This site collects nothing.
No analytics, no cookies, no tracking pixels, no consent banner — because there is nothing to consent to. There is no JavaScript on any page of this site. Your visit is not measured, and we could not tell you how many people read this sentence.
The website
What we set
Nothing. This site sets no cookie of any kind, first party or third party. It stores nothing in your browser. It contains no analytics, no tag manager, no advertising pixel and no session recording, and there is no form on it that submits anywhere.
The one third party: Google Fonts
The typefaces on this site are served from fonts.googleapis.com and fonts.gstatic.com, which are operated by Google. Loading them means your browser makes a request to Google, and Google therefore receives your IP address, your user-agent string and the address of the page you are on, in the ordinary way that any request to any server does. Google states that it does not use Fonts requests to build advertising profiles; we cannot independently verify that, so we are telling you the request happens rather than claiming this site has no third parties on it.
That is the complete list. Nothing else on these pages is fetched from anywhere but this domain.
The Chinese pages additionally load Noto Sans and Noto Serif from the same two Google hosts, so that Chinese text is set properly rather than left to whatever your device happens to have. Same two hosts, same disclosure, no additional third party.
Server logs
Our static host keeps standard web-server logs, as every host does. We do not read them, we do not export them, and we do not connect them to anything. We hold no mailing list, and there is no newsletter to unsubscribe from.
Client data
Where it lives
In your systems. We work inside your general ledger, your bank portal, your card programme and your document storage, under user accounts that belong to you and that you can revoke without asking us. We do not take a copy of your books and keep it here. Where a working paper has to exist outside your systems — a reconciliation in progress, a schedule being built — it lives in a folder you own, in your storage, and you can see it while it is being written.
Who can reach it
- Read-only before you sign, working access afterTo quote, we look at your books read-only. Once the engagement starts we hold the access the work actually requires, because from week one we are doing the work: posting entries, raising invoices and preparing payment runs. What we never hold, at any stage, is signing authority on your accounts.
- Named accounts, least privilegeEvery person who works on your books has their own account with their own name on it. No shared logins, no shared passwords, and no access beyond what the work requires.
- Contracted specialists are covered by the same termsAnyone we bring in signs the same confidentiality and data terms we sign with you, before they are given an account.
- Access ends when the work doesWe remove our own accounts within five business days of an engagement ending and confirm in writing that we have. You should revoke from your side as well; belt and braces is the correct number of belts.
The three rules we put in writing about AI
Software is a large part of how this firm delivers a fixed fee, and it would be dishonest to pretend otherwise. So here are the constraints, and they are contractual rather than aspirational.
- Zero data retention, in the contractNo tool touches client data unless the vendor has agreed in writing that inputs and outputs are not retained and are not used to train anything. A marketing page saying so is not sufficient; it has to be in the agreement, and we will show you which agreements we hold.
- A human reviews anything before it reaches the ledgerSoftware may read, extract, classify, draft and reconcile. Nothing posts to your general ledger without a named person having looked at it and accepted it. There is no configuration of this firm in which an automated process books an entry unreviewed.
- Named user, timestamped, or we do not use itEvery action in your systems must be attributable to a human being with a time against it. If a tool can only write as a shared service account, or writes without an audit trail, we do not use it on your books. This one has cost us tools we liked.
Asking us about your data
Write to contact@millracefinance.com and ask what we hold, where it is and who has reached it. You will get a straight answer, in writing, within five business days. If you ask us to delete a working paper we hold outside your systems, we will delete it and tell you when it is done, subject only to records we are required to keep.
Last updated 29 August 2026. If this page changes materially we will tell existing clients directly rather than quietly reposting it.