🌙 Midnight Munchie Company

                                                               Privacy Policy

www.midnightmunchieco.com | Effective Date: February 22, 2026

Welcome to Midnight Munchie Company! We take your privacy seriously — almost as seriously as we take our cookies. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at www.midnightmunchieco.com or place an order with us. Please read this policy carefully. If you disagree with its terms, please discontinue use of our site.

When you place an order, create an account, or contact us, we may collect:

• Name and contact information (email address, phone number, delivery address)

• Payment information (processed securely via our payment processor — we do not store full card numbers)

• Order history and preferences

• Messages or communications you send to us

When you visit our website, we may automatically collect:

• IP address and browser type

• Pages viewed and time spent on the site

• Referring website or source

• Device type and operating system

• Cookies and similar tracking technologies (see Section 5)

We use the information we collect to:

• Process and fulfill your cookie orders

• Communicate with you about your order status and delivery

• Send you promotional offers, new menu items, and late-night specials (with your consent)

• Improve our website, products, and customer experience

• Comply with legal obligations

• Prevent fraud and maintain the security of our platform

We do not sell your personal information. We may share your information with:

• Delivery partners and service providers who help us fulfill your orders

• Payment processors to handle transactions securely

• Analytics providers (such as Google Analytics) to understand site usage

• Law enforcement or regulatory bodies when required by law

All third-party service providers are contractually obligated to handle your data securely and only for the purposes we specify.

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Order records are typically retained for up to five (5) years for accounting and legal purposes. You may request deletion of your account and associated data at any time (see Section 7).

Our website uses cookies — the digital kind — to enhance your browsing experience. Types of cookies we use include:

• Essential cookies: Required for the website to function (e.g., shopping cart, login sessions)

• Analytics cookies: Help us understand how visitors interact with our site

• Marketing cookies: Used to deliver relevant promotions (only with your consent)

You can control cookie settings through your browser preferences. Note that disabling certain cookies may affect the functionality of our website.

Midnight Munchie Company is committed to protecting the privacy and safety of children online. This section describes our practices in compliance with the Children's Online Privacy Protection Act (COPPA) and applicable state laws. Please read this section carefully.

Our website and online ordering services are intended for use by individuals who are 13 years of age or older. We do not knowingly market to, solicit information from, or collect personal information from children under the age of 13 without verifiable parental consent. By using our website, you represent that you are at least 13 years of age.

We do not knowingly collect any of the following from children under 13:

• Full name, home address, or email address

• Phone number or other contact information

• Payment or financial information

• Geolocation data

• Photos, videos, or audio files

• Any other personally identifiable information

If we discover that a child under the age of 13 has submitted personal information to us without verifiable parental or guardian consent, we will take immediate steps to:

• Remove the information from our records as quickly as reasonably possible

• Terminate any account associated with that child

• Notify the parent or guardian if contact information is available

Parents or legal guardians who wish to provide consent for their child's use of our services, or who believe their child has submitted personal information without consent, should contact us immediately using the information in Section 11.

If you are the parent or legal guardian of a child under 13, you have the right to:

• Review any personal information we may have inadvertently collected from your child

• Request the deletion of your child's personal information from our systems

• Refuse to permit further collection or use of your child's information

• Consent to our collection and use of your child's information without requiring disclosure to third parties

To exercise any of these rights, please contact us at the information provided in Section 11. We will respond to verifiable parental requests within 30 days. We may ask you to provide proof of identity and your relationship to the child before processing your request.

For users between the ages of 13 and 17, we encourage parents and guardians to monitor their child's online activity. While users in this age range may use our website, we recommend:

• Parents review this Privacy Policy with their teen

• Teens avoid sharing unnecessary personal information online

• Parents use browser parental controls where appropriate

We do not serve targeted advertising to users we know to be under the age of 18, and we do not sell or share the personal information of minors with third parties for their commercial purposes.

If you believe that a child's privacy rights have been violated, or that a child under 13 has provided personal information to us without parental consent, please contact us immediately at the information listed in Section 11. You may also report concerns about children's online privacy to the Federal Trade Commission (FTC) at www.ftc.gov.

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you

• Correction: Request that we correct inaccurate or incomplete data

• Deletion: Request that we delete your personal data, subject to certain legal exceptions

• Opt-Out: Unsubscribe from marketing emails at any time using the unsubscribe link in any email

• Data Portability: Request your data in a portable, machine-readable format

To exercise any of these rights, please contact us at the information provided in Section 10. We will respond within 30 days.

We implement industry-standard security measures to protect your personal information, including SSL encryption, secure payment processing, and regular security assessments. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Our website may contain links to third-party websites (for example, our social media pages). This Privacy Policy applies only to www.midnightmunchieco.com. We are not responsible for the privacy practices of third-party sites and encourage you to review their privacy policies.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will update the "Effective Date" at the top of this page and may notify you by email or a prominent notice on our website.

If you have any questions, concerns, or requests regarding this Privacy Policy, please reach out to us:

Midnight Munchie Company

Website: www.midnightmunchieco.com

Email: orders@midnightmunchieco.com

Phone: 1.845.726.6543 

Location: Poughkeepsie, NY

We're up late — so feel free to reach out any time. 🍪

© 2026 Midnight Munchie Company. All rights reserved.