Privacy Policy

PRIVACY STATEMENT

This is the privacy statement for Oddwell, the online store at oddwell.org. It explains what personal information we collect, why we collect it, who else gets it, how long we keep it, and what you can ask us to do about it.

This Statement was amended as of 08-11-2026 and is effective as of that date. Last updated: 08-11-2026. It replaces every earlier version of our privacy statement.

We have written it to describe what this website and our systems actually do — not what a template says a store like ours might do. Where something is planned but not switched on yet, we say so. Where a choice we offer only works in part, we say that too. We would rather be accurate than reassuring.

Your use of oddwell.org is also governed by our Terms of Service.

WHAT'S IN THIS STATEMENT

The Short Version

Who We Are, and Who Is Responsible

What Personal Information We Collect

What We Do Not Collect

How We Use Personal Information

Who We Share Personal Information With

Payment Processing

Cookies, Local Storage and Other Tracking Technologies

Advertising and Analytics Partners

Selling and Sharing Your Personal Information

How to Opt Out of Advertising and Analytics

Do Not Track and Global Privacy Control

Marketing Email

How Long We Keep Information

Your Choices, and How to Use Them

How We Protect Information

Children's Privacy

Submitting Information From Outside the United States

State Privacy Disclosures

Changes to This Privacy Statement

Contacting Us

THE SHORT VERSION

If you read nothing else, read this. Every point is expanded further down.

• We sell home, desk and gift items, and we ship only within the United States.
• To take an order we need your name, email address and shipping address. Your card number goes straight to Stripe or PayPal — we never see it or store it.
• If you give us your email address through the discount pop-up or a sign-up form, we use it to send you marketing email. You can stop it at any time, and we act on that immediately.
• We list our products on Google through a product data feed, but no advertising tag runs on this site yet. When we start advertising, Google's tag will receive information about your visit including your IP address, which under California's definitions is "sharing" for cross-context behavioral advertising and which we would also treat as a "sale". We describe it here so you have notice in advance rather than after the fact.
• We run our own analytics on our own servers, and it records your IP address. We do not use Google Analytics.
• We do not sell your information to data brokers or list brokers, and we do not hand it to other companies for their own marketing. The only marketing-related transfers we make are the advertising ones described in this Statement.
• You can ask us what we hold about you, ask us to correct it, or ask us to delete it. Email nextgeneng123@gmail.com. We answer these requests as a matter of policy, whether or not a law requires it of a store our size.
• There is no cookie banner on this site, and we explain honestly below what does and does not run without one.

WHO WE ARE, AND WHO IS RESPONSIBLE

Oddwell is a one-person business — a sole proprietorship based in Rhode Island, United States. When we say "we", "us" and "our" we mean that business, the operator of the online store at oddwell.org. When we say "you" and "your" we mean you, the person reading this, visiting our site or buying from us.

The owner of that business is the controller of the personal data collected through oddwell.org — the person who decides what is collected and why, and the person answerable for it. Rhode Island requires a commercial website to designate a controller and to publish a working way to reach them. Ours is:

• Email: nextgeneng123@gmail.com — this is the address to use for anything in this Statement, and it is read by a person.
• Postal mail: Oddwell, 2093 Philadelphia Pike #2836, Claymont, DE 19703, United States.

By "personal information" we mean information that identifies you, or that can reasonably be linked to you — your name, email address, shipping address, IP address, the identifiers our site stores in your browser, and records of what you looked at and bought. Some privacy laws call this "personal data"; we use the two terms to mean the same thing here.

WHAT PERSONAL INFORMATION WE COLLECT

These are the categories of personal information we collect through oddwell.org.

Information You Give Us

• Your email address — when you enter it in a discount pop-up, a newsletter box, our contact form, or the write-a-review form on a product page.
• Your name, email address and shipping address — when you place an order. These come to us from Stripe or PayPal after you pay; you type them on their checkout pages, not on ours.
• Your phone number — only if you choose to type one into our contact form. That field is optional, and we do not ask for a phone number at checkout.
• Whatever you write to us — the message in a contact form, the text and star rating in a review submission, or anything you put in an email to us.
• What you ordered — the products, quantities, prices and order total.

Information Collected Automatically When You Visit

• Your IP address. Every website receives this; it is how the page reaches your device. We also store it — see Our own first-party analytics below.
• Your browser and device information — the user-agent string your browser sends, and whether you are on a phone or a computer.
• What you do on the site — the pages you view, how long you stay on them, how far down you scroll, and store actions such as opening the cart, adding an item, starting checkout and completing a purchase. Also whether a pop-up was shown to you, and whether you dismissed it or signed up.
• How you arrived — the page you landed on, the website that referred you, and any advertising click identifiers and campaign tags in the link you clicked (for example gclid, msclkid and utm_ parameters).
• Identifiers we store in your browser — random visitor and session identifiers. The full list is in Cookies, Local Storage and Other Tracking Technologies below.

Information We Receive From Our Payment Processors

After you pay, Stripe or PayPal sends us the limited information we need to fulfill and support the order: your name, email address, shipping address, what you bought, the amount, whether the payment succeeded, and (from Stripe) the card brand and the last four digits. We never receive your full card number, your PayPal login, or your bank details.

WHAT WE DO NOT COLLECT

Cloned privacy policies routinely describe collection that never happens. To be clear about ours:

• There are no accounts on this site. There is nothing to register for and no password to set.
• We never receive your card number. Payment credentials go from your browser directly to Stripe or PayPal.
• We do not collect your phone number at checkout, and we do not send marketing text messages.
• We do not buy personal information from data vendors, list brokers, enrichment services or advertising co-operatives, and we do not receive customer lists from anyone.
• We do not collect sensitive information — no government identifiers, no financial account numbers, no health, biometric, genetic, precise-location, racial, religious, political or sexual-orientation data.
• We do not record calls, use a camera or microphone, run session replay, or use a third-party chat widget.
• There are no public community features — no profiles, no comment threads, no public posting. Reviews submitted through the review form come to us by email; they are not published automatically.
• We do not knowingly collect anything from children under 13. See Children's Privacy below.

HOW WE USE PERSONAL INFORMATION

• To take and fulfill your order — process payment, make your item, and get it shipped to you.
• To email you about your order — confirmations, receipts and shipping updates. These are not marketing and you cannot unsubscribe from them while an order is open.
• To answer you — customer service, returns, warranty claims and replies to anything you send us.
• To send you marketing email, if you signed up. See Marketing Email below.
• To advertise — to measure which of our advertisements led to a visit or a purchase, and to show advertisements to people who have visited oddwell.org before (remarketing).
• To understand how the store is used — which pages work, where people leave, which products get looked at, so we can fix and improve the site.
• To protect the store — detecting fraudulent orders, abuse and technical attacks, and to recognise and exclude our own visits from our statistics.
• To meet our legal and accounting obligations — keeping records of sales, tax and refunds, and responding to lawful requests.

WHO WE SHARE PERSONAL INFORMATION WITH

Below is every company that receives personal information from us, named. This list is meant to be complete; if you find something running on our site that is not on it, tell us at nextgeneng123@gmail.com and we will correct this Statement.

• Stripe, Inc. — payment processing. Receives your payment credentials directly from you, plus your name, email address and shipping address.
• PayPal, Inc. — payment processing, if you pay with PayPal. Receives your payer details and the order.
• Resend, Inc. — email delivery, in the United States. Receives your name, your email address and the contents of the messages we send you. If you are on our mailing list, Resend also stores your membership of it and your unsubscribe status.
• Formspree, Inc. — form processing. Every contact-form submission (name, email address, optional phone number and your message), every review submission (name, email address, rating and review text), and a notification of every newsletter sign-up (email address and which form it came from) is delivered to us through Formspree.
• Google LLC — advertising and product listings. See Advertising and Analytics Partners below. Google also serves one web font used on our pages, which means Google receives your IP address and browser information on every page you load, whether or not you interact with anything.
• Meta Platforms, Inc. — not used. No Meta pixel or other Meta technology runs on this site.
• Microsoft Corporation — not yet. Nothing from Microsoft runs on this site today. See Advertising and Analytics Partners for what we plan.
• Vercel Inc. — hosting, in the United States. Our website and its ordering, email and analytics functions run on Vercel, so every request you make to the site passes through it.
• Neon, Inc. — the managed database service, hosted in the United States, where our own analytics records and our order-fulfillment records are stored.
• Cloudflare, Inc. — our domain's DNS, and the email routing that delivers mail sent to nextgeneng123@gmail.com to the inbox we actually read. Anything you email us passes through Cloudflare and then through Google's Gmail service.
• Anthropic, PBC — the AI service that writes the plain-English summary in our analytics dashboard. It receives only aggregated statistics — page counts, funnel totals, device splits. No names, no email addresses, no IP addresses, no visitor or session identifiers are sent to it.
• Law enforcement, regulators and courts — where we are legally required to disclose information, or where we believe in good faith that disclosure is necessary to prevent fraud, harm or an illegal act.
• A buyer of the business — if this business were ever sold or transferred, customer records would be part of what transfers. We would say so here first.

We do not sell or rent your information to data brokers, list brokers, marketing co-operatives or any other company for that company's own marketing. Whether our advertising transfers count as a "sale" under state law is a separate question, and we answer it plainly in Selling and Sharing Your Personal Information below.

PAYMENT PROCESSING

All payments made through our online store are processed by third-party payment processors; we currently use Stripe, Inc. ("Stripe") to process card payments and to offer the additional payment methods shown at checkout, such as Apple Pay, Google Pay, Link and Klarna. When you make a purchase, your payment card number and other payment credentials are provided by you directly to Stripe through Stripe's own secure checkout pages; we never receive or store your full payment card number. Stripe's collection and use of your personal information is governed by Stripe's own privacy policy, available at https://stripe.com/privacy. From Stripe we receive only the limited transaction information needed to fulfill your order and provide customer service: your name, email address, shipping address, the items purchased, the payment status, and the card brand and last four digits.

If you choose to pay with PayPal, your payment is processed by PayPal, Inc. ("PayPal") and is governed by PayPal's own privacy statement, available at https://www.paypal.com/us/legalhub/privacy-full. From PayPal we receive your name, email address, shipping address and payment status — never your PayPal login or funding details. Loading the PayPal button on our pages is itself a connection to PayPal, so PayPal receives your IP address and browser information when a page with that button loads. If you choose a wallet or pay-later option at checkout, your use of that method is also governed by that provider's own terms and privacy policy.

Which addresses each payment route accepts. Our card checkout only offers the delivery countries listed at the top of this Statement. The PayPal route uses whichever delivery address you have stored with PayPal, so it is possible to reach us from somewhere we do not normally serve. If that happens we will contact you and refund the order rather than ship it.

COOKIES, LOCAL STORAGE AND OTHER TRACKING TECHNOLOGIES

There is no cookie banner on oddwell.org. The technologies below run when you load the site. We are not going to pretend you were asked. What you can do about them is in How to Opt Out of Advertising and Analytics below, and you can block or clear all of them in your browser at any time.

Cookies — small files stored by your browser:

Local storage — items kept in your browser that are not cookies, and that clearing your cookies will not remove. You can clear them through your browser's "site data" or "storage" controls:

• _pl_vid, _pl_sess — a random visitor identifier and a session identifier for our own analytics. They contain no name or email address.
• _pl_attr — how you arrived: landing page, referring site, advertising click identifiers and campaign tags.
• store_cart, cart_timer_deadline, pending_purchase — your cart, the cart countdown, and the order details we hold briefly between checkout and the thank-you page. pending_purchase is deleted when you reach the thank-you page.
• Pop-up state — small flags recording which pop-ups you have already seen, so we do not show them again. These have no expiry date; they stay until you clear your site data.

Session storage — a third kind, which lives only as long as the browser tab is open and is discarded when you close it. We use it for flags recording which one-time messages you have already been shown in this visit.

Some content on our pages comes from other companies, and their technologies collect information about you when the page loads. We do not control what they do with it.

ADVERTISING AND ANALYTICS PARTNERS

This section names the specific companies that help us advertise and measure, and explains what each of them receives.

What is running today, and what we plan to add. As of the amendment date at the top of this Statement, the advertising and analytics technologies active on oddwell.org are our own first-party site analytics, all described below. We also publish a product data feed for Google. The Google advertising tags described below are not switched on yet; we describe them here so that you have notice in advance. We plan to add the Microsoft measurement technology described below; it is not switched on yet, and we describe it here so that you have notice in advance. We do not use Google Analytics on oddwell.org. We will update the amendment date at the top of this Statement when any of this changes.

Our own first-party analytics. We measure how oddwell.org is used with our own analytics tool, which we built and which sends its data to our own database rather than to an analytics company. It records the pages you view, how long you stay, how far you scroll, store actions such as adding to the cart and completing a purchase, your browser and device type, how you arrived at the site, and your IP address.

Being straight about the IP address, because it is the most sensitive thing in that list: we store it, we can see it in our dashboard, and our dashboard can show us the whole history of visits from one IP address — the pages, the sessions, and any purchases. We use this to recognise and exclude our own visits from the statistics, to spot fraud and abusive traffic, and to understand how visits turn into orders. This information is not published, not sold, and not sent to any advertising company. It is held in our database with our hosting and database providers (Vercel and Neon), who are named above. The raw visit records, including the IP address, are deleted after 90 days by a job that runs every day. The random visitor and session records — which carry no name, no email address and no IP address — and the daily totals we derive are kept for longer, as described under How Long We Keep Information.

Google LLC. We publish a product data feed — the names, descriptions, images, prices and availability of the items we sell — so that our products can appear in Google's free product listings and in Google Shopping advertisements. That feed describes our products; it does not contain information about you. Separately, Google's advertising tags are installed on oddwell.org. They tell Google that a visit or a purchase followed one of our listings or advertisements, and they let us show advertisements to people who have previously visited oddwell.org, a practice known as remarketing. Third-party vendors, including Google, use cookies to serve advertisements based on a person's prior visits to oddwell.org and to other websites on the internet. Google receives your IP address, browser and device information, the pages you viewed and purchase details through these tags. Separately, one of the fonts on our pages is served by Google, so Google also receives your IP address and browser information on every page load.

Microsoft Corporation (Bing and the Microsoft Advertising network). Nothing from Microsoft is installed on oddwell.org today. We intend to submit the same product data feed to Microsoft so that our products can appear in Bing Shopping listings, and if we begin advertising with Microsoft we will install Microsoft's Universal Event Tracking tag, known as UET. It works in the same way as the Google advertising tags described above, and Microsoft may likewise use cookies to serve advertisements based on your prior visits to oddwell.org and to other websites. We will amend this Statement when that happens.

Customer lists and audience matching. Advertising platforms let a business upload a list of customer email addresses so it can advertise to those customers, exclude them from advertising, or reach people with similar interests. We do not do this today. If we start, we will upload only a one-way encrypted (hashed) form of your email address and never the address itself, and under the terms we accept with each platform the list may be used only to perform that service for us. You can ask to be left off these lists at any time by emailing nextgeneng123@gmail.com.

These companies use what they receive for their own purposes too. Once Google or Microsoft receives information from us, each also handles it under its own privacy policy and for its own purposes, which we do not control:

• Google – How Google uses information from sites or apps that use our services
• Microsoft – Microsoft Privacy Statement

SELLING AND SHARING YOUR PERSONAL INFORMATION

This is the question we get asked most, so here is a direct answer.

What actually happens. This is what will happen once our advertising tags are switched on — today they are not, so nothing in this paragraph is running yet. When they are, loading a page on oddwell.org will fire the Google advertising tags. Those companies receive your IP address, your browser and device information, the page you are on, what you looked at or bought, their own cookies from your browser, and — if you have given us your email address — a hashed copy of it. They use that to attribute our advertising, to build advertising audiences, and to show you advertisements later, on other websites and apps. That is the whole mechanism. Nothing is hidden behind it.

Is that a "sale"? California law defines selling as making a consumer's personal information available to a third party for monetary or other valuable consideration, and defines sharing as making it available to a third party for cross-context behavioral advertising, whether or not money changes hands. We receive no money for any of this. What we receive is advertising that works better and measurement we could not otherwise get, and California's Attorney General has treated exactly that as valuable consideration. So our answer is: this is "sharing" for cross-context behavioral advertising, and we assume it is also a "sale" as those words are defined in California, and we would rather tell you that than argue about it.

What we do not do. We do not sell or rent your name, email address or postal address to data brokers, list brokers, marketing co-operatives, or any other company that would market to you on its own behalf. We have never done that and we have no plans to.

Why there is no "Do Not Sell or Share My Personal Information" link on this site. That link is required of companies that qualify as a "business" under the California Consumer Privacy Act. A company qualifies if it has annual revenue above roughly $26,625,000, or buys, sells or shares the personal information of 100,000 or more California consumers or households in a year, or makes half its revenue from selling personal information. We are a one-person store and we meet none of those tests, so the CCPA does not currently apply to us and we are not going to claim it does. We have not posted a "Do Not Sell or Share" link because a link that led to nothing would be worse than no link at all.

What we do instead. We honour as much of the substance as a store this size actually can, and we are going to be exact about where that stops.

• Email nextgeneng123@gmail.com with the subject "Opt out of ad tracking". A person reads it. We will keep your email address off any customer list we upload to an advertising platform, and if we ever upload such a list we will put a one-way encrypted (hashed) copy of your address on that platform's exclusion list so you are filtered out of it. We will also take you off our mailing list. And if you give us something to find them by, we will delete your records from our own analytics — see Your Choices, and How to Use Them.
• Use the per-platform and industry opt-out tools listed in the next section, which stop the advertising being tailored to you.
• Send a Global Privacy Control signal from your browser — but read the next-but-one section first, because we tell you exactly how far it reaches on this site.

What emailing us does not do, and we would rather tell you than let you assume. The advertising tags described above build audiences inside Google's own systems, out of visits that have already happened. (They are not switched on yet, so no such audience exists today — but the limitation below is real and will apply the moment they are.) Google gives an advertiser no way to remove one named person from an audience built that way — the only removal tools they offer apply to lists an advertiser uploaded itself, and we do not upload any. So writing to us cannot lift you out of an audience you are already in, and we are not going to claim it can.

What does reach it. Two things. Those audience memberships expire on the platform's own clock, without us doing anything — typically within 30 to 180 days of your last visit, and up to 730 days where the event was a purchase. And the platform and browser controls in the next section work directly against the platform, which is why we list them first rather than as an afterthought. Use them as well as writing to us.

If our size ever changes enough that these laws apply to us, we will build the machinery they require and say so here.

HOW TO OPT OUT OF ADVERTISING AND ANALYTICS

You can limit or switch off interest-based advertising in several ways. These controls are saved per browser and per device, so you may need to repeat them on each browser and device you use.

• Email us. Write to nextgeneng123@gmail.com and we will keep your email address off any customer list we upload to an advertising platform, and put a hashed copy of it on that platform's exclusion list if we ever upload one. Please do this as well as, not instead of, the platform controls below — the controls below are the ones that reach an audience you are already in.
• Google. Manage or turn off personalized advertising at My Ad Center. We do not use Google Analytics on oddwell.org; if you want to opt out of Google Analytics on the many other sites that do use it, Google publishes the Google Analytics Opt-out Browser Add-on.
• Microsoft. Manage your advertising choices at Microsoft ad settings or at choice.microsoft.com.
• Industry-wide tools. The Digital Advertising Alliance at optout.aboutads.info, the Network Advertising Initiative at optout.networkadvertising.org, and, in Europe, the European Interactive Digital Advertising Alliance at youronlinechoices.eu let you opt out of many participating advertising companies at once.
• Your browser and your device. Most browsers let you block or delete cookies and site data in their settings — that is also how you clear the local-storage items listed above. On a phone or tablet you can reset or limit your advertising identifier in the operating system's privacy settings. Blocking third-party scripts stops these tags at the source.
• Our own analytics. It has no advertising cookie to switch off, and it does not follow you to other websites. If you want your records removed from it, email nextgeneng123@gmail.com — see Your Choices, and How to Use Them for what we need from you to find them.

Opting out stops advertising from being tailored to you. It does not stop you from seeing advertisements, and it never affects your ability to shop with us or the price you pay.

DO NOT TRACK AND GLOBAL PRIVACY CONTROL

Do Not Track. Some browsers can send a "Do Not Track" ("DNT") signal. We do not respond to DNT signals, because there is no agreed standard for what responding would mean. We are required to tell you what we do, and that is what we do.

Global Privacy Control. Some browsers and extensions send a "Global Privacy Control" ("GPC") signal, which is a request to opt out of the sale or sharing of your personal information. When our site sees a GPC signal, it does one specific thing: it switches Google's advertising tag into a restricted mode, in which Google may use what it receives only as our service provider — for measurement, security and billing — and not to personalise advertising to you.

What GPC does not currently do on our site, stated plainly: it does not stop our own analytics from recording your visit and your IP address. We would rather write that down than let you believe a signal is doing more than it is. If you want to go further, email nextgeneng123@gmail.com — the section above sets out exactly what we can and cannot do in response — and use the browser and platform controls listed there, which are the ones that reach the advertising platforms directly.

Other parties collecting information across sites. We are required to tell you whether third parties may collect personally identifiable information about your online activities over time and across different websites when you use our site. They may, and they do. Google does exactly that through the tags described above. That is what remarketing is.

MARKETING EMAIL

Our mailing list is built from email addresses submitted through the sign-up forms and the promotional pop-up on oddwell.org — the discount offers and the newsletter boxes.

The consent we rely on. Each discount pop-up states, next to the button you press, that submitting your email address signs you up for recurring marketing email from Oddwell and that you can unsubscribe at any time, and that your consent is not a condition of purchase. Submitting the form is how you give that consent. If you gave us your address and did not mean to join the list, tell us at nextgeneng123@gmail.com and we will take you off it — no questions.

What you get. New arrivals, sales and offers, usually a few times a month. That is all we use the list for.

Buying something does not sign you up. Placing an order does not add you to the mailing list, and unsubscribing does not stop your order emails.

Writing to us does not sign you up either. Email addresses from our contact form and our review form are used to answer you. They are not added to the mailing list.

How to stop. Every marketing email we send carries an unsubscribe link at the bottom, and one click is enough — no login, no form, no reason required. Clicking it takes effect immediately, because our email provider records it without us being involved. You can also email nextgeneng123@gmail.com at any time and we will remove you; that route depends on a person reading the inbox, so we will do it within the ten business days the law allows, and in practice usually the same day. Unsubscribing stops marketing email only; you will still receive confirmations and shipping notices for anything you buy, because those are not marketing.

Our postal address. Federal law requires a valid physical postal address in every commercial email. Ours, which appears in our marketing emails and which you may also use for written privacy requests, is:

Oddwell
2093 Philadelphia Pike #2836
Claymont, DE 19703
United States

No text messages. We do not collect phone numbers at checkout, we do not run an SMS marketing programme, and we do not use automatic dialers. If that ever changes we will ask for your consent separately and amend this Statement first.

Who delivers our email. Resend sends it. Resend receives your email address, your name where we have it, the contents of the message, and your subscription status.

HOW LONG WE KEEP INFORMATION

• Order records — name, email address, shipping address and what you bought — are kept for as long as we are in business. We need them for accounting and tax, for warranty and return claims, and to defend against payment disputes. Our order system is deliberately built so that order numbers are never reused, which means order rows are marked cancelled rather than removed.
• Mailing list — until you unsubscribe. After you unsubscribe we keep a record that you did, so that we do not email you again by accident.
• Raw analytics visit records, including IP addresses — 90 days, then deleted. A job runs daily to do it, so it is not something we have to remember; if that job ever stops we will fix it, and until it is fixed the records stay longer than 90 days. We are saying that rather than describing the schedule as something that cannot fail.
• Analytics visitor and session records — the random identifier, how you arrived, and the pages of that session, with no name, email address or IP address — are kept until we delete them. We do not currently delete them on a schedule, and we are telling you that rather than publishing a limit we do not enforce.
• Daily totals and statistics derived from the above are kept indefinitely. They describe traffic, not people.
• Contact-form, review and sign-up submissions — held by Formspree for as long as our account with them is active, and in our email inbox alongside the rest of our customer correspondence.
• Cookies and browser storage — cookies expire on the schedules given in the cookie section. The browser-storage items have no expiry date and stay until you clear your site data; the session-storage items are gone when you close the tab.

YOUR CHOICES, AND HOW TO USE THEM

Comprehensive state privacy laws mostly apply to companies far larger than us, and we are not going to quote you rights under statutes that do not cover this business. Instead, here is what we will actually do for anyone who asks, wherever you live. Email nextgeneng123@gmail.com.

• See what we hold about you. Tell us the email address you used with us and we will send you the personal information we hold under it: your order history, your mailing-list status, and what came in through our forms.
• Correct it. If your name, email address or shipping address is wrong, tell us and we will fix it. This is also the route to use if an order is in flight and the address needs changing — the sooner the better.
• Delete it. We will remove you from the mailing list, and delete the form submissions and correspondence we hold. What we cannot delete: records of completed orders, which we keep for the accounting, tax and dispute reasons above, and anything a payment processor holds independently as its own record of a transaction. We will tell you exactly what we kept and why.
• Delete your analytics records. These are not filed under your name, so we need something to find them by — the IP address you browsed from, or the visitor identifier your browser stored. If you send us either, we will delete the matching rows. Otherwise the raw records with your IP address expire on their own within 90 days.
• Stop the advertising tracking. See Selling and Sharing Your Personal Information and How to Opt Out of Advertising and Analytics above.
• Get a copy you can take elsewhere. Ask, and we will send what we hold in a readable file.

We will not charge you for any of this, and we will never treat you differently — different prices, different service, a worse offer — because you asked. We aim to respond within 30 days. We may ask you to confirm you control the email address in question, because handing someone else's order history to the wrong person would be the worse mistake. If you are unhappy with our answer, reply and say so; a person reads it.

HOW WE PROTECT INFORMATION

Our site is served over HTTPS, so traffic between your browser and us is encrypted. Payment credentials never touch our systems. Our database provider encrypts stored data, and access to our systems is limited to the owner of the business.

We are a small business, not a bank, and we are not going to claim our security is perfect — no honest website can. No method of transmitting or storing information is completely secure. What we can tell you is that we deliberately hold as little as possible: no accounts, no passwords, no card numbers.

CHILDREN'S PRIVACY

oddwell.org is a general-audience store meant for adults, and it is not directed to children. We do not knowingly collect personal information from children under 13, and we do not ask anyone's age or date of birth anywhere on the site. If we learn that we have collected personal information from a child under 13, we will delete it. If you are a parent or guardian and believe your child has given us information, email nextgeneng123@gmail.com or write to the postal address above and we will remove it.

SUBMITTING INFORMATION FROM OUTSIDE THE UNITED STATES

We operate this store from United States and we sell and ship only within the United States. Our card checkout offers those delivery countries only. Our PayPal route uses the delivery address stored on your PayPal account, so an order from elsewhere can reach us; where that happens we contact the buyer and refund rather than ship. Our prices are in US dollars, and our advertising is aimed at the United States. We do not offer goods or services to people in the European Economic Area, the United Kingdom or Switzerland, and this site is not directed to them.

Our website and database are hosted in the United States, so information collected here is stored and processed there.

Because we do not target the EEA, the UK or Switzerland, we do not offer the rights that European data protection law gives people there, and we have not appointed a representative in those regions — publishing a list of rights we have no process to deliver would be a false promise. If you are in one of those regions and reach this site anyway, Google's advertising tags are set to a denied-by-default consent state for visitors from those countries, and you are welcome to email nextgeneng123@gmail.com with any request; we will do what we reasonably can.

STATE PRIVACY DISCLOSURES

California. This Statement is our notice under the California Online Privacy Protection Act. It identifies the categories of personally identifiable information we collect and the categories of third parties we may share it with (What Personal Information We Collect and Who We Share Personal Information With); it describes the process for reviewing and requesting changes to your information (Your Choices, and How to Use Them — email nextgeneng123@gmail.com); it describes how we notify you of material changes (Changes to This Privacy Statement); it carries an effective date at the top; it discloses how we respond to Do Not Track signals and to Global Privacy Control; and it discloses that other parties may collect personally identifiable information about your online activities over time and across different websites when you use our site (Do Not Track and Global Privacy Control). As explained above, we are not a "business" under the California Consumer Privacy Act, and we do not claim to be. California's "Shine the Light" law does not apply to a business with fewer than 20 employees.

Rhode Island. Under Rhode Island we designate a controller for this website and publish a way to reach them (Who We Are, and Who Is Responsible). The categories of personal data we collect through this website are identifiers (name, email address, postal address, IP address, and the browser identifiers listed above), commercial information (orders and products viewed), and internet activity (pages visited, referral source, device and browser information). We clearly disclose that we process personal data for targeted advertising — Google's remarketing tags do exactly that. The third parties to whom we have transferred, or may transfer, personally identifiable information in a way that may be treated as a sale are Google LLC, and, if we begin advertising there, Microsoft Corporation. You may contact us about any of this at nextgeneng123@gmail.com.

Nevada. Nevada requires the operator of a commercial website to publish notice of the information it collects and an address for requesting an opt-out of the sale of covered information. There is no size threshold that lets us out of it: the exemption for small operators is only available to businesses located in Nevada, and we are not. This Statement is that notice, and nextgeneng123@gmail.com is that address; we respond within 60 days and usually far sooner. Nevada defines a sale narrowly, as an exchange for money. We do not exchange your information for money, so there is no Nevada sale to opt out of — but if you ask, we will still do everything listed under Your Choices, and How to Use Them.

Texas. Texas prohibits even a small business from selling sensitive personal data without consent. We do not collect sensitive personal data at all — see What We Do Not Collect — so there is nothing of that kind for us to transfer to anyone.

Everywhere else. Most other state privacy laws apply only above customer or revenue thresholds this store does not reach. Rather than track each one, we extend the choices in Your Choices, and How to Use Them to everyone who asks, regardless of where they live.

CHANGES TO THIS PRIVACY STATEMENT

We may change this Statement. When we do, we will post the new version on this page and change the amendment and effective date at the top. That date is how you can tell whether anything has changed since you last read it.

If we make a material change — one that meaningfully affects what we collect, who we share it with, or what we do with it — we will say so at the top of this page for at least 30 days, and, where the change affects information we already hold about you and we have your email address, we will email you about it. Information we have already collected stays governed by the version of this Statement that was in place when we collected it, unless you agree otherwise.

CONTACTING US

If you have a question about this Statement, or want to make any of the requests described in it, contact us. A person reads these.

Email: nextgeneng123@gmail.com

Postal mail: Oddwell, 2093 Philadelphia Pike #2836, Claymont, DE 19703, United States