Privacy Policy

Last updated: July 24, 2026

This Privacy Policy explains what My County Records ("we", "us") collects, why, and what your choices are.

What we collect

• Account info: email, optional name, and a hashed password. Passwords are stored using Argon2id — we cannot recover them.
• Order info: which records you purchased, when, and the total. We use this to fulfill your orders and to show your records back to you.
• Payment info: card details are collected and stored by our payment processor (Stripe). We do not store card numbers on our servers.
• Technical logs: standard web-server logs (IP address, user agent, request path). Retained no longer than 30 days.

How we use it

• To provide the Service — deliver purchased records and let you access them.
• To send transactional emails (order confirmations, password resets, delivery notifications). We do not send marketing email without your opt-in.
• To detect abuse and comply with legal obligations.

What we don't do

We don't sell your data. We don't share account or order information with third parties except (a) service providers strictly necessary to run the Service (payment processor, transactional email, hosting), or (b) if compelled by valid legal process.

Cookies

We use one session cookie (mcr_sid, HttpOnly + Secure + SameSite=Lax) to keep you signed in. We do not run third-party ad or analytics trackers.

Your choices

• Export or delete your account: email support@mycountyrecords.com from your account address.
• Change your email or password: Account settings.

Data retention

Account and order records are retained as long as your account is active. If you delete your account, we retain minimal records required for tax/legal compliance (typically 7 years) and delete everything else within 30 days.

Contact

Privacy questions: support@mycountyrecords.com.

This document is a general template and does not constitute legal advice. Review with an attorney before use.