The Ledger
Privacy
Draft — pending review by Illinois counsel. Not yet in force.
In short
This site collects nothing from a visitor, and holds a name and an email address for anyone who opens an account. It sets no cookies, runs no analytics, and loads nothing from anyone else.
What this site does
This notice describes this website as it actually is today, not a general policy borrowed from a site that does more.
- Cookies
- None — this site sets no cookies of any kind. There is no consent banner because there is nothing to consent to. Signing in keeps a session token in the browser's own local storage instead; it never leaves the device except to the account service, and signing out removes it.
- Analytics
- None — no analytics product, no tag manager, no pixel, no session recording, no heat mapping.
- Third-party content
- None — no web fonts, no embedded video, no social widgets, no advertising, no external scripts. Every file the browser loads comes from this domain.
- Outbound connections
- One — the account page, and only the account page, talks to the account service at yqywoffvnskvowfwqymi.supabase.co. That single origin is named in the site's Content-Security-Policy, which forbids the browser from contacting any other. Every other page on this site makes no outbound connection at all.
- Accounts
- Optional — an account can be opened at /account, and holds a name, an email address, an optional company name, whether the account is held by a person or a business, whether marketing email was asked for, and a dated list of what has happened to the account itself. Nothing else. No account is needed to read this site.
- Passwords
- Not readable — passwords are stored by the account service as a one-way hash. Monark Commerce cannot read one, cannot recover one, and will never ask for one by email or telephone.
- Forms
- Account only — the only forms on this site are on the account page. There is no contact form, no newsletter box, and no field anywhere that is collected for any purpose other than the one printed beside it.
- Payments
- None — no payment is taken on this site, so no card or bank detail is collected, transmitted, or stored.
What is collected, and by whom
By the company: only what you send. If you write to Monark Commerce by email, the company holds your email address, your name if you give it, and whatever is in your message. That is used to answer you and for the company's own records. Nothing else is collected.
By the host: standard request data. This site is served by Cloudflare. Like any web host, Cloudflare processes technical data about each request — including the IP address the request came from, the browser's user-agent string, and the time — in order to deliver the page and to protect the site from attack and abuse. Monark Commerce does not use this data to identify or profile visitors.
By the email provider. Email sent to the company is received and stored by the company's business email provider so that it can be read and replied to.
By the account service, if you open an account. Accounts are run on Supabase, which stores the email address, the password as a one-way hash, the details you entered, and the account's own dated ledger. Supabase is a processor acting on Monark Commerce's instructions and for no purpose of its own; like any host it also records the technical data of each request, including an IP address. Opening an account is the only thing on this site that sends anything to it, and not opening one sends nothing.
What an account never collects. No card, no bank detail, no postal address, no date of birth, no telephone number, no location, no device fingerprint, and no record of which pages of this site you read. The account page shows the whole record and offers it as a file, precisely so that this paragraph can be checked rather than taken on trust.
What is never done
- Personal data is never sold, rented, or traded.
- Personal data is never shared for advertising, and never used to build a profile or an audience segment.
- No marketing email is sent to an address that has not asked for it. Writing to the company is not a subscription.
- No data is collected from children, and this site is not directed at them.
Correspondence is kept only as long as it is useful for answering the enquiry and for the company's own business records, and is then deleted.
Making a request about your personal data
You can ask what Monark Commerce holds about you, ask for it to be corrected, or ask for it to be deleted. Write to admin@monarkcommerce.com. Requests are answered within two business days.
Because the only personal data the company holds is what you sent it, a request is usually answered by finding your correspondence and acting on it. The company may need to confirm that you are the person who sent it before deleting anything.
If you hold an account, three of those rights need no request at all. Signing in at /account shows the entire record, lets you correct it, and downloads the whole of it as a file — including the account's dated ledger — without asking anyone and without waiting. Closing the account is filed from the same page and answered within two business days; nothing is deleted before a person has read the request, so a mistaken press costs nothing.
Requests are free.
When this notice changes
It changed on 21 August 2026, when accounts opened. The rows above describing accounts, passwords, forms and outbound connections are new; nothing that was already true stopped being true, and no data held before that date was used for anything new.
It will have to change again when the company begins selling — taking payment means handling order and payment data, and that will be described here before it happens rather than afterwards. Any such change will be published on this page.
Monark Commerce LLC is the party responsible for the personal data described above. It can be reached at the address on the contact page.