Project Milk Carton

Vision Statement

To create a world where every missing child is quickly and safely recovered through the power of modern technology, community engagement, and systemic change. We envision a future where communities, parents, and guardians work together to make every child visible and protected.

Mission Statement

To revolutionize how missing children are found by leveraging modern technology, empowering communities, and addressing systemic causes—with a focus on protecting and recovering the most vulnerable, including runaways and thrownaways.

Core Values

• Empathy: We prioritize the safety and well-being of every child, recognizing the unique challenges faced by vulnerable populations like runaways and thrownaways.
• Innovation: We embrace modern technology and creative solutions to address complex challenges and increase the visibility of missing children.
• Empowerment: We are dedicated to empowering communities, first responders, and parents with the tools, resources, and knowledge needed to protect children and act swiftly in times of crisis.
• Equity: We strive to address systemic disparities, ensuring marginalized and underserved groups receive equal attention and resources in their times of need.
• Accountability: We operate with transparency and hold ourselves to the highest standards of integrity in serving our mission.

Strategic Goals

• Modernize Awareness Tools: Revolutionize how missing child cases are shared and tracked through tools like the Digital Missing Children Map and geo-targeted alerts.
• Prioritize Runaways and Thrownaways: Advocate for vulnerable populations by addressing systemic causes, improving recovery rates, and reducing exploitation risks.
• Build a Data-Driven Advocacy Platform: Use analytics to identify trends, gaps, and opportunities to drive systemic change.
• Advocate for Better Laws and Policies: Champion reforms that prioritize child safety, including stronger laws and accountability for child welfare agencies.
• Partner with Communities and First Responders: Collaborate with local communities and law enforcement to provide training and resources tailored to their needs.

Introduction

Welcome to Project Milk Carton. Our mission is to assist in locating missing children through a secure and ethical platform that collects, manages, and protects sensitive data. We are committed to maintaining the highest standards of privacy, security, and transparency in all our operations. Recognizing the unique vulnerabilities of the populations we serve, especially children, we have implemented comprehensive measures to safeguard your information and ensure its responsible use.

This Privacy Policy outlines our practices in compliance with major data protection laws, including but not limited to the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the Children’s Online Privacy Protection Act (COPPA). These standards guide our efforts to provide a trusted environment where families, community members, and stakeholders can collaborate to enhance child safety.

By using Project Milk Carton, you agree to the terms outlined in this Privacy Policy. To maintain alignment with evolving legal standards and technological advancements, this document may be updated periodically. We encourage you to review it regularly to stay informed about any changes to our data practices.

If you have any questions or concerns regarding your data, our compliance with regulations, or any aspect of this policy, you may contact our dedicated Legal Compliance Officer (LCO) at admin@milkcartonsproject.org. We are committed to addressing your inquiries promptly and transparently.

2. How We Use Your Data

At Project Milk Carton, we prioritize your privacy and data security by adopting a parent-controlled approach. The data you provide is solely accessible to you, the parent or guardian, and not to Project Milk Carton or its staff. Our platform serves as a secure, encrypted tool that empowers parents to manage, store, and utilize data to locate missing children effectively. Below is a detailed explanation of how the system uses your data while ensuring you maintain exclusive control.

• Account Management: To create and manage a secure account for you, enabling encrypted access to your child’s profile and related tools. No one but you, as the account holder, can view or manage this information.
• Secure Storage of Child Profiles: All sensitive information, such as photographs, medical conditions, and identifying details, is encrypted and stored in a way that only you can access it. Project Milk Carton operates as a neutral platform and does not have access to, or visibility into, your stored data.
• Generating Missing Child Flyers: The system facilitates the creation of missing child flyers using the data you provide. These flyers are designed to be shared directly by you with law enforcement, community networks, or trusted entities. Project Milk Carton does not view, store, or distribute these flyers.
• Heat Map and Local Alerts: The heat map is designed to display minimal and anonymized information (e.g., general location and case type) that you choose to share. This feature is controlled entirely by you, ensuring that no data is shared without your explicit consent.
• Auditing and Timestamping: Blockchain-based solutions, such as TimeSeal, are used to audit and timestamp any changes you make to your data. This ensures data integrity and accountability without Project Milk Carton ever accessing the content of your records.
• Child Safety and Emergency Response: The platform provides tools to support rapid response efforts, such as generating pre-filled law enforcement reports and localized alerts. These actions are entirely initiated and controlled by you as the parent or guardian.
• Education and Resources: To provide you with tailored guidance, such as runaway prevention tips, abduction protocols, and access to local resources. These resources are delivered without accessing or analyzing your personal data.
• Legal and Compliance: To ensure our platform complies with applicable data protection laws such as GDPR, COPPA, and CCPA. The design of our system guarantees that your data remains private and inaccessible to Project Milk Carton, reinforcing our compliance commitments.

Our approach ensures that you, the parent or guardian, have exclusive control over your data while leveraging the tools and features of the Project Milk Carton platform to aid in locating missing children. For further information or to exercise your rights, please contact our Legal Compliance Officer at admin@milkcartonsproject.org.

3. How We Protect Your Data

At Project Milk Carton, protecting your data is a top priority. We implement a robust set of measures designed to ensure the security, confidentiality, and integrity of the information you entrust to us. Our approach combines cutting-edge technology, industry best practices, and strict operational protocols to safeguard your data at every step.

• Encryption: All data is protected with end-to-end encryption, both at rest and during transit. This ensures that your information is secure and inaccessible to unauthorized parties, even in the event of a breach. We adhere to encryption protocols compliant with industry standards, such as AES-256.
• Parent-Controlled Access: Only you, as the parent or guardian, have direct access to your data. Project Milk Carton staff cannot view or modify the sensitive information stored within your account, enhancing your privacy and control over the platform.
• Blockchain Timestamping (TimeSeal): To maintain data integrity, we use blockchain-based timestamping technology. TimeSeal creates immutable records of changes to your data, preventing unauthorized modification and providing a transparent audit trail.
• Secure Storage: Uploaded images, child profiles, and other sensitive data are stored securely in Firebase Storage, which complies with stringent security and privacy standards. Access is restricted to authorized personnel with predefined roles and permissions.
• Regular Security Audits: We conduct regular internal and third-party security audits to assess the effectiveness of our systems and processes. These audits help identify and mitigate vulnerabilities, ensuring our security framework remains resilient against evolving threats.
• Strict Access Controls: Role-based access control (RBAC) is enforced, limiting access to sensitive data to only those with a legitimate need. We use multi-factor authentication (MFA) and secure login protocols to further enhance account protection.
• Data Minimization: We collect and retain only the data necessary to fulfill our mission. This reduces exposure to risks and ensures compliance with privacy laws, such as GDPR and COPPA.
• Incident Response Plan: In the unlikely event of a security incident, we have a comprehensive incident response plan. This includes rapid containment, notification of affected users, and corrective measures to prevent recurrence.
• Compliance with Privacy Laws: Our security measures are designed to meet or exceed the requirements of data protection regulations, including GDPR, CCPA, and COPPA. We regularly review and update our practices to maintain compliance.

These measures reflect our unwavering commitment to protecting your data and preserving your trust. If you have questions about our security practices or wish to report a concern, please contact our Legal Compliance Officer at admin@milkcartonsproject.org.

4. How We Share Your Data

Your data is treated with the utmost confidentiality and is only shared in ways that align with our mission of locating missing children while maintaining your control and privacy. We adhere to strict protocols and legal standards to ensure that any data-sharing activity is transparent, limited, and purpose-driven. Below are the specific circumstances under which your data may be shared:

• Law Enforcement and Child Recovery Efforts: With your explicit consent, we may share necessary and relevant information with law enforcement agencies or child protection organizations directly involved in a missing child case. This could include pre-filled reports generated by our platform based on the data you provide, ensuring faster and more effective action. No information will be shared without your knowledge and prior approval.
• Geo-Targeted Community Alerts: If you opt to use our geo-targeted alert feature, anonymized information (e.g., general location and basic case details) may be shared with volunteers or community members within the designated area to mobilize local search efforts. This data-sharing is entirely initiated and controlled by you as the parent or guardian.
• Service Providers: We work with reputable third-party service providers, such as Firebase, to store and process your data securely. These providers are bound by strict contractual obligations to protect your data and are prohibited from using it for any purpose beyond facilitating our services. Their compliance with privacy laws, such as GDPR and CCPA, is regularly audited to ensure the highest standards are met.
• Compliance with Legal Obligations: In rare instances, we may be required to share data to comply with legal obligations, such as responding to valid court orders or regulatory inquiries. In such cases, only the minimum necessary information will be disclosed, and you will be informed unless prohibited by law.
• No Unauthorized Sharing: We do not sell, rent, or share your personal or sensitive data with advertisers, marketers, or any unauthorized third parties. Protecting your data and privacy is fundamental to our mission and operations.
• Parental Control and Oversight: At all times, you remain in control of your data. No information is shared without your explicit consent, and you have the ability to manage, revoke, or delete any shared data directly through your account.

Our data-sharing practices reflect our commitment to privacy, security, and trust. If you have questions about how your data is shared or need assistance in managing your data-sharing preferences, please contact our Legal Compliance Officer at admin@milkcartonsproject.org.

5. Your Rights and Choices

At Project Milk Carton, we are committed to empowering you with control over your personal data. Regardless of where you reside, we extend key data rights globally to ensure fairness, transparency, and compliance with international privacy standards. Below are the rights you have and how you can exercise them:

• Access, Update, or Delete: You have the right to:
  • Access: Request a copy of the personal information we hold about you.
  • Update: Correct or update inaccuracies in your personal data to ensure its accuracy and completeness.
  • Delete: Request the deletion of your personal data. This includes the ability to erase sensitive child profiles stored on the platform, ensuring no data remains on our servers.
• Withdraw Consent: If we rely on your consent for data processing, you may withdraw it at any time. This will not affect the lawfulness of processing performed before consent was withdrawn. Upon withdrawal, any associated data will be removed from our systems unless required for legal or operational purposes.
• GDPR-Specific Rights: For users in the European Union or under GDPR jurisdiction, you have additional rights, including:
  • Right to Data Portability: You can request a copy of your data in a structured, commonly used, and machine-readable format, allowing you to transfer it to another service provider.
  • Right to Restriction of Processing: You may request that we limit the use of your data in specific circumstances, such as during dispute resolution or while verifying the accuracy of your information.
• CCPA-Specific Rights: For California residents, we honor the rights provided under the California Consumer Privacy Act (CCPA), including:
  • Right to Opt Out of Sale of Personal Information: Although we do not sell personal data, you have the right to request confirmation that your information will not be sold in the future.
• Data Minimization and Transparency: Our platform ensures that data collection is limited to only what is necessary for our mission. We maintain full transparency about how your data is used, processed, and stored.
• Exercising Your Rights: To exercise any of the rights listed above or inquire about your data, you can contact us via:
  • Email: admin@milkcartonsproject.org
  • Mail: Project Milk Carton, [Insert Office Address]
  We aim to respond to all requests within 30 days or in accordance with applicable legal timeframes.
• No Discrimination: Exercising your privacy rights will not result in any form of discrimination. You will receive equal access to all features and services regardless of the choices you make regarding your data.

For further details or assistance regarding your rights and data-related inquiries, please refer to our full privacy policy or contact our Legal Compliance Officer at admin@milkcartonsproject.org.

6. Data Retention

At Project Milk Carton, we are committed to retaining your personal and sensitive data only for as long as it is necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, or resolve disputes. Our data retention practices are designed to ensure your information is securely maintained while respecting your rights and choices. Below are the key scenarios where data retention policies apply:

• Active Missing Child Cases: Data related to an ongoing missing child case will be retained until the case is resolved or closed, or until you request deletion of the information. This ensures we can continue supporting search efforts effectively while respecting your control over your data.
• Parent-Controlled Deletion: As a parent or guardian, you have the right to delete any data associated with your account or child profile at any time. Upon your request, all relevant data will be securely removed from our systems, including blockchain records where technically feasible.
• Inactive Data: If your account remains inactive for an extended period (e.g., 12 months or longer), we may initiate automated data deletion in accordance with our retention schedule. Prior to taking such action, we will provide advance notice via email or other contact methods, allowing you to retain or delete your data as preferred.
• Legal and Compliance Obligations: In certain situations, we may need to retain data for longer periods to comply with legal requirements, resolve disputes, or enforce our agreements. For instance, data may be retained to comply with laws such as GDPR, CCPA, or COPPA.
• Anonymized Data: After the resolution of a case or the deletion of a profile, non-identifiable anonymized data may be retained for statistical analysis or operational improvements. This data will not include any personal or sensitive information that could be linked to you or your child.

Our data retention policies are guided by our commitment to privacy, security, and compliance with applicable laws. You can review or request deletion of your data at any time by contacting our Legal Compliance Officer at admin@milkcartonsproject.org.

For further details about your rights and how to manage your data retention preferences, please refer to the Your Rights and Choices section of this policy.

7. Cookies and Tracking Technologies

At Project Milk Carton, we use cookies and similar tracking technologies to enhance your experience, improve the functionality of our platform, and better understand how users engage with our services. These technologies allow us to provide a secure, efficient, and user-friendly experience while maintaining transparency about their use. Below are the types of cookies and tracking technologies we may use:

• Session Cookies: These temporary cookies enable us to recognize you during a single session on our platform. They help remember your preferences, streamline navigation, and ensure secure access to your account or child profile. Session cookies expire once you close your browser.
• Persistent Cookies: These cookies remain on your device for a set period or until manually deleted. They help us remember your login credentials or user settings across multiple sessions, reducing the need for repeated input and enhancing convenience.
• Analytics Cookies: We use cookies from analytics tools (e.g., Google Analytics) to collect anonymized information about how users interact with our website. This data helps us understand site traffic, identify trends, and optimize the platform’s design and functionality.
• Functional Cookies: These cookies support enhanced features, such as personalized content and resource recommendations, based on your previous interactions with our platform.
• Security and Authentication Cookies: These cookies help maintain the security of your session, verify user identity, and protect your data from unauthorized access.

Third-Party Technologies: While we primarily use first-party cookies, certain features may rely on third-party technologies. For example, integration with Google Maps for our heat map functionality may involve the use of cookies to ensure proper operation and display. These third parties are bound by our data privacy standards and applicable laws.

Managing Your Cookie Preferences: You have control over how cookies are used on your device. You can manage or disable cookies through your browser settings. However, please note that disabling certain cookies may impact the functionality and availability of features on our platform, such as secure login or personalized recommendations.

For more information on how we use cookies and your options for managing them, please contact our Legal Compliance Officer at admin@milkcartonsproject.org or review our detailed Cookie Policy.

By continuing to use our platform, you consent to the use of cookies and tracking technologies as described in this policy.

8. Changes to This Privacy Policy

At Project Milk Carton, we are committed to keeping you informed about how we handle your data. As our platform evolves or as laws and regulations change, this Privacy Policy may be updated periodically to reflect new practices, technologies, or legal requirements. Transparency and accountability remain at the core of our approach.

Notification of Changes: When significant changes are made to this Privacy Policy, we will notify you through one or more of the following methods:

• Posting a prominent notice on our website’s homepage, ensuring visibility for all visitors.
• Sending a direct notification to registered users via email, detailing the changes and their potential impact.
• Displaying an in-app notification for active users at the time of login or while using key features.

Effective Date: The effective date of the revised policy will be clearly indicated at the top of the Privacy Policy page. We encourage you to review the updated policy to ensure you are informed of any changes. Your continued use of our platform after the effective date will signify your acceptance of the revised policy.

Your Rights: If you disagree with any changes made to this Privacy Policy, you have the right to stop using our services and request deletion of your data. You may also contact us to express concerns or seek clarification about the updates.

Commitment to Transparency: Minor updates, such as clarifications or language improvements that do not affect the scope of the policy, may be implemented without direct notification but will always be reflected on this page. Significant changes, especially those affecting your rights or the use of your data, will always be communicated in advance.

If you have any questions or concerns about changes to this Privacy Policy, please contact our Legal Compliance Officer at admin@milkcartonsproject.org. We value your trust and are committed to ensuring you feel confident and informed when using our platform.

9. Contact Us

If you have any questions or concerns about this Privacy Policy, or if you wish to exercise any of your data protection rights, please contact us:

Email: admin@milkcartonsproject.org

Mailing Address (if applicable):
Project Milk Carton
137 Oak ST
Elko, Nevada
USA