MarkBaker.com Privacy Policy

Effective date: October 30, 2026

This page explains what MarkBaker.com collects, why, and your choices.

Who we are

MarkBaker.com is run by Mark Baker, an individual. "We" means Mark. Contact: Admin@MarkBaker.com.

What we collect

• From your sign-in provider (Apple, Google or Microsoft): an account ID, your name and email. We use the name to confirm it says Mark Baker. We never get a password. If the check fails, we keep nothing.
• From you: what you add to your profile (photo, slogan, color, city, country, job, websites, birth year, about me), plus posts, comments, likes, messages, blocks, reports and settings.
• Automatically: one sign-in cookie, a scrambled (hashed) form of your internet (IP) address for anti-spam limits, and a short log of account events (like joining). Our hosting provider keeps standard server logs, which include IP addresses.
• Found links: we list public web pages about people named Mark Baker, found through public web searches. Public pages only. For each we keep the page address, a name label, a short line from the page, city and country, a link to a photo on that page, and the date added.
• Removal requests: the email you give, to confirm or reply.

How we use it

To run your account, show your profile the way you set it, deliver messages and message notices, keep the site safe, and tell Mark when someone joins (member number, city and country only). We don't sell your information or use it for ads.

What's public

Profiles start private and hidden from search engines until you change that. When shown, members see your profile; the public sees what you didn't mark "members only." Websites you add to your profile appear as public links. Found links are public until removed.

Message notices

When someone messages you, we email a short notice with the sender's name and a link, never the message itself. On by default. Turn them off under Edit profile > Privacy or with the one-click link in any notice. They're rate-limited and never marketing.

Private messages

Stored on our server and protected by site security, but not end-to-end encrypted (scrambled so only you and the other person can read them). Mark, as admin, sees a message only if its recipient reports it.

Map

Off unless you turn on "Show my city on the map." We use only the city and country you type, placed at the city center, rounded to about 1 km. We never ask for your device location or address. We look up map coordinates only when the map is on, sometimes via OpenStreetMap's lookup service (city and country only). Map images load from OpenStreetMap, which sees your IP address when you view the map.

ID check (Verified badge), if and when offered

Not offered yet. If offered, it is optional and run by Stripe, Inc. (Stripe Identity) as our service provider. You photograph your ID and take a selfie; Stripe compares them. We never receive your ID images, selfie or face data; we get only a yes/no result and keep a Verified flag.

Face data. Laws such as the Illinois Biometric Information Privacy Act (BIPA), and those of Texas and Washington, treat face geometry as biometric data. Before the check, you'll get a separate written consent screen. Face data is used only for this check, is never sold, leased or traded, and is destroyed when its purpose is met, and no later than 3 years after your last interaction with us, or sooner if the law requires. Stripe's retention is published on the consent screen.

Who we share with

Only the services that run the site:

• Our hosting provider, currently in the US (site, database, email).
• Apple, Google or Microsoft, for sign-in.
• Stripe, for the ID check, only if you choose it.
• OpenStreetMap, for map images and city lookups.
• Found-link websites, whose photos load from their own servers, so they may see your IP address.
• Authorities, when the law requires or to protect someone's safety.
• A future owner, such as a company Mark forms, under this policy.

Cookies

One cookie, "mbsid," keeps you signed in for up to 30 days after your last visit; signing out clears it. Your light/dark choice stays on your device. No analytics, ad trackers or social buttons.

How long we keep things

We keep information until you delete it, or until we need to delete it for storage reasons. Sign-in sessions end after 30 days unused, removal links after 7 days, and anti-spam counters within a day.

Your choices

• Download: Edit profile > Download my data.
• Fix: edit your profile any time.
• Delete: Edit profile > Delete my account, any time. This removes your profile, photos, posts, comments, likes, conversations (for both people, since they're shared), account event records and reports tied to you.
• Stop notices: Edit profile > Privacy, or the one-click link.
• Remove a found link: tap "This is me, remove this link," no account needed. After you confirm by email, it's deleted and blocked from returning (we keep only a scrambled fingerprint of the address). Or email Admin@MarkBaker.com.

Age and children

You must be 18 or older to join. One exception: a parent or legal guardian may create and control a listing for their child (for example, a young prodigy). The parent creates the account, consents, provides the information, and manages it. We collect nothing directly from children under 13, consistent with the U.S. Children's Online Privacy Protection Act (COPPA). Keep a child's listing to the minimum (no contact details, school or exact location). A parent may review or remove it any time by emailing Admin@MarkBaker.com. If we learn we collected a child's information otherwise, we delete it.

California and other U.S. states

Depending on your state (such as California under the California Consumer Privacy Act, or CCPA), you may ask to know, get a copy of, correct or delete your information, and opt out of sale, sharing for ads or profiling. We do none of those three. Ask at Admin@MarkBaker.com, yourself or through someone you authorize. We won't treat you differently for asking. If we say no, reply to appeal.

Outside the US (including EU and UK)

Your information is stored in the US. Under the EU and UK General Data Protection Regulation (GDPR), you may ask to access, correct, delete, restrict or move your data, or object to its use. Our legal bases: providing your account; our legitimate interest in a safe community and in listing public pages; and your consent for the map and ID check, which you can withdraw any time. You may complain to your local data protection authority. We reply within one month (45 days elsewhere).

Security

No passwords are stored here. Sessions use secure, encrypted (HTTPS) cookies. Uploaded photos are re-processed to strip hidden data like GPS location. Admin tools are limited to Mark. No system is perfect; if a breach affects you, we'll tell you as the law requires.

Changes

We'll update the effective date when this changes, and tell members ahead of big changes.