ArmorBee Privacy Policy

Privacy Policy
ArmorBee

Privacy Policy

Last updated 24 September 2026. This covers armorbee.org — for MochiMind's own app privacy policy, see here.

Overview

ArmorBee is a free, independent child online safety resource for Malaysian parents and guardians. It requires no account. This page explains the few places the site does collect information — through our email subscription and our safety-concern report form — and how we handle it.

Data controller

ArmorBee (operating under MochiMind) is the data controller for personal data collected through this website. Contact: help@armorbee.org.

Legal framework — Malaysia PDPA

Where we collect personal data from persons in Malaysia, we do so in compliance with the Personal Data Protection Act 2010 (PDPA). Our lawful basis for processing subscriber email addresses is consent — you provide your address voluntarily by completing the subscribe form. You may withdraw that consent at any time by unsubscribing (link in every email) or by contacting us.

We also hold ourselves to the PDPA's seven data protection principles: General, Notice & Choice, Disclosure, Security, Retention, Data Integrity, and Access.

Location detection

With your browser's permission, ArmorBee detects your approximate location so it can show issues, helplines, and emergency numbers relevant to your country. Your coordinates are sent directly from your browser to a third-party reverse-geocoding service — BigDataCloud, or OpenStreetMap Nominatim on the homepage — to convert them into a country and region name — they are not sent to or stored on ArmorBee's own servers.

If you decline the permission prompt, ArmorBee falls back to generic international guidance instead.

Email subscription

What we collect: Your email address (required), your name (optional), your alert-type preferences, and your preferred newsletter language.

Why: To send you safety alerts and newsletters matching the preferences you chose.

How it flows: Your submission passes through Netlify (our hosting and form provider, US-based) to our team, and your email address is added to a mailing list managed by Mailchimp (Intuit Inc., US-based). Both providers operate under their own data processing agreements and security standards. By subscribing, you acknowledge that your email address is transferred to and stored by these US-based providers.

We never sell or rent your email address. Every email includes an unsubscribe link.

Retention: Your subscriber record is kept for as long as you remain subscribed. Once you unsubscribe or request deletion, we remove your address from our active list within 30 days and from any archived backups within 90 days.

Safety concern reports

Our report a concern form is anonymous by default — contact details are optional. Whatever you submit (the issue description, category, affected age group, country/region, and severity, plus your email and first name only if you choose to give them) is received through Netlify's form service.

Please don't include a child's full name or other identifying details in a report — the form's own instructions ask for this too. We use reports only to spot patterns and improve the safety guidance we publish; they are not published, shared publicly, or sold.

If you provide an email, we may use it solely to follow up on your specific report.

Retention: Report submissions are reviewed within 14 days and retained for pattern-analysis purposes for up to 12 months, after which they are deleted. If you provided contact details, those are removed after follow-up is complete or within 90 days, whichever is sooner.

Theme preference

Your light/dark mode choice is saved only in your browser's local storage. It never leaves your device.

Advertising and analytics

ArmorBee runs no advertising and no third-party analytics or tracking scripts of any kind. We do not use Google Analytics, Meta Pixel, or any similar tool.

Children's privacy

ArmorBee is built for parents and guardians. We don't knowingly collect personal information from children, and our subscribe and report forms are intended for adult use. If you believe a child has submitted personal information to us, contact us at help@armorbee.org and we'll remove it promptly.

Your rights (PDPA)

Under Malaysia's Personal Data Protection Act 2010, you have the right to:

  • Access — request a copy of the personal data we hold about you
  • Correct — ask us to update inaccurate or incomplete data
  • Withdraw consent — unsubscribe at any time via the link in any email, or by contacting us
  • Delete — request erasure of your subscriber or report data
  • Limit processing — ask us to restrict how we use your data while a correction or deletion is pending

To exercise any of these rights, email help@armorbee.org with the subject "PDPA data request." We will respond within 21 days.

Cross-border data transfers

When you subscribe, your email address is transferred to and processed by Mailchimp (United States) and Netlify (United States). Both providers maintain appropriate data protection safeguards. By submitting the subscribe form, you consent to this transfer as described in this policy.

Requesting deletion

To have your subscriber data or a submitted report removed, email us at help@armorbee.org with the subject "Data deletion request." We'll confirm deletion within 30 days.

Changes to this policy

If this policy changes materially, we'll notify active subscribers by email before the change takes effect. The updated version will also be posted at this page with a new "Last updated" date.

Contact

Questions or concerns about this policy: help@armorbee.org

Emergency