Privacy Policy

This page describes how the 97 MILK website currently works. It is recommended for organizational and legal review before September 1, 2026. It is not legal advice and does not guarantee compliance with any privacy law.

Last updated: August 22, 2026

Who we are

97 Milk is a grassroots nonprofit educational organization. This policy applies to information collected through https://www.97milk.com (the “Site”). It does not cover information collected offline, such as mail sent to our post office box, except where that mail is later associated with a Site order or donation.

Information you provide

You can browse much of the Site without creating an account. If you register, check out, donate online, or contact us, you may provide:

  • Name and email address
  • Shipping and billing address and phone number, when you save them on My Account or enter them at checkout
  • Messages you send to us by email

We do not run surveys on the Site. We do not ask you to type credit card numbers into 97 MILK forms. Payment card data, when you pay or donate with PayPal, is handled by PayPal.

Registration and My Account

If you create an account, Firebase Authentication stores your sign-in credentials. Passwords are not stored in our Firestore database. A matching profile document in Firestore holds account details such as name, email, and addresses that you save. You can review and update that profile from My Account while signed in. Administrators of the Site may also access account records as needed to operate the store and the Site.

Ecommerce checkout

Store checkout collects contact and shipping information so we can fulfill an order. Guests may check out without an account. The cart and checkout forms use your browser to keep items and shipping details until the order is placed or you clear them.

Firebase Authentication and Firestore

The Site uses Google Firebase. Authentication handles sign-in sessions. Cloud Firestore stores public catalog and editorial content (for example products, news, downloads, and related collections), user profile documents, and order records created after a successful PayPal payment. Order documents are written by our servers, not by the public website client.

PayPal payments and donations

Product purchases are completed with PayPal. PayPal processes the payment. 97 MILK receives payment confirmation (including a transaction identifier and amount) and stores order details needed to ship and support the order: items, totals, customer contact and shipping information, and fulfillment fields such as carrier and tracking when staff add them.

Online donations use a PayPal hosted donate button. Card data for donations is handled by PayPal. You may also mail a donation to the address below. We do not publish a retention schedule for donation or order records in this policy.

Order information 97 MILK retains

After a completed store payment we keep the order record in Firestore so we can fulfill it, send a confirmation email, and answer customer questions. Signed-in shoppers can view their own orders on My Account. Guests receive a success page tied to their payment confirmation. We do not state a deletion timeline here.

Local browser storage

The Site uses cookies, local storage, and similar technologies that are necessary to operate:

  • Firebase Authentication session persistence
  • Shopping cart contents
  • Guest checkout details you enter
  • Theme or display preference, if used
  • Your cookie preference choice, once you make one
  • PayPal’s own cookies when you use PayPal checkout or donate

Cookies for analytics and marketing

Optional technologies load only after you accept them (Accept All or enabling the category in Cookie Preferences). They stay off until then. Google Consent Mode is initialized with analytics and advertising storage denied by default.

  • Analytics: Google Analytics 4 and Microsoft Clarity. These help us understand how the public Site is used (pages, events, approximate location or device category as those products provide). They are not used on /admin routes.
  • Marketing: Meta Pixel. This helps measure visits and selected actions for advertising. It is not used on /admin routes. We do not operate Meta Conversions API from this Site.

You can change Analytics and Marketing later from Cookie Preferences in the footer. Withdrawing consent reloads the Site so those tags are not loaded again. Necessary storage cannot be turned off if you continue to use the Site.

Site administrators may use Google Analytics Data API reporting inside the admin area. That is a signed-in operational tool, not the public marketing tags described above.

How information is used

  • To operate the Site, accounts, cart, and checkout
  • To fulfill store orders and send related email
  • To process PayPal donations when you use the donate button
  • To understand Site usage when you allow Analytics
  • To measure marketing when you allow Marketing
  • To maintain the Site and respond to requests or legal obligations

Third-party services

We use service providers that process information on our behalf or as independent controllers of their own products, including Google (Firebase, Analytics), Microsoft (Clarity), Meta (Pixel, if you allow Marketing), PayPal (payments and donations), and our hosting/email infrastructure. Their practices are described in their own policies. Links from the Site to other organizations (for example advocacy tools or social networks) are governed by those sites, not by 97 MILK.

Your choices

  • Update name, email, and addresses on My Account while signed in
  • Change or reset your password through Firebase Authentication (including the forgot-password flow)
  • Change Analytics and Marketing preferences from Cookie Preferences
  • Email us to ask questions about your information

Children

The Site is intended for a general audience and is not directed at children under 13. We do not knowingly collect personal information from children under 13 through the Site. If you believe a child has submitted information, contact us and we will review the request. This paragraph is a description of our intent, not a certification of COPPA compliance.

Changes to this policy

We will post updates on this page and change the “Last updated” date. We do not treat continued browsing alone as consent to optional analytics or marketing.

Contact

Privacy questions about the Site may be sent to 97wholemilk@gmail.com.

97 Milk
PO Box 87
Bird in Hand, PA 17505
https://www.97milk.com

Related: Terms of Use.