All “security” guidelines blindly suggest no-store. Also private with no-store makes no sense.