To communicate contribution privacy limits, begin with the actual decision rather than the response counter. Contribution privacy depends on who can access the action and which response details are visible. Display names and indicated amounts may be more sensitive than an organizer expects.
The situation is straightforward: people can view a shared action's participant responses. The difficult part is deciding what a response can reasonably establish. This guide works through that decision, the checks to make before inviting people, and the handover after the response window. The central boundary is that pledge amounts and display names may be visible to link holders.
- Pledge amounts and display names may be visible to link holders.
- Warn participants before collecting amounts.
- Choose a different private process if that visibility is unsuitable.
What to establish before asking for responses
Explain that visibility before inviting responses. People should not discover after participating that their amount can be seen by the other link holders.
Use this as the readiness test: warn participants before collecting amounts. Record the answer in terms a participant can understand. If the check is unfinished, say what is still unknown and who is finding out. An unanswered practical question should remain visible instead of being concealed by a polished invitation or an encouraging response count.
The boundary that changes this decision
Collect only what the purpose needs. Avoid asking for financial explanations, salary information or proof that a person can afford a particular amount.
Keep the statement “pledge amounts and display names may be visible to link holders” beside the request, where it can influence the decision. Placing it only in a later explanation is too late for someone who has already acted on a different assumption. A useful review asks whether the wording still describes the real arrangement when read outside the original conversation.
Turn the result into a usable next step
Where that visibility is unsuitable, use a different private process rather than vague assurances. A small audience can still copy information, so access controls and data minimization both matter.
The follow-through here is to choose a different private process if that visibility is unsuitable. Name the person who will do that and distinguish it from what the action itself records. If new information makes that step inappropriate, explain the change first. Participants should not have to infer a final commitment from a preferred option, a completion mark or a progress display.
- CheckWarn participants before collecting amounts.
- Keep visiblePledge amounts and display names may be visible to link holders.
- Follow throughChoose a different private process if that visibility is unsuitable.
A decision record you can adapt
For the case where people can view a shared action's participant responses, a short decision record keeps the facts separate from the response result. The entries below are a planning template, not a claim that any checks have already been completed. Replace unresolved entries with checked information before making the corresponding commitment.
| Record | What belongs here |
|---|---|
| Purpose | People can view a shared action's participant responses. |
| Boundary | Pledge amounts and display names may be visible to link holders. |
| Readiness check | Warn participants before collecting amounts. |
| Open point | The named person, source and date for any information still being checked. |
| Handover | Choose a different private process if that visibility is unsuitable. |
Set up the action around the actual task
- Open Create and choose the contribution goal template. Enter a clearly labelled target amount and one recording currency; this is the information the response format can represent.
- Give the request a specific title, such as “Communicate contribution privacy limits”. Explain that people can view a shared action's participant responses, so a person opening the link has enough context.
- Write the boundary in ordinary language: pledge amounts and display names may be visible to link holders. Remove any option or instruction that depends on pretending this limit does not apply.
- Before sending the invitation, warn participants before collecting amounts. Share only the non-sensitive outcome of the check, rather than the private material used to establish it.
- Choose the audience and response deadline. Ask people to record a non-binding pledge, and explain when the organizer will review the saved state.
- After reviewing the current result, choose a different private process if that visibility is unsuitable. Close or archive the action when further responses would no longer inform that step.
Fields to review for this format
- Purpose: Explain what the proposed goal includes and whether its figure is an estimate or a checked quote.
- Currency: Use one recording currency and keep conversion assumptions out of the saved amount.
- Meaning: A pledge is non-binding interest, not money received, a payment instruction or proof of legitimacy.
- Visibility: Explain who can see display names and amounts before asking people to indicate support.
- Collection: Obtain separate approval and use a verified authorized external process if the activity proceeds.
Work through an example before sharing
Consider an illustrative rehearsal in which people can view a shared action's participant responses. Nothing in this example is a customer story or evidence that a real arrangement has been approved. First, draft the invitation. Then ask a reviewer to explain what they think participation would mean. Compare their interpretation with this boundary: pledge amounts and display names may be visible to link holders. A mismatch is a reason to revise the request before collecting responses.
Next, rehearse the practical check: warn participants before collecting amounts. Suppose that check is unresolved when the response window ends. The correct handover should identify what remains unknown, rather than announce that the whole arrangement is settled. If the check is satisfactory, the organizer can proceed to choose a different private process if that visibility is unsuitable. In either branch, the response result and the external confirmation remain separate pieces of information.
Participants discover their amounts are visible
Warn people about the audience before submission rather than after a privacy concern. Choose another process if the amount visibility is unsuitable.
The evidence and handover for this exception
| Decision point | Case-specific review |
|---|---|
| Verify | Review public, unlisted and private access and the actual minimum information needed. |
| Communicate | Use the privacy request route for a case-specific issue without repeating exposed financial circumstances. |
For this exception, return to the original purpose: people can view a shared action's participant responses. Compare the changed information with what participants actually saw when answering. The appropriate response is determined by the practical difference, not by a desire to preserve a neat response total. In particular, pledge amounts and display names may be visible to link holders. If that boundary is still unresolved, state the remaining question before asking anyone to act on the result.
Use the controls that fit this particular request
In the case where people can view a shared action's participant responses, the platform should preserve the meaning of the request while making its next step easier to carry out. Review these linked product controls before you choose a different private process if that visibility is unsuitable. Each link explains the current interface and the limits that apply; it does not establish that an outside organization has approved this example.
- Describe the saved amount as a non-binding intention, never money received.
- Review the audience of names and amounts before inviting participation.
- Verify actual recipient authority and use appropriate reporting for misleading claims.
Choose the audience with care
The fact that people can view a shared action's participant responses does not mean every detail belongs in public discovery. A public action can be found by other visitors. An unlisted action stays out of Explore, but recipients can forward its URL. A private workspace action requires membership; use that control when a team needs restricted access, and still collect only information the task needs.
Questions that determine whether to proceed
What is the first useful check?
The immediate check is to warn participants before collecting amounts. Look for a current answer from the relevant person or source, not a guess inferred from the saved responses. If the answer is missing, describe the uncertainty and pause only the commitment that depends on it. People can still discuss the proposal while understanding that it is provisional.
What would make the response misleading?
The result becomes misleading if it obscures the fact that pledge amounts and display names may be visible to link holders. A response should be described in the terms the participant saw when submitting it. Do not silently reinterpret an earlier choice as consent to a different purpose, amount, time or arrangement. Material changes need an explanation and, where relevant, a fresh decision.
How should a changed response be handled?
Review the latest saved state before you choose a different private process if that visibility is unsuitable. While an action remains open, participants can update their response using the same identity. A change is useful information rather than evidence of bad intent. If the group has already taken an external step, discuss what can actually be revisited instead of implying that a response edit reverses it.
What should the organizer say at the end?
A useful closing message states what was recorded, what remains unresolved and who owns the next step. Here the practical handover is to choose a different private process if that visibility is unsuitable. Avoid claiming unanimous agreement when some people did not respond, and avoid describing a completed screen as proof that an event, purchase, payment or other outside activity has happened.
When is a different process more appropriate?
Use another process if the situation requires controls beyond this contribution goal: verified identity, legally binding approval, confidential records, regulated assessment or real financial handling, for example. Start with the actual boundary that pledge amounts and display names may be visible to link holders. The action can organize an ordinary conversation, but a clearer label cannot supply infrastructure or authority it does not have.
An invitation draft for this exact situation
The following is an illustrative starting draft for “Communicate contribution privacy limits”, not an announcement that the practical checks are complete. Adapt it to the actual audience, response window and verified arrangement before sharing. In particular, remove any statement you cannot honestly make and keep sensitive details in an appropriate private channel.
We are coordinating a situation in which people can view a shared action's participant responses. This action records a voluntary non-binding intention, without taking or verifying money. Please read the context and record a non-binding pledge using the choices or fields shown on the page. One boundary matters throughout: pledge amounts and display names may be visible to link holders. Before the group acts on the result, the responsible organizer will warn participants before collecting amounts. After reviewing current saved responses, the next step is to choose a different private process if that visibility is unsuitable. If a practical constraint is missing, raise it through the appropriate route before anyone assumes the arrangement is final. Do not post passwords, payment details or unnecessary personal information. Please participate only if you choose to, and update your intention if circumstances change. The displayed amount is not money received or available for spending. Any real collection requires a separately verified recipient and process. No payment is taken here, and the result does not establish charitable registration, tax deductibility, a receipt or a debt.
Read the draft from the recipient’s perspective: can they tell what they are answering, what remains tentative and who owns the follow-through? Compare it with the exception “participants discover their amounts are visible” discussed above. If that exception would make the invitation misleading, revise the request before collecting another response. A reusable pattern is useful only when its statements still fit the current situation; copying polished wording does not complete the underlying check.
References for checking the wider principles
The practical check in this guide is to warn participants before collecting amounts. The references below provide wider guidance on the communication, access, privacy or consumer principles behind that review. They do not verify the hypothetical arrangement or endorse Onact. Read the current source and any organizational or local rules before relying on a specific claim.
Continue with the related decisions
- Record interest in a shared celebration budget
- Respond to a misleading contribution action
- Plan a refund policy before collecting elsewhere
- Distinguish a budget estimate from a quote
- Review a contribution goal with a small committee
- Use a quiz to start a useful discussion
Put the checked plan into one clear request.
Use the contribution goal format when its response model fits this situation. Before sharing, warn participants before collecting amounts; after reviewing the saved result, choose a different private process if that visibility is unsuitable.
