Privacy Policy

This policy is short because there is very little to describe. The consumer data you match never reaches us — not by promise, but by architecture.

Millennials Creatives LLC · Last updated 14 August 2026

What we never receive

Your customer files, match results, deletion requests, suppression lists, company profile and evidence files never leave your browser. The application is served with a Content-Security-Policy of connect-src 'none', which means the browser itself refuses to let the page open any network connection — no fetch, no upload, no analytics beacon. It is enforced by your browser, not by our good intentions.

You can confirm this yourself in about ten seconds, without taking our word for it or reading our source:

curl -sI https://mcstanding.millennialscreatives.com | grep -i content-security

Because we never receive that data, there is no data-processing agreement to sign for the matching itself. If your legal team wants that stated on letterhead for their file, ask and we will send it.

What we do hold

Your email address, if you bought a subscription or wrote to us. We use it to send your renewal reminder, to answer you, and to tell you when a regulatory deadline moves. We do not sell it, rent it, or send unrelated marketing.
Your purchase record, held by Stripe: company name, amount, invoice number, and the card details we never see. Stripe is our payment processor and its privacy policy governs that data.

That is the complete list.

No analytics, no cookies, no trackers

This website sets no cookies, runs no analytics, and loads no third-party scripts or fonts. There is no Google Analytics, no pixel, no session recorder, no consent banner — because there is nothing to consent to. Your visit here is not logged to a profile.

The application stores your compliance record in your browser's local storage. That is storage on your own machine, readable only by you, and it is never transmitted anywhere.

How long we keep things

We keep your email while you are a customer and for as long as we have a reason to contact you about your purchase. Ask us to delete it and we will, subject to the accounting records we are legally required to retain. Your compliance record is not ours to keep or delete — it is on your machine, and only you can remove it.

Your rights

Under the CCPA, the GDPR and equivalent laws you may ask what we hold about you, ask for a copy, ask us to correct or delete it, and object to how we use it. Email contact@millennialscreatives.com and we will respond within 30 days. There is no form and no fee.

We do not sell or share personal information as those terms are defined by the CCPA, and we never have.

Sub-processors

Stripe — payments and receipts.
Our hosting provider — serves the site's files. Standard web server logs may record an IP address and requested file; they contain nothing about your compliance work, because that never leaves your browser.

Nobody else. If that list ever changes, this page changes first.

Security

Found a vulnerability? Email contact@millennialscreatives.com — see security.txt. We will acknowledge within two business days and we will not threaten you for telling us.

Contact

Millennials Creatives LLC — contact@millennialscreatives.com.