This document sets forth the privacy policy (the "Privacy Policy") of Magellan Storage, LLC, a California limited liability company ("Magellan") for Magellan Storage (together with other services provided by Magellan, the "Services") and the Web site, www.magellanstorage.com (including all subpages thereto, the "Site"). The Privacy Policy forms part of the Standard Lease Agreement.

Please be aware that Magellan's Services and Site are not intended for and may not be used by children under the age of 13, nor may they be used to solicit or collect any information from children under the age of 13. If you have objections to the Privacy Policy, you should not access or use the Site nor should you sign up for the Services offered by Magellan.

Magellan's Privacy Principles

• Your information is your own and you decide who will have access to it.
• You maintain ownership rights to your information, even if there is a business transition or policy change.
• You may add, delete, or modify your information at any time.
• Magellan will not update or modify your information without your permission.
• Magellan will not sell, exchange, or otherwise share your information with third parties, unless required by law or in accordance with your instructions.
• Magellan does not send spam, maintain spam mailing lists, or support the activities of spammers.

Information Collection and Use
Magellan Users—Your Account Information

When you sign up for Magellan Services online, you will need to provide us your name and your e-mail address. Magellan will also ask you to provide a private password and a security question and answer, which will become part of "Your Account Information".

We use Your Account Information to enable you to use the Services. This information is stored on Magellan's secure servers and is not shared with any outside parties. If you forget your password, you will be asked to go on the Magellan Web site, answer your security question and create a new password. A confirmation e-mail will be sent to the registered e-mail address you specify. No plain text passwords will ever be passed through e-mail.

Additionally, we may use Your Account Information:

• For assessment of service levels;
• To better understand on an aggregated basis how our Site is used, gauge traffic patterns and determine what types of content and services are most popular with users of our Services;
• To provide you with information about Magellan products, services, news and events through the Site or e-mail; and/or
• To allow you to purchase Magellan products and services.

For users using the Site to reserve storage space, purchase products and/or to make payments, we will also collect credit card and billing information to complete the request. Magellan does not permanently store this information and the information is removed once the transaction has been completed.

Limited Data Sharing with Third Parties

Although we will use every reasonable effort to preserve your privacy, we may need to disclose Your Account Information, including personally identifiable information, when required by law if we have a good-faith belief that such action is necessary to comply with a current judicial proceeding, a court order or legal process served on Magellan and/or the Site (see "Government Authority" below for more information). We will notify you of such actions where reasonable and permitted by law.

Rights to Your Account Information

You have the right to access, correct, update, and/or delete Your Account Information at any time. You can do so by logging into the Site with your username and password, by e-mailing us at [provide e-mail address] or by calling [provide phone number]. You will retain these rights even in the event of a business transition (see "Change of Ownership or Other Business Transition" section for more information).

Changes to your information are typically executed immediately. For example, if you delete your account, your account immediately becomes inaccessible and all Your Account Information within your account is completely removed from the Magellan Servers.

Change of Ownership or Other Business Transition

In the event Magellan goes through a business transition, such as a merger, acquisition or the sale of all or substantially all of its assets (a "Business Transition"), the Magellan servers containing Your Account Information will, in most instances, be part of the assets transferred. In such event, you will be notified via e-mail and/or through a notice on our Web site and any other appropriate methods prior to the Business Transition, and Magellan's custody of Your Account Information will be transferred subject to all the terms and restrictions in this Privacy Policy.

Cookies

In order to improve the Services and the Site, we use "cookies" when you are logged into the Site using your e-mail address and password. A cookie is a piece of data that is transferred to your browser by a Web server and can only be understood by the server that gave it to you. It functions as your computer's identification token and enables Magellan to personalize your experience when you are signed in to the Site. The cookie also contains your e-mail address so that we can make it easier for you to sign in. Most browsers are initially set to accept cookies. You can set your browser to notify you when you receive a cookie, giving you the chance to decide whether to accept it.

While Magellan uses cookies to enable you to use the Services and the Site, and our Web servers automatically log the Internet Protocol ("IP") address of your computer, Magellan does not use this information to identify you personally except to provide you with the features of the Services.

Log Files and Backups

Like most Internet services, we use log files, both on the client and server side. The data held in log files includes your IP address, browser type, e-mail application, Internet service provider ("ISP"), computer platform type, date/time stamp, and user activity. Magellan uses server log data to analyze trends, administer the Services and the Site, and improve service levels. IP addresses are not tied to any personally identifiable information.

Your Account Information may also exist temporarily within regularly performed server backups. Magellan retains backups for a period no greater than 30 days before deleting them.

User Communications

Users may occasionally receive information on Magellan products, services, news and events. Out of respect for your privacy, we present you with the option to not receive these communications. You may change your current setting by modifying your Account preferences using the Site.

On rare occasions it is necessary to send out a strictly service-related announcement which is not promotional in nature. This announcement may notify you of changes to the Privacy Policy and/or terms of your Standard Lease Agreement. Generally, you may not opt-out of these communications, though you can deactivate your account. These notifications will generally be sent to a validated e-mail address for your account.

Links

The Site contains links to other sites. Please be aware that Magellan is not responsible for the privacy practices of such other sites. We encourage you to be aware when you leave the Site or otherwise link to other sites, to read the privacy policies of each and every site that collects personally identifiable information. Magellan's Privacy Policy applies solely to information collected by the Services or the Site.

Children's Privacy

Magellan is committed to protecting the privacy needs of children and we encourage parents and guardians to take an active role in their children's online activities and interests. Magellan's Services and Site are not intended for and may not be used by children under the age of 13. Magellan does not knowingly collect information from children under the age of 13 and Magellan does not target its Services and Site to children under 13.

Government Authority

You should be aware that, as with all legal contracts, our Standard Lease Agreement and this Privacy Policy could be amended, terminated or modified without the consent of you and/or Magellan by judicial proceeding, court order, in connection with bankruptcy or other insolvency proceedings, or pursuant to other government action. When reasonable and lawful, we will notify you if this occurs.

Security and Confidentiality

• If you forget your password, you will be asked to go on the Magellan Web site, answer your security question and create a new password. No plain text passwords will ever be passed through e-mail.
• The Services use Secure Socket Layer ("SSL") for all client-server communication using Your Account Information.
• Your Web-based access to Your Account Information is protected by an encrypted password. We recommend that you do not disclose your password to anyone.
• Additionally, Your Account Information resides on a firewall-protected server that only selected Magellan personnel have access to via password. Magellan strives to prevent unauthorized parties from viewing Your Account Information.

Changes to the Magellan Privacy Policy

If we change the Privacy Policy, we will post the new Privacy Policy on the Site with a link from the Site's homepage, so that you are always aware of what information we collect, how we use it, and under what circumstances—if any—we disclose it. Any substantive changes to the Magellan Privacy Policy will be posted 30 days prior to taking effect.

We will use Your Account Information in accordance with the Privacy Policy under which the information was collected. If, however, we plan to use Your Account Information in a manner different from that stated at the time of collection we will notify you via e-mail and/or through a notice on our Web site and any other appropriate methods and you will have a choice as to whether or not we use Your Account Information in this different manner. Whether or not you wish to have Your Account Information used in this different manner, you will retain ownership rights to Your Account Information and the ability to delete Your Account Information at any time. Please note, if you have deleted or deactivated your account with the Services or are an opt-out User, then you will not be contacted, nor will Your Account Information be used in this different manner.

Contacting Us

If you have any questions or suggestions regarding the Privacy Policy, please e-mail us.

Security Safeguards

Magellan is committed to handling customer information with the highest standards. To enable the trusted exchange of personal information, we've implemented the following industry-proven physical, electronic, and procedural safeguards:

• We protect our network with a secure firewall system. Magellan's network can only be accessed through ports 80 (HTTP), 443 (Secure HTTP) and 25 (SMTP). All other ports are filtered.
• We employ an Intrusion Detection System (IDS) that constantly monitors all activity in the Magellan network. IDS collects network traffic information which is analyzed by Symantec. This allows the real-time detection of exploits, denial-of-service attacks, port scans, etc. We are immediately notified if any suspicious activity takes place.
• We have implemented a Mandatory Access Control system to manage access to all server resources. This goes beyond the traditional user/group based access control offered by most operating systems.
• We use a single point of access to the secure server network. Access requires certificate based authentication via a Secure Shell (SSH) limited to a select group of employees. The server machines are on their own private network, isolated from outside connections, with the exception of the administration host, which requires certificate-based authentication.
• We install a custom "hardened Linux kernel" that has been reduced to the minimum subset necessary to run our service, effectively removing many exploits and potential compromises.
• We use SSL to encrypt our proprietary protocol for client/server communications.
• We validate all e-mail addresses of users who join the Service.
• We encrypt all passwords stored in our database. We do not send passwords or requests for passwords through e-mail.
• We strip attachments from all Magellan e-mails in order to prevent viruses from being transmitted through our system.
• We expire all Web sessions.
• We maintain and selectively review activity logs to prevent unauthorized activities from occurring within our computer environment.
• We control access to customer information inside our company by limiting employee access to systems and data based on business requirements.
• We test our security systems regularly and periodically contract outside companies to audit our security systems and processes.

The security of Magellan accounts also relies on customers protecting their Magellan password. If you suspect that someone may have obtained access to your password, please change it immediately by signing in to your account at www.magellanstorage.com to manage your "Account Settings."