Privacy Policy
Last updated: September 26th, 2026
Official Man Card, LLC ("Official Man Card", "we", "us", or "our") respects your privacy. This Privacy Policy explains what personal data we collect through officialmancard.com (the "Site"), why we collect it, who we share it with, and the rights you have over it, including under the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act, as amended by the CPRA (CCPA).
Who is responsible for your data
Official Man Card, LLC is the data controller for personal data processed through the Site. For any privacy request or question, contact us at privacy@officialmancard.com or via our contact page.
What we collect
We collect only the data we need to operate the Site and our services:
- Account data. When you register or sign in, we store your name and email address. Authentication uses a one-time passcode (OTP) "magic link" rather than a stored password.
- Submission data. If you submit a revocation or post a comment, we store the content you provide along with an associated name and, where given, an email address (including the name of the person a revocation concerns).
- Newsletter data. If you sign up for email updates, we store your email address as a contact with our email provider once you confirm it through the link we send (double opt-in). Until you confirm, we keep only a salted hash of the address in our send log, to avoid sending more than one confirmation a day.
- Contact messages. If you use the contact page, we receive your name, email address and message by email so we can read and answer it.
- Purchase data. If you buy a product, your order and customer details (such as email and billing information) are processed through our commerce platform (see Sub-processors below).
- Usage & analytics data. Subject to your consent choices (see Cookies & analytics), we collect aggregated interaction and performance data via Google Analytics, for example pages viewed, approximate region, device and browser type, and referring source.
- Technical data. Standard server and edge logs (e.g. IP address and request metadata) processed by our infrastructure provider to deliver and secure the Site.
We do not knowingly collect data from anyone under the age of 16.
How we use your data
- To create and secure your account and send authentication codes.
- To publish and moderate revocations and comments you submit.
- To process and fulfill purchases and provide customer support.
- To answer messages sent through the contact page.
- To send Man News Daily and Revoked Report updates to people who signed up and confirmed (newsletter, consent-based).
- To measure and improve Site performance and content (analytics, consent-based).
- To comply with legal obligations and enforce our Terms of Service.
Legal bases (GDPR). We rely on performance of a contract (accounts, purchases), consent (analytics cookies, the newsletter and other optional communications), legitimate interests (securing and improving the Site), and legal obligation where applicable.
Cookies & analytics
Strictly-necessary cookies (including the secure, HttpOnly session cookie that keeps you signed in) are always active because the Site cannot function without them. They are never used for tracking.
Analytics cookies (Google Analytics) are governed by your consent and your region:
- Outside the United States, analytics are off by default and load only after you explicitly opt in via our cookie banner.
- In the United States, analytics are on by default and you may opt out at any time using "Do Not Sell or Share My Info" or the Cookie Settings link in the footer.
For full detail on each cookie, see our Cookie Policy.
Who we share data with (sub-processors)
We do not sell your personal data. We share it only with the service providers that help us run the Site, each acting on our instructions under a data-processing agreement:
| Sub-processor | Purpose | Data involved |
|---|---|---|
| Cloudflare, Inc. | Hosting, edge delivery, database (D1), media storage (R2), Workers | Account data, submission data, technical logs |
| Google LLC (Google Analytics) | Site usage measurement | Usage & analytics data (consent-based) |
| Resend | Sending authentication, transactional and newsletter email; holding the newsletter contact list | Email address; contact messages sent to us |
| WooCommerce / WordPress | Order and customer processing for purchases | Email, order & billing data |
These providers may process data in countries outside your own; where required we rely on Standard Contractual Clauses or equivalent safeguards for international transfers.
Data retention
We keep account and submission data for as long as your account is active or as needed to provide the service, and thereafter only as required to meet legal, accounting, or security obligations. Analytics data is retained according to our Google Analytics configuration. Authentication codes expire automatically. Newsletter contacts are kept until you unsubscribe (every newsletter has a one-click unsubscribe link) or ask us to delete them; newsletter confirmation links expire after 7 days. Contact messages are kept in our inbox for as long as needed to answer them.
Your privacy rights {#your-privacy-rights}
Depending on where you live, you have some or all of the following rights:
- Access / Know: request a copy of the personal data we hold about you.
- Deletion / "Right to be Forgotten": request that we delete your personal data.
- Correction: request that we fix inaccurate data.
- Portability: receive your data in a machine-readable format.
- Opt out of analytics / "Do Not Sell or Share": disable analytics tracking at any time via Cookie Settings.
- Withdraw consent: where processing is based on consent. For the newsletter, use the unsubscribe link in any newsletter email.
To exercise any of these rights, email privacy@officialmancard.com or use our contact page. We will verify your identity (typically by confirming control of the email on the account) before acting, and we will respond within the timeframe required by applicable law. You will not be discriminated against for exercising your rights.
For deletion requests, we permanently remove your account-level personal data (name, email, sessions) and any newsletter contact and anonymize any public revocations or comments you authored so that they can no longer be linked to you, while the public record itself remains intact.
Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be posted on this page with a revised "Last updated" date.
Contact
Official Man Card, LLC: privacy@officialmancard.com, or via our contact page.