Privacy

Stated first because it is most of the answer, and because every one of these is checkable from your own browser:

• no analytics of any kind, and no advertising or social pixels
• no cookies are set by this site, so there is no cookie banner to dismiss
• no third party scripts run on these pages. The typefaces are served from this domain, so loading a page does not tell Google you were here
• your personal data is never sold, rented or traded, and there is no situation in which it would be

Your email address, if you hand it over. The Trend Report and waitlist forms ask for an email and nothing else. The list is double opt in, so submitting the form sends you a confirmation and nothing else happens until you click it. Every email after that has an unsubscribe link that works immediately.

That is the entire list for browsing the site. No account, no profile, no name, no address.

Checkout is handled by Lemon Squeezy, which is the merchant of record for every sale here. They collect your name, email address, billing address and payment details, under their own privacy policy, and they are the ones holding it.

What reaches us is the order record: the email address, the country, which deck was bought and which file format was picked. We never see your card number. It does not pass through this site or any server we control.

Three things are kept in your browser’s local storage. None of them is a cookie, none is transmitted to us, and clearing your browser data removes all three:

• your cart, so it survives a reload
• the date you last dismissed the offer panel, so it stops reappearing
• any presets you save in Studio

The site is hosted on Vercel, and like any web server theirs records the IP address, the page requested and the time, as part of serving and protecting the site. We do not build profiles from those logs and we do not connect them to anyone’s email address.

Four companies, each doing one job. All are in the United States, which means data about you may be processed there.

Beyond these, data is disclosed only if the law actually requires it.

If you are in the UK or the EU, the legal bases are: your consent for marketing email, which you give by confirming the double opt in and withdraw by unsubscribing; the performance of a contract for anything tied to an order you placed; and our legitimate interests in keeping the site up and secure, which is what the server logs are for.

Your email address stays on the list until you unsubscribe or ask us to delete it, and then it goes. Order and invoice records are kept by Lemon Squeezy for as long as tax and accounting law requires them to be, which is not something either of us can shorten. Server logs are held on Vercel’s own retention schedule and are not archived by us.

Whatever your local law gives you, and we will do these for anyone who asks regardless of where they live: a copy of what we hold, a correction, deletion, a portable export, or an objection to a particular use. Email hello@onset.supply and we will action it within 30 days. There is no charge and asking costs you nothing else.

To unsubscribe you do not need to email anyone. The link is at the bottom of every message.

If you are in the UK or the EU and you think we have handled this badly, you can complain to your national data protection authority. We would rather you told us first, but that route is yours and it exists whether we like it or not.

These are business tools and the site is not aimed at children. We do not knowingly collect anything from anyone under 16. If a child has submitted an address, tell us and it will be deleted.

If this changes, the date at the top changes with it. If it ever changes in a way that matters, meaning we start collecting something new, anyone on the list is told by email before it takes effect rather than after.

S-1 Works Inc., in British Columbia, Canada, is the data controller for this site. Questions, requests and complaints all go to hello@onset.supply. The terms and the refund policy cover the rest.