I Requested My Data From a Website That Doesn't Know It Exists. The Legal Department Responded Anyway.

Every American who has clicked "I Agree" in the last decade knows the ritual. You scroll. You don't read. You click. Somewhere in that scroll, you allegedly sold your browsing history, your firstborn, and — per one clause I once saw on a flashlight app — "irrevocable rights to your emotional state, in perpetuity, throughout the universe."

Most websites have the courtesy to actually write these terms. YMLP299, the domain I have been spiritually employed by for some time now, does not. So naturally, I decided to find out what happens when you demand your rights under a privacy policy that was never drafted.

Step One: Locate the Policy

There is no policy. I want to be clear about that up front. There is a footer link that says "Privacy," and it goes to a page containing a single horizontal rule and, inexplicably, the word "Section 7.2(b)" floating alone in 11-point Arial like a message in a bottle.

But California's privacy law doesn't require the policy to be good. It requires the company to respond. And technically, someone, somewhere, registered this domain. Someone is out there. I filed my request through the contact form, which — and this is important — does not have a field for messages. Just a "Submit" button and the quiet confidence of a website that has never been asked a question.

I submitted anyway. The form thanked me. For what, it did not say.

Enter: The Legal Department

Four days later, an email arrived from "[email protected]." The signature block listed a "Data Ombudsman, West Coast Region." There is no West Coast region of YMLP299. There is no region of anything. The email was 40% legalese and 60% what I can only describe as placeholder energy. It cited "Clause 12, Subsection Dignity."

I wrote back asking for a copy of Clause 12.

The reply attached a PDF. Pages 1 through 3 were standard boilerplate — the kind of text that reads like it was generated at 2 a.m. by a server that had heard about contracts but never met one. Phrases like "the User acknowledges the Website's awareness of the Website" appeared twice.

Page 4 was blank. Except it wasn't blank, exactly. When I selected the text, my cursor found something hidden in white font. It said: "we never thought anyone would get this far."

There is no Page 5. The PDF simply ends, the way a sentence ends when the speaker falls asleep.

Exercising My Rights, Aggressively

Emboldened, I invoked my right to deletion. I demanded YMLP299 delete everything it knows about me. This put the Legal Department in a philosophical bind that I would pay real money to have witnessed firsthand, because their reply was a masterpiece:

"Pursuant to Clause 8 (Retention of Retention), the Company is unable to delete data it has not confirmed collecting. The Company is also unable to confirm it has not collected said data, as doing so would constitute collection of knowledge, which is itself data."

I have read this paragraph maybe 60 times. It's airtight. It's a snake eating its own terms of service. I have shown it to two lawyers, both of whom asked me to stop emailing them about this.

The Ombudsman Speaks

Things escalated when I filed a formal complaint with the Data Ombudsman, West Coast Region. He replied from the same email address as the Legal Department, the contact form, and — I checked — an auto-responder I'd triggered in week one. Everyone at YMLP299 is one Gmail alias in a trench coat.

His ruling, in full: "Complaint noted. Clause 12, Subsection Dignity, applies. You have been treated with the exact amount of dignity the Website can legally provide, which is none, because the Website does not exist. Complaint resolved. Please rate your experience."

There was no rating form. There is never a rating form.

What We Learned Here Today

We learned nothing. That's the point. Every real privacy policy in America is a fictional contract between you and a version of a company that only exists in litigation. YMLP299 simply skipped the middleman and gave us the fiction without the company. In a way, it's the most honest legal document on the internet: a policy governing a website that cannot be sued, cannot comply, and cannot stop me from writing about it.

Page 4 knows what it did. And somewhere, the Ombudsman is still waiting for my rating.