English
Mesabi Minnesota Data Inventory
For adult sites and platforms with 100,000+ Minnesota users

Minnesota wants it written down. Every kind of data.

Mesabi tells you whether Minnesota's privacy law reaches your site and keeps the written inventory it requires - each kind of personal data with why it is held, where, who receives it and how long - sensitive data only on consent, every review dated, nothing quietly erased.

Opens in this browser with an invented site's inventory already in it. No account, no email address, nothing installed. It describes data and never holds any.

The problem

The first state to require the inventory outright.

The Minnesota Consumer Data Privacy Act, in force since July 31, 2025, requires a business with 100,000 Minnesota consumers to maintain an inventory of the data it manages. The cure period ended January 31, 2026. Each violation can cost $7,500.

100,000

Minnesota consumers - the line at which the Act applies.

Lathrop GPM →
$7,500

per violation - and the cure period ended January 31, 2026.

Lathrop GPM →
Inventory

controllers must maintain one of the data they manage - the first state law to say so outright.

Captain Compliance →

Will not take a line it cannot defend.

Not a reminder. A line is refused without why the data is held, where, who receives it and how long it is kept. Sensitive data is refused on anything but consent. A line is retired, never erased. Nothing is deleted.

How it works

Check, list, keep current

Check it applies

Minnesota consumers, and revenue from selling data.

List every kind of data

Why, where, to whom, how long.

Keep it current

Retire what changed; review on a cadence.

What it will never do

It describes the data. Never holds it.

Mesabi holds the inventory, nothing more.

No personal data.Only a description of what the site holds.
No member names or accounts.There is no field for one.
No cards.It touches no payment.
It is not legal advice.The Act and counsel are the reference.

Pricing

One plan

For one site.

Kept current

Site

$29/mo

The inventory, always current.

  • Whether the Act applies
  • Every kind of personal data
  • Sensitive data on consent only
  • Dated reviews

Monthly. Your bank statement says Mesabi Software. Your licence key is on your screen as soon as the payment confirms.

Pay by card through Square, on Square’s own checkout page — we never see or store your card number. Or pay with bitcoin through our own bitcoin server. Either way you come back here, type your business name, and your licence key is on the screen — no email, no waiting on us.

Questions

The ones we actually get asked

Does it apply to us?

At 100,000 Minnesota consumers a year - not counting those seen only to take a payment - or 25,000 with over a quarter of revenue from selling data.

What counts as sensitive?

Among other things, a person's sex life or sexual orientation - much of what an adult site knows. It is held only with consent.

What if something changes?

Retire the old line with the day and add the new one. The history stays.

Is this legal advice?

No. It is the inventory and the record.

What do I actually get when I pay?

The demo on this page is the whole program, running on invented records. Paying gets you a licence key — one line of text, on your screen as soon as the payment confirms: the checkout brings you back to our thank-you page, you type your business name and the key appears. Paste it into the program and from then on it keeps your own records. Until then, nothing you type into it is kept.

The key is checked inside the page, on your own machine. It never calls us, so there is still no account and nothing about your business goes anywhere. If you ever stop paying, your records stay exactly where they are, read-only, and Export still hands you every one of them.

Open the demo and add a line

An invented subscription site has six kinds of data on its inventory - try adding a sensitive one without consent.