Privacy Policy

Effective Date: May 29, 2026 Last Updated: May 29, 2026

1. Who We Are

missingnews.org (“Missing News,” “we,” “us,” or “our”) is operated by D2X Enterprises LLC, a Pennsylvania limited liability company. We can be reached at:

• Privacy contact: privacy@d2xenterprises.com
• General contact: info@missingnews.org
• Mail: D2X Enterprises LLC, 30 S 15th St Ste 1550 PMB 852931, Philadelphia, PA 19102-4806

This Privacy Policy explains what information we collect from visitors to missingnews.org (the “Site”), how we use it, and the rights you have under U.S. state privacy laws.

2. Scope

Missing News is a U.S.-focused public-interest publication. This Policy applies to information collected through the Site. It does not cover third-party sites we link to (such as NamUs case pages, news outlets, or YouTube), which have their own privacy practices.

3. What We Collect

We deliberately collect very little information. There are no user accounts, no passwords, and no payments on the Site.

a. Contact Form. If you submit our /contact form, we collect the name, email address, and message you provide. The form is protected by Cloudflare Turnstile, which performs a bot check before submission. Submissions are stored server-side so we can read and respond to them.

b. Server / Log Data. Our hosting provider, Cloudflare, automatically processes standard request data when you visit the Site, including IP address, user-agent string, request URL, timestamp, and basic security signals. Cloudflare uses this to deliver the Site, mitigate abuse, and provide security (e.g., Turnstile, rate limiting).

c. Analytics (only with your consent). If you opt in via our cookie banner, we use Google Analytics 4 (measurement ID G-NVMFXS25DG) to understand aggregate Site usage. GA4 may set cookies and process identifiers including a randomly generated client ID and IP-derived approximate location. We have Google Consent Mode v2 configured so that analytics and advertising signals default to denied until you opt in, and we honor the Global Privacy Control (GPC) browser signal as a valid opt-out.

4. What We Do NOT Collect or Do

• We do not offer user accounts, profiles, or passwords on the public Site.
• We do not collect payment information; nothing is sold on the Site.
• We do not run advertising, and we do not share data with ad networks, data brokers, or marketing partners.
• We do not “sell” personal information for money.
• We do not engage in cross-context behavioral advertising, profiling for decisions producing legal or similarly significant effects, or targeted advertising.

5. NamUs Case Data and News Coverage

Case information on the Site is sourced from the U.S. Department of Justice’s National Missing and Unidentified Persons System (NamUs), a public-record system, and from publicly available news reporting that we link to at the source. Display of NamUs case thumbnails is permitted under NamUs’s reuse policy. This is public-record content about case subjects (not visitor data). If you are a family member, legal representative, or the subject of a case page and have a concern, contact privacy@d2xenterprises.com.

Currently-minor subjects. Cases involving currently-minor subjects are excluded from public display on the Site, enforced server-side, as a matter of policy.

6. How We Use Information

We use the limited information we collect to:

• Read and respond to messages submitted through the contact form.
• Operate, secure, and maintain the Site (including bot mitigation via Turnstile and standard server logging).
• If you opt in, measure aggregate usage of the Site via GA4 to improve content and navigation.
• Comply with legal obligations and respond to lawful requests.

We do not use contact-form submissions for marketing, and we do not add submitters to any mailing list.

7. Cookies and Tracking Technologies

The Site uses cookies/local storage in the following limited ways:

• Strictly necessary: A small consent-preference value to remember your cookie banner choice; security cookies set by Cloudflare; Turnstile challenge state.
• Analytics (only with consent): GA4 cookies (e.g., _ga, _ga_*) set after you opt in via the banner.

You can change your choice at any time via the cookie preferences control in the Site footer, or by clearing your browser’s cookies. Browsers transmitting the Global Privacy Control (GPC) signal are treated as an opt-out of analytics and any sale/sharing under applicable state laws.

8. Service Providers

• Cloudflare (hosting, CDN, Workers, D1, R2, Pages, Turnstile) - delivers the Site, secures it, and stores contact-form submissions and case data.
• Google (GA4) - analytics, only after consent is granted via the banner.
• YouTube - we embed podcast episodes; when you press play, YouTube’s player loads and is subject to Google’s privacy practices.

We do not sell or rent personal information to these or any other parties.

9. Data Retention

• Contact-form submissions: retained for up to 24 months from receipt, then deleted, unless a longer period is necessary to resolve an ongoing matter or required by law. You may request earlier deletion (see Section 11).
• Server logs: retained per Cloudflare’s defaults (generally short-term) for security and operational purposes.
• Analytics data (if consent granted): retained per GA4 defaults (currently 14 months at the event level) and accessible only in aggregate to us.

10. Security

We use commercially reasonable administrative and technical safeguards including TLS in transit, Cloudflare-managed infrastructure, access controls on the contact-form datastore, and bot mitigation via Turnstile. No internet transmission or storage system is perfectly secure; we cannot guarantee absolute security.

11. Your Privacy Rights (U.S. State Laws)

If you are a resident of California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), or Connecticut (CTDPA), you have rights with respect to personal information we hold about you, which may include:

• Right to know / access the categories and specific pieces of personal information we have collected about you.
• Right to delete personal information we have collected from you.
• Right to correct inaccurate personal information.
• Right to data portability (a copy in a portable format, where applicable).
• Right to opt out of sale, sharing, targeted advertising, or certain profiling. We do not sell or share personal information, do not engage in targeted advertising, and do not conduct profiling that produces legal or similarly significant effects. Browsers transmitting Global Privacy Control are honored as a valid opt-out signal.
• Right to non-discrimination for exercising your rights.
• Right to appeal a denial of a privacy request (VCDPA, CPA, CTDPA).

How to exercise your rights. Email privacy@d2xenterprises.com with the subject line “Privacy Request” and tell us (a) which right you wish to exercise, (b) the state of residence on which your request is based, and (c) enough information for us to locate any records (for example, the email address you used on the contact form). We will verify your request by replying to the email address on file or by requesting reasonably necessary additional information. Authorized agents may submit requests on your behalf with written authorization. We will respond within the timeframe required by applicable law (generally 45 days, with one permitted extension). To appeal a denial, reply to our response email with “Appeal” in the subject line.

California “Shine the Light” (Cal. Civ. Code § 1798.83): We do not share personal information with third parties for their direct marketing purposes.

12. Children’s Privacy (COPPA)

The Site is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has submitted information through the Site, contact privacy@d2xenterprises.com and we will delete it promptly. As noted above, cases involving currently-minor subjects are excluded from public display on the Site.

13. Do Not Track

Most browsers’ “Do Not Track” headers lack a uniform standard; we instead honor the Global Privacy Control (GPC) signal as an opt-out of analytics and of any sale/sharing under applicable state laws.

14. Audience and International Visitors

The Site is intended for an audience in the United States. If you access the Site from outside the U.S., you do so on your own initiative and your information will be processed in the United States.

15. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by updating the “Last Updated” date above and, where appropriate, by a notice on the Site. Your continued use of the Site after changes take effect constitutes acceptance of the updated Policy.

16. Contact

Privacy questions and requests: privacy@d2xenterprises.com General inquiries: info@missingnews.org Mail: D2X Enterprises LLC, 30 S 15th St Ste 1550 PMB 852931, Philadelphia, PA 19102-4806