Policy surface
Privacy notice — Staging draft
For Staging review only. This draft has not received final legal, tax or privacy approval.
Data minimization
MAPARCHY separates public self-provided identity from private customer, payment and signature data. Raw IP addresses are excluded from business records; coarse country decisions and rule versions are retained.
Service providers
Planned providers include OVH, Stripe, CoinPayments, Amazon SES, Cloudflare Turnstile, MaxMind and OpenAI moderation. Provider activation remains subject to environment-specific acceptance.
Audience analytics
When enabled, Google Analytics measures visits to public MAPARCHY pages using analytics cookies. Account, administration and payment pages are excluded. Page categories are sent without search text, URL queries, fragments or location rename text. Advertising personalization is disabled. MAPARCHY does not load audience analytics when your browser sends Global Privacy Control or Do Not Track.
Signatures and documents
Signed Executive Orders are private by default. Public previews and social images omit the signature. Drawn signatures are sanitized to an image; raw stroke telemetry is not retained.
Retention
Finance and tax records use a configurable seven-year baseline; raw access/security logs default to 30 days. Final schedules require legal and privacy approval.