Privacy Policy

Last updated: May 2, 2026

MungePoint is a desktop application published by Anadak LLC, a Florida limited liability company ("we," "us," or "Anadak"). This policy covers two things: (1) this marketing website at mungepoint.com, and (2) the MungePoint desktop application. We keep both sections short because we collect very little data.

1. Data Controller

Anadak LLC is the data controller for information described in this policy. For questions, contact [email protected].

Data Protection Officer

Anadak LLC has not designated a Data Protection Officer. As a small US-based business that does not engage in large-scale processing of special categories of data and whose core activities do not consist of regular and systematic monitoring of data subjects on a large scale, designation is not required under GDPR Article 37(1). For all data protection inquiries, contact [email protected].

2. What This Website Collects

Google Analytics (GA4)

We use Google Analytics 4 (measurement ID G-91F7XPPM1C) to understand how visitors find and use this site. GA4 sets cookies on your browser (see Section 8 below) and collects standard analytics data: pages visited, time on site, referral source, device type, and approximate geographic region. IP addresses are processed by Google but not stored in full. Google acts as a processor under its data processing terms.

Google Fonts

This site loads typefaces from Google Fonts. When your browser requests font files, your IP address is transmitted to Google. Google's Fonts privacy FAQ describes how they handle this data.

Server Logs

Our hosting provider may record standard HTTP server logs (IP address, URL requested, timestamp, user agent). These logs are used solely for security monitoring and are retained for no more than 90 days.

Form Submissions

If you contact us by email or through a contact form, we store your message and email address for the purpose of responding to your inquiry. We do not add you to marketing lists unless you explicitly opt in.

3. What the MungePoint Application Collects

MungePoint is designed to keep your data local. The application makes exactly two types of outbound requests to Anadak infrastructure:

That is the complete list. No other telemetry, usage analytics, crash reports, or diagnostic data is transmitted by the application.

4. What the Application Does NOT Collect

To be explicit, the MungePoint desktop application never transmits any of the following to Anadak or any third party:

• File content, file names, or file metadata from your SharePoint tenant
• Tenant structure, site names, library names, or folder hierarchy
• User identities, email addresses, or directory information from your tenant
• Readiness scores, scan results, or remediation history
• Authentication tokens or credentials

All SharePoint API calls go directly from your machine to Microsoft Graph. Scan results are stored in a local SQLite database on your device. When you uninstall MungePoint, that data is removed with it.

5. Third-Party Processors

We do not sell, rent, or share personal information with any other third parties.

6. Data Retention

• Website analytics: Google Analytics data is retained for 14 months per Google's default retention setting.
• Server logs: retained up to 90 days.
• Support correspondence: retained for the duration of the business relationship plus 12 months.
• Payment records: retained by LemonSqueezy in accordance with their privacy policy and applicable tax/financial regulations.
• Local application data: stored on your machine under your control; deleted when you uninstall MungePoint or manually remove its data directory.

7. Your Rights

All Users

You may contact us at [email protected] to request access to, correction of, or deletion of any personal information we hold about you. We will respond within 30 days.

California Residents (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it is used
• Request deletion of your personal information
• Opt out of the sale of personal information (we do not sell personal information)
• Not be discriminated against for exercising these rights

To exercise these rights, email [email protected] with "CCPA Request" in the subject line. We will verify your identity and respond within 45 days as required by the CCPA.

European Economic Area Residents (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, the following additional rights and disclosures apply:

Legal Basis for Processing

• Consent: We load analytics cookies (Google Analytics) only after you have given explicit consent via the cookie banner on this website. You may withdraw consent at any time by clicking "Cookie preferences" in the website footer.
• Contract performance: We process payment and license data as necessary to fulfill our contract with you when you purchase a MungePoint license.
• Legitimate interest: We process server logs (IP address, URL, timestamp) under the legitimate interest basis for security monitoring and abuse prevention. These logs do not use cookies and are retained for no more than 90 days.

Additional Rights

In addition to the rights listed above for all users, you have the right to:

• Request restriction of processing of your personal data
• Request portability of your personal data
• Object to processing based on legitimate interest
• Lodge a complaint with your local data protection supervisory authority

International Data Transfers

Google Analytics data and LemonSqueezy payment data are processed in the United States. Google relies on Standard Contractual Clauses (SCCs) approved by the European Commission for these transfers. LemonSqueezy processes payments subject to their own privacy policy and applicable data transfer mechanisms.

8. Cookies

This website uses the following cookies, all set by Google Analytics:

We do not use advertising cookies, social media trackers, or any other first-party cookies. This site requests your consent before loading analytics cookies. You can also block or delete cookies through your browser settings. Blocking analytics cookies does not affect site functionality.

Our checkout subdomain (store.mungepoint.com) is operated by LemonSqueezy and sets functional cookies (XSRF-TOKEN, laravel_session) required for the checkout flow. These cookies are scoped to the store subdomain and are governed by LemonSqueezy's privacy policy.

9. Do Not Track and Global Privacy Control

This site honors the Global Privacy Control (GPC) signal. If your browser sends a GPC signal, we will not load analytics cookies. We also respect the legacy Do Not Track (DNT) browser header as an additional opt-out signal, though DNT has no standardized legal framework.

10. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will:

• Notify the relevant supervisory authority within 72 hours of becoming aware of the breach, where required under GDPR Article 33
• Notify affected individuals without undue delay where the breach is likely to result in a high risk to rights and freedoms (GDPR Article 34)
• Document the facts of the breach, its effects, and remedial action taken

Given the limited personal data we hold (analytics data, support correspondence, license records via LemonSqueezy), breach scenarios are constrained. Notifications will be sent by email to the address on file for affected accounts.

11. Children

MungePoint is a business tool for SharePoint administration. It is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it promptly.

12. Changes to This Policy

We may update this policy to reflect changes in our practices or for legal reasons. When we make changes, we will update the "Last updated" date at the top of this page. Material changes will be noted on the website.

13. Contact

For privacy questions or data requests, contact:
Anadak LLC
Email: [email protected]