Privacy

Checkout is handled by a payment provider - Dodo Payments, Gumroad, or Etsy, depending on where you bought. They collect your email address, your billing country, and the payment details needed to take the payment.

Card numbers never reach this site and are never stored by the studio. What comes back is your email address, what you bought, and the country used for tax. That is used to deliver the file, answer support, and honour refunds.

The site is a set of static pages. It sets no advertising cookies and builds no profile of you. The host records ordinary server logs - the page requested, a timestamp, a truncated network address - which is how any website works and how abuse is spotted.

Product pages load a checkout script from the payment provider so the buy button works. That script is subject to the provider's own privacy policy.

You are emailed about an order you placed. If you choose to join a list, you are emailed occasionally about new products, and every message carries a one-click unsubscribe. You are never added to a list for buying something.

Your email address is not sold, rented, or shared for anyone else's marketing.

Only the companies needed to run the shop:

• Dodo Payments, Gumroad and Etsy - payment, invoicing and tax, each acting as merchant of record for sales made through them.
• Cloudflare - serving the pages you are reading.
• The email provider that sends order and support mail.

Each of these has its own privacy policy and each is bound to use your data only to provide its service.

Order records are kept for as long as tax and accounting rules require, typically five years. Support emails are kept while the conversation is useful and deleted after that. Mailing-list entries are deleted when you unsubscribe.

Write to hello@one36ty.com and you can ask for a copy of what is held about you, ask for it to be corrected, or ask for it to be deleted. Deletion is honoured except where a record must be kept for tax. Requests are answered within 30 days and there is no charge.

If you are in the EU or UK, the lawful bases used are: performing the contract when you buy, legitimate interests for security and support, and consent for marketing email.

Some products here are children's books. They are sold to adults. The site is not directed at children and does not knowingly collect information from them. If you believe a child has provided information, write and it will be deleted.