Mungomash LLC
Privacy

Mungomash

Privacy Policy

Last updated: 2026-04-28

Mungomash is a static informational and utility website. There are no accounts, no logins, no payments, no email collection, no contact forms, and no user-generated content. This policy describes the small amount of data that does flow as part of running the site, what is collected, by whom, and what controls you have.

1. What data is collected, by whom

Google Analytics 4

Every page on the site loads the Google Analytics 4 tag (property G-03JLZHBC8J). GA collects pageview events, the page that referred you, your device type, browser, language, and an approximate location derived from your IP address. It assigns a pseudonymous client ID via cookie so it can distinguish repeat visits from new ones. The data is processed by Google. To opt out site-wide on any browser you use, install Google's Analytics Opt-Out Browser Add-on.

Server access logs

Like every website on the internet, the static-hosting provider that serves Mungomash records each request — your IP address, the page you requested, your user agent, the referring page, and a timestamp. These logs are retained per the provider's defaults and are used only to operate the site (debugging, abuse mitigation, capacity planning). They are not sold, shared, or used for analytics beyond GA's measurement.

Per-page preference storage

A few tool pages remember a small preference between visits — for example, /tools/weather/ remembers the city you last looked up so it does not have to ask again. These values are stored on your device via the browser's localStorage, never sent to a Mungomash server, and never used for tracking. The current set:

Page Storage key Purpose
/tools/weather/ mungomash-weather-place Remember the location last looked up

You can clear this storage at any time from your browser's developer tools or site-data settings. The list grows as new pages add preferences; this policy will be updated when it does.

2. Third-party APIs called by your browser

Some pages call third-party APIs to compute their answers. In every case, your browser makes the call directly — Mungomash does not proxy, intercept, or log these requests. The third party sees what it would see if you visited their service from any other site: your IP address, your user agent, and whatever data is part of the query (a city, a domain, a CVE ID, etc.).

Page Provider What is sent What comes back
/tools/weather/ National Weather Service (api.weather.gov) Approximate latitude / longitude Current conditions, forecast, alerts
/tools/ip/ ipify (api.ipify.org, api6.ipify.org) The request itself; ipify reads your IP from the connection Your public IPv4 / IPv6 address
/tools/dns/ Cloudflare DoH (cloudflare-dns.com), Google Public DNS (dns.google) The domain name you typed DNS records (A, AAAA, MX, TXT, NS, etc.)
/tools/asn/ RIPE Stat, Team Cymru (via Cloudflare DoH), ipify (visitor's-IP pre-fill) The IP you entered, or your own IP if you used the pre-fill ASN, prefix, country, registry, reverse-DNS
/data/cve/ NIST National Vulnerability Database (services.nvd.nist.gov), CISA The CVE ID or search query CVE record, exploitation status
/data/tech-filings/ SEC EDGAR (data.sec.gov, www.sec.gov) The company ticker or CIK Filing list and filing documents
/data/federal-tech-spending/ USAspending.gov (api.usaspending.gov) Vendor, agency, or fiscal-year filters Federal contract award records

The following pages compute entirely in your browser and contact no third party other than Google Analytics, which is on every page:

  • /tools/time/ — local clock, world map, time-zone reference; uses only the browser's clock and time-zone API.
  • /tools/browser/ — reads your browser's own properties (user agent, screen, network) and renders them.
  • All /ai/ pages, all /jobs/ pages, and the remaining /data/ pages — these load static data files bundled with the site at build time, no third-party calls at runtime.

Each third-party provider has its own privacy policy that governs your interaction with them. Mungomash is not responsible for those providers' practices, and they may set their own cookies as part of responding to your browser's request.

3. No personal information collection

Mungomash does not collect personal information beyond what GA processes by default. There are no signup forms, no contact forms, no email collection, no payment information, and no user-submitted content. If you do not enter anything into the per-tool forms (city, IP, domain, CVE ID, etc.), the third-party APIs above are not contacted.

Inputs you do enter into a tool page (a domain in the DNS lookup, an IP in the ASN lookup, a city in the weather page, a CVE ID in the vulnerability page) are sent only to the third-party provider for that page, as documented in the table above. Mungomash does not log, store, or relay those inputs.

4. Cookies

Google Analytics cookies

_ga and _ga_03JLZHBC8J are set by Google Analytics on first visit and used to distinguish unique visitors and sessions. Default lifetime is 13 months from your last visit. To opt out, install Google's Analytics Opt-Out Browser Add-on; it works site-wide and requires no per-site action.

Per-page preference storage

See section 1 above. These values are stored in localStorage rather than as cookies, and are never transmitted off your device.

Third-party cookies

Mungomash sets no third-party cookies directly. Third-party APIs you reach via a tool page may set their own cookies as part of responding to your browser's request; those cookies are governed by the provider's policy, not this one.

5. Children's privacy

Mungomash is not directed at children under 13, and Mungomash does not knowingly collect personal information from children under 13. The site has no accounts, no comment fields, and no other mechanism for a child to submit personal information. If you believe Mungomash has inadvertently collected information from a child under 13, contact the address in section 9 and the information will be removed.

6. California privacy (CCPA / CPRA)

Mungomash does not sell or share personal information for cross-context behavioral advertising. California residents have the right to request access to, correction of, or deletion of personal information that a business holds about them. Because Mungomash collects no personal information beyond what Google Analytics processes pseudonymously on its own infrastructure, the practical effect of such a request is to direct it to Google's GA opt-out flow. To submit a privacy request directly to Mungomash, use the contact address in section 9.

Residents of other US states with comparable laws (Colorado, Connecticut, Virginia, Utah, and others) have similar rights, and the same practical guidance applies.

7. Future advertising

Mungomash does not currently display third-party advertising. When ad-supported content is added to the site, this policy will be updated to disclose the ad network's data practices, the cookies it sets, and the controls available to opt out. Visitors will not be served ads under the current version of this policy. The "Last updated" date at the top of this page is the way to confirm when ads are in scope.

8. Changes to this policy

The "Last updated" date at the top of this page reflects the most recent revision. Material changes — new categories of data collected, new third-party providers, the addition of advertising — trigger a date bump. Minor wording changes also bump the date so the field stays accurate.

9. Contact

For privacy questions, requests, or corrections, reach the site at chad@mungomash.com.