Privacy
This page explains what personal data oddly collects when you buy from us, and why. The data controller is [legal name of seller or business]. Contact: madebyoddly@gmail.com.
What we collect
- At checkout (through Stripe): your name, email, billing country and postcode or address (used to work out tax), and payment details. Stripe processes your card; we never see the full card number.
- When we deliver: your email address, so we can send your download links. We use Resend to send these emails.
- When you email us: whatever you choose to send.
- Hosting logs: our host, Vercel, keeps standard technical logs such as IP address, browser and pages requested, for security and reliability.
We don't use advertising trackers or analytics cookies on this site. Stripe sets its own cookies on its checkout page to prevent fraud.
Why we use it
- to complete your purchase and deliver the files (performing our contract with you);
- to keep records of sales and tax (legal obligation);
- to prevent fraud and handle support requests (legitimate interests).
We don't sell your data. We'll only send you marketing emails if you've opted in, and you can unsubscribe at any time.
Who we share it with
We share data only with the service providers who help us run the store: Stripe (payments and tax), Resend (email) and Vercel (hosting). Some of them may process data outside your country, under their own safeguards.
How long we keep it
We keep order records for as long as tax and accounting law requires, normally 5–7 years. Support emails are kept for up to 2 years.
Your rights
You can ask to see, correct or delete your personal data, or object to how we use it, by emailing madebyoddly@gmail.com. Depending on where you live, you may also be able to complain to your data-protection authority. In Singapore, that's the PDPC.