use and Sharing of SMS Data

We use SMS-related information to deliver the messages you have requested, respond to your inquiries, maintain records of consent and opt-outs as required by law, and improve our SMS program. No mobile information, phone numbers, or SMS opt-in data is shared with third parties or affiliates for marketing or promotional purposes. Information may be shared only with our SMS service providers and mobile carriers as needed to deliver messages, or as otherwise described in Section 3.

g. Not a Crisis or Medical Resource

TCF text messages are not a substitute for clinical care, crisis support, or professional medical advice. SMS is not a secure channel; please do not send sensitive personal health information by text. See Section 9 for crisis resources.

7. Discord Community

TCF operates an official Discord server to support survivors, patients, caregivers, and allies through peer connection, education, and community programming. This section explains how that space works and how we handle information shared there.

a. Discord Is a Third-Party Platform

Our Discord server is hosted on Discord, a third-party platform operated by Discord Inc. By joining our server, you also agree to Discord's Terms of Service and Privacy Policy, which govern Discord's collection and use of your information independent of this Privacy Policy. We encourage you to review Discord's policies before joining. TCF does not control, and is not responsible for, Discord's data practices, retention, or security.

b. What TCF Can See

TCF staff and authorized volunteer moderators have administrative access to our server. In that role, we may view, retain, and act on:

  • Public-channel messages, reactions, threads, and shared media
  • Messages sent to TCF bots, official staff accounts, or moderation channels
  • Voice channel participation metadata (e.g., joins, leaves)
  • Member roles, server activity, and moderation history
  • Direct messages only when a member voluntarily contacts a TCF staff or moderator account, or reports a message to moderators

We do not have access to direct messages between members that are not shared with us.

c. What We Use Discord Information For

Information visible to TCF on Discord is used to:

  • Moderate the server and enforce community guidelines
  • Respond to questions, requests, and reports
  • Run programs, AMAs, expert Q&As, and scheduled support events
  • Identify themes, gaps, and impact stories that inform TCF's research, advocacy, education, and grant reporting
  • Improve the community experience
  • Grant or revoke "Premium" roles on the Discord server based on your Cojone Club® App Premium subscription status. This is a one-way flow: your subscription status in the App is reflected to your Discord account through a TCF-operated bot; we do not send any other Cojone Club® App data to Discord.

d. Use of Discord Content for Research, Quotes, and External Materials

TCF may review Discord conversations and channel content to identify themes, insights, and member experiences that support our mission. When this content is used externally — for example, in research summaries, awareness materials, social media, donor communications, grant reports, or media — we follow these practices:

  • Aggregated and de-identified themes drawn from Discord activity may be used without contacting individual members, provided no member is identified or identifiable.
  • Direct quotes or stories attributed (even informally) to a specific member are used only with that member's explicit, advance consent. Consent will describe how the quote will be used and whether you will be identified by name, first name, initials, or fully anonymized.
  • You may decline, withdraw, or modify your consent at any time by contacting us at info@testicularcancer.org. Withdrawal will not affect uses already published, but we will not include the content in future materials.

e. Sensitive and Health Information on Discord

Members frequently discuss diagnosis, treatment, survivorship, sexual health, fertility, mental health, and other sensitive topics on our server. Please remember:

  • Discord is not a private or secure communications channel. Other server members, Discord itself, and third parties Discord works with may have access to content you post.
  • Do not share information you are not comfortable having seen by others. Avoid posting full names, contact information, medical record numbers, or other directly identifying details.
  • Information you voluntarily share is treated as voluntarily provided health-related information under Section 1(b).

f. Moderation, Safety, and Reporting

To keep the community safe, TCF may retain moderation logs (including warnings, removed messages, mutes, kicks, and bans) and may take action on conduct that violates community guidelines or Discord's Terms of Service. In limited circumstances — such as credible threats of harm to self or others — TCF may share information with Discord, emergency services, or other appropriate parties as permitted or required by law.

g. Leaving the Server and Deleting Content

You may leave the TCF Discord server at any time. Leaving will remove you from member-only channels but will not automatically delete messages you previously posted, which may remain visible in channel history. To request deletion of specific messages or content, contact us at info@testicularcancer.org. Some content may be retained where required for moderation records or legal obligations. Discord retains its own copies of content under its own retention policies, which TCF does not control.

h. Not a Crisis or Medical Resource

The TCF Discord community is a peer-support and educational space. It is not a substitute for clinical care, crisis support, or professional medical or mental health services. Moderators are not clinicians. See Section 9 for crisis resources.

8. The Cojone Club® App

The Cojone Club® App (app.testicularcancer.org) is TCF's member-only digital platform for survivors, patients, caregivers, and allies. It provides member profiles, a community feed, a member directory and map, a community resources hub, and an optional Premium membership tier. This section explains how the App handles your information and what controls are available to you.

a. The App Is a Distinct Service

The Cojone Club® App is operated by TCF and is a separate service from our public website, Discord server, AI tools, and SMS program — though it integrates with several of them (for example, you may link your Discord account, and your Premium subscription is mirrored to your Discord role; see Section 7(c)). When you use the App, this entire Privacy Policy applies, with the App-specific provisions in this Section 8 taking precedence over more general provisions to the extent of any conflict.

b. Account, Authentication, and Access

To use the App you must create an account and confirm you are age 18 or older. We support two authentication methods:

  • Email magic link. You enter your email and we send you a one-time sign-in link by email.
  • Discord OAuth. You authorize Discord to share basic profile information (Discord ID, username, avatar, email) with TCF to create or link an App account.

You may optionally enable multi-factor authentication on your account from your account settings.

We use Supabase as our authentication provider and database, and SendGrid for transactional email delivery. Authentication session cookies are required to keep you signed in.

c. Profile Information You Choose to Provide

After signing up, you complete a brief onboarding flow. Beyond that, all profile fields are optional and member-controlled. Examples include:

  • Display name and profile photo
  • Approximate location (we store a region-bucketed value derived from your ZIP code for the member map; the raw ZIP is treated as sensitive — see Section 8(d))
  • Role in community (e.g., survivor, caregiver, ally, supporter)
  • Survivor-since year, diagnosis date, treatment path, and your story (each treated as sensitive — see Section 8(d))
  • Links to your public social-media profiles (Instagram, LinkedIn, X, Facebook)

You may edit or remove any profile field at any time through your account settings.

d. Sensitive Fields and Enhanced Protections

The following fields are treated as sensitive within the App:

  • Diagnosis date
  • Treatment path
  • Survivor-since date
  • Story (long-form personal narrative)
  • Raw ZIP code (the region-bucketed value is not sensitive)
  • Role in community (because "survivor" implies a diagnosis)

For these fields:

  • They are visible to you by default and are not surfaced publicly. They may be shown to other authenticated TCF members only when you have enabled directory visibility (see Section 8(e)).
  • The database tables that hold these fields enforce per-row access control (Row-Level Security) so that members can only read data that has been made available to them.
  • We do not include sensitive fields in any third-party analytics, marketing, or advertising. We do not include them in external research without explicit, separate consent collected at the point of the research.

e. Account Settings and Preferences

You can manage the following preferences from your account settings at any time:

  • Directory visibility — when on, your profile appears in the member directory and on the member map (see Section 8(i)). When off, your profile is visible only to you.
  • Email reminders — receive periodic program reminders by email.
  • Email newsletter — opt in to TCF's general newsletter via Mailchimp.
  • Multi-factor authentication — strengthen account security.
  • Premium subscription — manage or cancel your Premium membership.
  • Cookie consent — review or change your cookie choices any time via the "Cookie Settings" link in the App footer (see Section 4).

Changes take effect immediately. TCF is actively building additional self-service privacy controls — including per-purpose consent management and on-demand data export — and will update this Policy as those controls ship.

f. The Member Feed, Reactions, and Member-Generated Content

The App includes a community feed where TCF administrators post updates and where automated entries are created when members complete onboarding or upgrade to Premium. Members may react to posts with a "heart" reaction. Member-generated posting may be added in the future and will be governed by community guidelines published in the App.

Content posted to the feed is visible to all authenticated members of the App. Do not post information you are not comfortable having other members see.

Reactions ("hearts") are visible to other members in aggregate (a count) and to TCF administrators on an individual basis for moderation purposes.

g. Aggregate Community Statistics Shown in the App

The App displays a "community growth" panel near the top of the feed showing aggregate, non-identifying statistics about TCF's reach. These include:

  • Total number of registered Cojone Club® App members
  • Public count of TCF's Discord server membership and members currently online (pulled from Discord's public invite endpoint)
  • Approximate monthly visitor count to testicularcancer.org (pulled from our Fathom Analytics dashboard)
  • Public follower counts on TCF's social-media accounts, manually maintained by TCF staff

These statistics are aggregate counts only. No individual member's information is sent to Discord, Fathom, or any other party to generate these displays — the App reads aggregate counts from those services and displays them. Clicking through any of these statistics may open the corresponding third-party site (Discord, Instagram, Fathom dashboard, or testicularcancer.org); see Section 13 for our general approach to third-party links.

h. Premium Membership and Payment Processing

The App offers an optional Premium membership tier. Premium subscriptions are processed by Stripe, our payment processor. When you subscribe:

  • Stripe collects and processes your payment information directly. TCF does not store your full card number, CVV, or bank account details.
  • TCF receives a record of the subscription (status, plan, last-four digits, billing email) for membership management and customer support.
  • Your Premium status is automatically reflected to your Discord account if you have linked Discord (see Section 7(c)). This is the only data sent from the App to Discord beyond what you have voluntarily shared on Discord itself.
  • You may cancel your subscription at any time from your account settings.

i. Member Directory, Member Map, and Discoverability

The App includes a member directory and a regional member map to facilitate peer connection. Your profile appears in these features only if you have enabled directory visibility (see Section 8(e)). By default, you are not listed.

  • The member directory shows fields you have made available.
  • The member map shows a region-bucketed marker derived from ZIP code; raw ZIP codes are never displayed on the map.
  • You may turn directory visibility off at any time, which removes you from both the directory and the map.

j. Data Subject Rights Within the App

You have the following rights as a Cojone Club® App member:

  • Right to amend. Edit any of your profile fields at any time from account settings. For fields that aren't directly editable in the UI, contact info@testicularcancer.org.
  • Right to delete. Delete your account from account settings. Deletion is a soft delete (your account is marked deleted immediately and hidden from all member-facing views) followed by a hard delete after 30 days. Some non-identifying records — such as administrative moderation logs — are retained for compliance purposes after deletion.
  • Right to know. You may request a copy of the personal information TCF holds about you by emailing info@testicularcancer.org. We are building self-service export functionality and will surface it in account settings when it ships.
  • Right to withdraw or change preferences. Manage notification, visibility, subscription, and cookie-consent preferences from account settings (see Section 8(e)). For requests to remove or restrict information beyond what those controls allow, email info@testicularcancer.org.

k. Security in the App

We protect Cojone Club® App data with:

  • TLS 1.2+ encryption in transit and HSTS
  • AES-256 encryption at rest (Supabase managed)
  • Row-Level Security enforced on every database table
  • Role-based access controls for TCF administrators
  • Logging of administrative actions
  • Multi-factor authentication available on member accounts

While no system can guarantee absolute security, we have engineered the App against the privacy standards of Washington's My Health My Data Act (MHMDA), California's Confidentiality of Medical Information Act (CMIA), and the FTC Health Breach Notification Rule.

l. Channel Security and Crisis Reminder

The Cojone Club® App is a community and education platform. It is not a clinical, medical, or crisis service. The App is not a secure channel for sensitive medical communication with a healthcare provider. Communications with TCF staff or other members through the App do not create a clinical, therapeutic, or confidential relationship. See Section 9 for crisis resources.

9. Mental Health and Crisis Resources

TCF programs touch on cancer, survivorship, fertility, sexual health, body image, identity, and the emotional impact of all of the above. We recognize that members of our community may experience anxiety, depression, grief, trauma, or other forms of distress, and may share that experience with us through our Services. This section explains how we approach mental health content and what to do in a crisis.

a. We Are Not a Clinical or Crisis Service

TCF is not a healthcare provider, mental health provider, or crisis service. Our staff, volunteers, moderators, and AI tools are not clinicians and cannot provide diagnosis, treatment, therapy, counseling, or crisis intervention. Communications with TCF — whether through our website, email, phone, text message, Discord, The Cojone Club® App, AI tools, or events — do not create a clinical, therapeutic, or confidential relationship.

b. If You Are in Crisis

If you are in crisis or experiencing a medical or mental health emergency, please use the resources below or contact local emergency services immediately:

  • Emergency: Call or text 911 (U.S.) or your local emergency number
  • 988 Suicide & Crisis Lifeline (U.S.): Call or text 988, or chat at 988lifeline.org
  • Crisis Text Line (U.S.): Text HOME to 741741
  • Cancer Support Helpline: 1-888-793-9355
  • Veterans Crisis Line: Call 988 then press 1, or text 838255

If you are outside the U.S., please use the equivalent crisis services in your country.

c. How We Handle Mental Health Information

When you voluntarily share mental health information with TCF — for example, in Atlas conversations, surveys, survivor stories, Discord posts, Cojone Club® App profile fields, SMS replies, or emails to staff — we treat it as a sensitive subcategory of health-related information under Section 1(b). Specifically:

  • Mental health content shared through Atlas and other AI tools is used only in aggregate or de-identified form, as described in Section 5.
  • Mental health content shared in surveys, stories, or research is used as described in the consent provided at the point of collection.
  • Mental health content shared on Discord is handled as described in Section 7, including the consent requirements for any externally attributed quotes.
  • Mental health content shared in The Cojone Club® App is handled as described in Section 8, including the enhanced protections for sensitive fields.
  • We do not sell mental health information and do not share it with third parties for marketing or advertising purposes.

d. Concerns About Imminent Harm

If TCF receives information through our Services suggesting an imminent risk of harm to you or another person, we may, consistent with applicable law, take reasonable steps to connect the person to crisis resources, contact platform providers (such as Discord), or contact emergency services. We do this only in good faith and to the minimum extent we believe necessary to support safety.

e. Channel Security Reminder

Email, SMS, Discord, The Cojone Club® App, and AI chat tools are not secure or confidential channels for sensitive mental health or medical information. If you need confidential support, please use the crisis resources above or speak with a licensed clinician.

10. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, or disclosure. For the engineering details specific to The Cojone Club® App, see Section 8(k). While no system can guarantee absolute security, we strive to use industry-standard practices to protect your data.

11. Your Choices and Rights

Depending on your location, you may have the right to:

  • Access, update, or correct your personal information
  • Request deletion of your personal information, subject to legal or operational requirements
  • Opt out of non-essential communications at any time by using unsubscribe links, replying STOP to any text message, leaving our Discord server, deleting your Cojone Club® App account, or contacting us
  • Manage or withdraw cookie consent at any time using the cookie banner or the "Cookie Settings" link in the footer of our website and the App (see Section 4)
  • Withdraw consent for the use of your quotes, stories, or other identifiable content in TCF materials going forward
  • Manage notification, visibility, and subscription preferences within The Cojone Club® App from account settings

For rights specific to The Cojone Club® App — including account deletion, field correction, and requesting a copy of your data — see Section 8(j).

To exercise these rights for any other Service, please contact us using the information in Section 16.

12. Children's Privacy

Our Services are intended for a general audience. We do not knowingly collect personal information from children under 13 without parental consent. If we become aware that such information has been collected unintentionally, we will take appropriate steps to delete it.

The Cojone Club® App is intended for users age 18 or older. Account creation requires affirmation of adult age. If you become aware that a minor has created an App account, please contact us at info@testicularcancer.org.

13. Third-Party Links and Platforms

Our website, The Cojone Club® App, and community spaces may contain links to third-party websites or platforms, and certain Services (including Discord) are themselves provided through third-party platforms. The Cojone Club® App's community growth panel (see Section 8(g)) may include click-through links to Discord, Instagram, Fathom's public dashboard, and testicularcancer.org. Our public website also embeds third-party widgets — such as the Trustpilot reviews widget and the Fundraise Up donation experience — that may set their own cookies as described in Section 4.

We are not responsible for the privacy practices or content of those external sites and platforms. When you click an external link from our Services, or interact with an embedded third-party widget, you may be subject to the third party's own privacy policy and tracking practices (including, in the case of Instagram and similar platforms, cookie-based advertising tracking). We encourage you to review their privacy policies before providing personal information or proceeding to interact with them.

14. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Records of SMS consent and opt-out requests, cookie consent records, and Discord moderation records are retained for the period required by applicable law or operational need.

For The Cojone Club® App specifically: deleted accounts are soft-deleted immediately and hard-deleted after 30 days, except for administrative moderation records that are retained for compliance and security purposes.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. For material changes that affect The Cojone Club® App, we will also notify active members within the App and by email. Continued use of our Services after changes are posted constitutes acceptance of the revised policy.

16. Contact Us

If you have questions about this Privacy Policy, our privacy practices, our SMS program, our Discord community, The Cojone Club® App, or your rights with respect to any TCF AI tool, please contact:

Testicular Cancer Foundation Email: info@testicularcancer.org

For data subject requests specific to The Cojone Club® App (deletion, amendment, copy requests, preference changes), the fastest path is your account settings within the App.

This Privacy Policy reflects our commitment to transparency, accountability, and respect for the individuals and communities we serve.