Request Organization

Legal

Privacy Policy

This policy describes how the MacStartup website handles information. It matches the site as built: a static website, a contact form, and PHP email delivery. It is not a certification of legal compliance.

Version date: October 15, 2026.

Introduction

MacStartup provides Mac cleanup education and file organization training for individuals and businesses. The website publishes guides and lets you request a review of training or an educational consultation. A request is not a booking, and MacStartup does not organize files on your device. This policy explains what the site collects, why, and what it does not do.

Business identity

The site is published under the name MacStartup at https://macstartup.com. MacStartup is an independent education resource. It is not affiliated with Apple Inc., MacPaw, or CleanMyMac, and it is not an authorized Apple service provider.

No public postal address or telephone number is listed. You can write to[email protected] or use the contact form.

Information collected

If you submit the contact form, the site processes the fields you provide:

  • Full name, required
  • Email address, required
  • Consultation topic, required, chosen from a fixed list
  • Type of files, optional selection from a list
  • Approximate project size, optional
  • What you want to learn, required
  • Preferred contact method, optional
  • Confirmation that you agree to this policy, required

The form also includes a hidden field labeled for automated submissions. If that field is filled in, the request is rejected and is not emailed. Do not send passwords, Apple ID credentials, payment card numbers, remote access details, or copies of sensitive documents. The form does not ask for them, and you should not add them to the description.

The website does not use a database. It does not create an account, and it does not show your submission on a public page.

Contact form information and email delivery

The form sends a POST request to /request.php. The script checks that the method is POST, checks field lengths, checks that the email address looks valid, checks the service against an allowlist, and rejects header-injection patterns. If the checks pass, PHP mail() sends one plain-text message.

  • The message is addressed to [email protected], the contact address published on this website.
  • The From address is a sending address for the domain. It is not a customer support inbox, and it is not listed as one on the contact page.
  • Reply-To is set to the email address you entered, after it passes validation.
  • You are redirected to the request-sent page only when the mail function reports success. That report means the host accepted the handoff. It does not prove the message reached an inbox.
  • If a submission cannot be accepted for processing, including when required information is missing or email delivery is unavailable, the website displays a request error page. The website does not keep a database copy.

The application is written not to record the contents of the message in its own logs. Hosting and mail software can still log technical events. This policy does not claim that every server in the path stores nothing.

Purposes of processing

Form details are used to:

  • Read and respond to a request for training or an educational consultation
  • Tell which service and file types the request relates to
  • Reply to the email address you provided
  • Reduce obvious automated spam through the hidden field and validation checks

The site does not use form submissions for advertising profiles, and it does not sell personal information.

Hosting and server logs

The site is static HTML, CSS, JavaScript, and images, plus the PHP form handler. The hosting provider that serves those files will normally keep technical logs. Those logs can include IP address, date and time, the URL requested, the status code, the referring URL, and the browser user agent. A log entry for /request.phpcan show that a form was posted. Whether a host also stores the body of a POST request depends on that host’s configuration, which this website does not control.

This policy does not claim that server logs are empty, and it does not name a hosting company. The company that hosts the website processes connections and technical logs as part of serving the site.

Cookies and tracking

MacStartup’s own pages do not set cookies. The site’s JavaScript does not use localStorage orsessionStorage. It only opens and closes the mobile menu. No analytics script and no advertising script are installed.

Pages do request fonts from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). Your browser contacts Google to load those font files. Google receives the technical data that comes with that connection, under Google’s own policies. MacStartup does not control Google’s logs or response headers. Details are in the Cookie Policy.

Third-party service providers

The site uses:

  • The hosting provider that serves the files and runs PHP
  • The host mail transport used by PHP mail()
  • Google Fonts, for the Manrope typeface

No other analytics, payment, or marketing processors are built into the site. A specific hosting company is not named on this page.

Information sharing

Form contents are emailed to the configured recipient mailbox so the request can be read. They are not published. The hosting provider processes the connection as part of serving the site. Google receives font requests as described above. MacStartup does not share form details with Apple, MacPaw, or a cleanup-software company.

Data security

The form limits request size and rejects submissions containing potentially unsafe email header patterns. The website is expected to be available over HTTPS, which depends on the host’s certificate. These measures reduce common risks. They are not absolute security, and this policy does not claim that unauthorized access is impossible.

Data retention

The website does not store submissions in a database. Information from a request is retained only as needed for legitimate operational purposes and applicable obligations. If a message is accepted by the mail function, the copy that exists is the email in the recipient mailbox, plus whatever the host and mail system retain in their logs. The site does not state a fixed number of days for how long that mailbox or those logs keep information. Failed or rejected submissions are not saved by the website application. This page does not promise that a mailbox or a host will delete every copy on a set date.

Privacy requests

Depending on where you live, you may have rights to access, correct, or delete personal information, or to object to certain uses. This site does not claim a specific regulatory certification. You can still ask.

Send privacy requests to [email protected] or through thecontact form. Say that the message is a privacy request.

Children’s privacy

The site is not directed at children, and it does not knowingly collect information from children. If you believe a child submitted the form, send a privacy request as described above so the email can be deleted from the recipient mailbox when that mailbox is in use.

Policy updates

If the site’s data practices change, this page will be updated and the version date will change. The current date is October 15, 2026. Continuing to use the site after an update means the new page is the one that describes the site. A form you already sent is handled under the policy in effect when you sent it, as implemented then.

Contact

Privacy questions can be sent to [email protected] or through thecontact form. See also the Terms of Service andCookie Policy.