MPX Knowledge Base & Legal Policies
Official community standards, privacy practices, terms of service, and virtual goods regulations.
Privacy Policy
Myanmar Profess X utilizes Google Sign-In solely for identity verification and account authentication. We adhere strictly to the Google API Services User Data Policy, enforce Limited Use standards, prohibit AI NCII, and guarantee complete user sovereignty with direct 30-day data deletion.
Myanmar Profess X (also referred to as "MPX", "mmpxyz", "mmpxyz.com", "the Application", "we", "us", or "our") is committed to protecting user privacy, ensuring absolute transparency in data collection and processing practices, and safeguarding personal information. This Privacy Policy governs your use of our website (https://mmpxyz.com), mobile applications, APIs, and associated services (collectively, the "Services").
01 Overview & Application Purpose
Myanmar Profess X is fundamentally Myanmar's premier 18+ Adult Community, Relationship Knowledge, Sex Education, and Youth Lifestyle Forum (မြန်မာ့ နံပါတ် ၁ လူကြီးသီးသန့် 18+ နှင့် ဆက်ဆံရေး ဗဟုသုတ ဖိုရမ်). Our application provides a private, secure, and respectful community for consenting adults aged 18 and older to engage in discussions regarding romantic relationships, sexual health and education, adult literature, and youth lifestyle topics.
We operate strictly under principles of data minimization and member privacy. We do NOT sell, rent, monetize, or broker personal information. All communications and platform interactions are shielded by enterprise-grade cryptographic controls.
02 Information We Collect & Collection Methods
We collect only the minimum necessary personal information required to deliver our community services securely:
- Direct Account Registration: When registering an account directly, you provide a chosen username, a valid email address, and a password. Passwords are never stored in plain text; they are irreversibly salted and hashed using memory-hard Argon2id cryptographic algorithms.
- Third-Party Social Sign-In Data (Google OAuth 2.0 & Social Providers): When you choose to authenticate via Google Sign-In or other authorized social providers (Discord, Telegram), we receive public profile attributes authorized by you through standard OAuth consent flows. See Section 4 for complete Google user data disclosures.
- Session & Edge Security Metadata: When you connect to our servers, our reverse proxies log your IP address, browser User-Agent string, and request timestamps strictly for session management, rate limiting, and DDoS mitigation.
- Community Participation Data: Public forum posts, discussion threads, replies, reputation awards, and double-entry virtual credit transaction ledger entries generated during your participation.
03 Purpose of Data Collection & Processing
We process your personal information strictly for legitimate platform purposes:
- Authentication & Identity: To authenticate your sign-in via password or Google OAuth (Single Sign-On / SSO) and maintain encrypted browser sessions.
- Community Display: To present your chosen username, forum rank, and public avatar on community discussions you author.
- Essential Transactional Notices: To send account verification messages, security alerts (e.g., password reset confirmations, new device login notifications), and subscribed thread updates.
- Abuse Prevention & Security: To detect and block automated spam bots, brute-force login attacks, multi-account harassment, and credential stuffing.
04 Google User Data: Scopes, Collection, Usage, Storage, Sharing, Retention & Deletion
Compliance with Google API Services User Data Policy, Limited Use Requirements & OAuth 2.0 Standards
Mandatory Google Limited Use Compliance Disclosure
Myanmar Profess X's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
A. Specific Google API Scopes Requested & Data Collected
When you log in or sign up using Google Sign-In, Myanmar Profess X requests only the minimum necessary non-sensitive OAuth scopes:
-
openid(OpenID Connect Identifier): Provides a unique Google account identifier (sub). We use this identifier to associate your Google login securely with your Myanmar Profess X member profile. -
https://www.googleapis.com/auth/userinfo.email(oremailscope): Provides your primary Google email address. We use this address to create your account, verify account ownership, prevent duplicate accounts, and send vital transactional security notifications. -
https://www.googleapis.com/auth/userinfo.profile(orprofilescope): Provides your public display name and avatar image URL. We use this to conveniently initialize your forum username and profile picture. You can modify, anonymize, or replace your display name and avatar at any time in your Account Settings.
B. How Google User Data is Stored & Secured
Information obtained through Google APIs (Google ID, email address, display name, and avatar URL) is stored in our private relational database (MariaDB 11) hosted in an isolated, firewall-protected production environment. All data in transit between your browser, Google's authorization servers, and our application is encrypted using Transport Layer Security (TLS 1.3 / HTTPS). Access to the database is restricted to authorized internal system processes via cryptographically authenticated connections.
C. Zero Third-Party Sharing of Google User Data
Myanmar Profess X does NOT sell, rent, lease, trade, license, or transfer Google user data to any third parties, advertisers, marketing networks, data brokers, or external analytics aggregators. Google user data is utilized solely and strictly to authenticate your account and render your user profile within the Myanmar Profess X platform.
D. Expressly Prohibited Data Uses (Google API Terms & Cloud Policies)
In compliance with Google Cloud App Verification Standards and Support Article 13806988:
- No Advertising: Myanmar Profess X will not transfer or use Google user data for targeted, personalized, retargeted, or interest-based advertising.
- No Data Brokering: Myanmar Profess X will not sell Google user data to data brokers or provide it to information resellers.
- No Credit Scoring or Lending: Myanmar Profess X will not use Google user data for determining credit-worthiness or for lending purposes.
- No AI Model Training: Myanmar Profess X will not use Google user data to train, retrain, fine-tune, or develop generalized artificial intelligence (AI), machine learning (ML), or large language models (LLMs).
- No Unauthorized Databases: Myanmar Profess X will not create unauthorized databases or sell user profile data to any external parties.
E. Strict Limitations on Human Access to Google User Data
Myanmar Profess X strictly prohibits human employees, administrators, or contractors from reading or viewing Google user data, except under the following narrow conditions:
- We have obtained your explicit affirmative consent to inspect specific data to resolve a technical support ticket submitted by you;
- It is strictly necessary for security purposes (such as investigating malicious attacks, brute-force exploits, or account takeovers);
- It is required to comply with applicable statutory law or a valid, enforceable court order; or
- The data is aggregated and anonymized for internal technical system performance metrics.
F. Data Retention & Deletion for Google User Data
Retention Standard: We store your personal information for a period of time that is consistent with our business purposes. When the data retention period expires for a given type of data, we will delete or destroy it. Google user data is retained only for as long as your Myanmar Profess X account remains active and registered.
User Deletion Rights: You may request for your data to be deleted by contacting our Data Protection Administration at admin@mmpxyz.com or support@mmpxyz.com, or by submitting a ticket through our Support Desk. Upon request verification, all personal identifiers, email records, and Google OAuth tokens are permanently deleted from our primary databases within thirty (30) calendar days.
Direct Revocation of Google Account Access: You may independently disconnect Myanmar Profess X and revoke our access to your Google Account at any time directly through your Google Account Security settings at: https://myaccount.google.com/permissions (or https://myaccount.google.com/connections). Revoking permissions terminates our access immediately.
05 Strict Prohibition on AI-Generated Non-Consensual Intimate Imagery (AI NCII)
Zero-Tolerance Enforcement in Compliance with Google APIs Terms of Service & Cloud Policies
In strict compliance with the Google APIs Terms of Service, Google Cloud Policies regarding Non-Consensual Intimate Imagery, and international human rights conventions, Myanmar Profess X enforces an absolute zero-tolerance policy against:
- AI-Generated Non-Consensual Intimate Imagery (AI NCII): Generating, hosting, uploading, soliciting, sharing, or linking to synthetic, altered, or AI-generated sexually explicit content depicting real people without their explicit consent (including deepfakes, nudify manipulations, and synthetic media).
- Non-Consensual Sexual Media: Any intimate media recorded, obtained, or published without the informed consent of all parties.
- Child Sexual Abuse Material (CSAM) / Child Sexual Exploitation and Abuse (CSAE): Absolute zero tolerance. Any CSAM/CSAE is immediately purged and reported to the National Center for Missing & Exploited Children (NCMEC) and relevant law enforcement authorities.
Any account found attempting to generate, distribute, request, or host AI NCII or non-consensual media will face immediate and permanent ban, deletion of all associated assets, and referral to competent law enforcement agencies.
06 Third-Party Service Providers & Data Transfers
We do not sell, rent, or lease your personal data. We disclose information only to essential technical service providers operating under strict confidentiality:
- Cloudflare Inc.: Edge network proxy, DDoS mitigation, SSL/TLS encryption, and Turnstile bot challenge. Cloudflare processes incoming IP traffic in transit without storing personal application data.
- Transactional Email Dispatcher: Secure SMTP relay for delivery of account verification and password reset emails.
- Legal Authorities: We disclose account information only when compelled by a legally binding court order, subpoena, or statutory legal obligation.
07 Data Retention and Account Deletion Policy
Retention Policy: We store your personal information for a period of time that is consistent with our business purposes. When the data retention period expires for a given type of data, we will delete or destroy it. User accounts and related OAuth connections are maintained as long as the member actively utilizes the Services. Accounts inactive for more than 24 consecutive months are scheduled for automatic archival and subsequent purging.
How to Request Deletion: You may request for your data to be deleted by:
- Submitting a formal deletion request ticket via our official Support Desk; OR
- Sending an email directly to our privacy administrators at admin@mmpxyz.com or support@mmpxyz.com with the subject line
"Data Deletion Request".
Upon verification of account ownership, your email address, profile identifiers, and OAuth tokens are permanently deleted from our primary databases within thirty (30) calendar days.
08 Cookies & Local Storage Technologies
Myanmar Profess X utilizes cookies and local storage tokens strictly for essential functionality and platform security:
mpx_session: Encrypted session token linking your browser to our backend session state.XSRF-TOKEN: Cryptographic token defending your browser against Cross-Site Request Forgery (CSRF).mpx_token: Secure bearer authentication token for authorized API communications.mpx_age_confirmed: Preserves your 18+ adult age confirmation state across sessions.
We do NOT deploy third-party advertising cookies, behavioral tracking pixels, or cross-site tracking scripts. Review our Cookie Policy for additional technical specifications.
09 Cryptographic Security Safeguards
We deploy robust, modern engineering safeguards to protect user information against unauthorized access, loss, or disclosure:
- Argon2id Hashing: Passwords are protected with industry-standard, memory-hard Argon2id cryptographic hashing.
- FIDO2 / WebAuthn Hardware Passkeys: Support for hardware-backed, biometric passwordless authentication.
- TLS 1.3 Encryption: All traffic in transit is encrypted using modern Transport Layer Security (TLS 1.3 / HTTPS).
- Zero-Leak Content Gating: Private content locks and attachments are filtered and redacted at the API layer, guaranteeing that unauthorized users never receive raw payloads.
10 Minimum Age Requirement (18+ Adults Only)
Myanmar Profess X is strictly and exclusively intended for consenting adults aged eighteen (18) years or older (or the legal age of majority in your jurisdiction). We do not knowingly solicit, collect, or maintain personal information from individuals under the age of 18 (or under 13 pursuant to COPPA regulations). If we learn that a registered user is under 18 years of age, their account and all associated data will be immediately and permanently purged from our servers.
11 User Rights & International Standards (GDPR & CCPA)
Regardless of geographic location, Myanmar Profess X honors standard international privacy rights:
- Right to Access: You may request a copy of the personal information we hold about you.
- Right to Rectification: You may update or correct your profile data through your Account Settings.
- Right to Erasure ("Right to Be Forgotten"): You may request complete, irreversible deletion of your account and personal data.
- Right to Restrict or Object: You may restrict certain processing activities or unsubscribe from notifications.
- Right to Data Portability: You may request your account activity data in a structured, machine-readable format.
12 Notifications of Changes to this Policy
We may update this Privacy Policy from time to time to reflect modifications in our operational practices, legal obligations, or Google API policy updates. When changes are made, we will update the "Last Modified" date at the top of this document, publish a notice in our Community Announcements forum, and display a prominent update banner on our homepage (https://mmpxyz.com). Continued use of our Services following notice of changes constitutes acceptance of the updated policy.
13 Developer Identity, Privacy Administration & Contact Information
If you have questions, feedback, or concerns regarding this Privacy Policy, your Google user data, or wish to exercise your data deletion rights, contact our Data Protection Administration: