Your data, plainly
Privacy Policy
Draft v1 — this page describes what the site actually does.
What we collect. Only what an order or letter needs: an email for receipts and sign-in codes; a name and address only when something ships; city/state/zip only for in-person visits; your nostr public key if you sign in with one. No ad trackers, no analytics beacons, no third-party cookies.
What we forget. Contact and shipping details on orders are automatically purged about 30 days after delivery — the returns window closes, and then we forget on purpose. Order records themselves (what was bought, for how much) remain for the books.
Email. The list is opt-in. Every newsletter carries a one-click unsubscribe. Sign-in codes expire in ten minutes.
Payments. Bitcoin invoices are processed by One Cocreation's own payment server. We never see card numbers (there are none) and never custody your keys.
Your rights. Ask and we'll show you what we hold about you, correct it, or delete what the law lets us delete. Write to the house at the addresses in the footer.