What we do with your data, and what we never keep.

Your file is read as a stream. The match keys in it — email, phone, name, ZIP — are hashed with SHA-256 in memory, and the original values are discarded before anything is written to disk. There is no database table for uploaded records. That is a structural choice, not a policy one: the storage does not exist, so the data cannot be kept.

The hashed keys are stored briefly so that a paid upgrade has something to match against. They are deleted when your upgrade completes, and in any case after 7 days. Hashes cannot be reversed into the addresses they came from.

We never return per-record data, to you or to anyone. A report is counts and percentages about a group. If your list has fewer than 400 rows we decline it, because a group that small stops being a group.

• The report itself: aggregate statistics only, never records.
• Your name and email, if you ask us to send you the report link.
• Your email, if you register interest in a product we have not built yet.
• A salted hash of your IP address, for rate limiting, deleted after 24 hours. Salted because an unsalted hash of an IP address is trivially reversible.
• Your email address if you unsubscribe, so that we can honor it.

• Raw email addresses, phone numbers, or names from an uploaded list.
• Any per-record output from the consumer dataset.
• Your payment card. Stripe handles payment; card details never reach our servers.

• Google Cloud — hosting, database, and the consumer dataset (US regions)
• Stripe — payment processing; card details go to Stripe and never to us
• Resend — transactional email only; your report link and receipts
• Google Analytics — site usage measurement, and only if you accept it

We do not sell your data, and we do not share it for advertising. There is no advertising pixel on this site and there never will be.

We use Google Analytics to understand how people use the site — which pages get visited, and where people give up. It sets cookies in your browser and sends Google a truncated version of your IP address along with what you looked at. It runs only if you accept it in the banner on your first visit; choose Reject and nothing from Google is ever loaded, not loaded-but-disabled. The site works identically either way, and nothing you upload is ever sent to Google.

To change your mind later, clear this site’s data in your browser and the banner returns.

Reports are produced by matching your hashed keys against a licensed US consumer dataset. That license permits aggregate analysis, which is why this product returns percentages.

Attributes we treat as sensitive — including ethnicity, religion, political donor status, credit behavior, income, net worth and date of birth — are visible only to the person who uploaded the list, and never appear on a report shared publicly.

Every report is private when created. It becomes readable by anyone with the link only when you publish it yourself, and you can unpublish it at any time.

Every email we send carries a one-click unsubscribe link.

To have your details or a report deleted, email help@supermegamind.com and we will do it.

Depending on where you live you may have rights related to your personal data; we honor opt-out requests regardless of where you live. Send a “remove me” email to help@supermegamind.com and include your name, primary email, main phone number, and ZIP code to be removed from our consumer data file.

A customer list contains personal data about people who are not you. By uploading one you confirm that you own that list data and/or have the right to do so. We process it on your behalf, only to produce your report, and we hash it on arrival — but the lawful basis for holding, sharing, or utilizing that list in the first place is yours.

If this policy changes materially, the date at the top changes with it. Questions to help@supermegamind.com. Free reports profile a random sample of up to 500 rows; paid reports cover up to 50,000 rows.