Privacy

• We keep your email address and what you've bought or downloaded, so your library works.
• Card payments are taken by Stripe on its own checkout page (older orders went through Polar or PayPal). We never see your card.
• The newsletter is separate and opt-in. Getting a free download never signs you up.
• Site analytics are cookie-free and don't identify you.
• When you buy from a maker, your email is shared with that maker for support and updates on what you bought. The switch is on at checkout and you can turn it off there, or later at your library's sharing page. Hearing about the maker's other work is a separate box, unticked unless you tick it.
• Makers otherwise see only totals: sales, downloads and visits, never who you are.
• Comments are public under the name you choose, never your email. Likes and follows show only as counts. Makers' posts and reels are public.
• Messages are private between you and the other side. Someone at iogen reads one only if it is reported. They are stored on iogen's servers, not end-to-end encrypted.
• If you ask to sell on iogen, we keep what you send so we can reply. If we decline, your name, email and message are deleted.
• A maker's newsletter goes only to people who asked for it, at checkout or on the maker's page (a visitor confirms their email from a link first). iogen sends it for the maker, so the maker sees how many people subscribed, not who. Every newsletter has a link to cancel it, and you can cancel any time from your library.
• If you unsubscribe from an iogen email, your address goes on a do-not-send list so it isn't emailed again.
• No selling or sharing of your data for advertising.

iogen accounts are for people 18 and over. When an account is made we ask you to confirm you are 18 or older and keep a note that you did, with the date; we don't ask for or keep your date of birth. iogen is not meant for children, and we don't knowingly collect data from anyone under 13. If we learn that an account belongs to someone under 13, we close it and delete its data. If you think a child under 13 has given us their details, write to [email protected].

• Cloudflare: hosting, the library database and file storage.
• Stripe: card payments, and payouts to makers.
• Namecheap: iogen's mailboxes, which send sign-in links, receipts and iogen's own emails.

Privacy requests, including deleting your account: [email protected].

Black Hole Visuals LLC, trading as iogen, decides how your data is used. Write to [email protected].

• To give you what you asked for: your library, purchases, downloads, sign-in links and receipts. This is needed to carry out the sale.
• To follow the law: records of payments and tax, and answering reports of illegal content.
• Because you said yes: the newsletter, sharing your email with a maker, and a maker's other-work emails. You can take any of these back at any time.
• To keep the site safe and working: stopping abuse and fraud, rate limits, error logs and cookie-free visit counts. We weigh this against your privacy and keep it to what is needed.

We use only the cookies the site needs to work: staying signed in, remembering your cart and finishing a purchase, and showing the right account menu. If you arrive through a maker's referral link, a cookie remembers which maker for 30 days. There are no advertising or tracking cookies.

• Your account and library stay until you ask us to delete them.
• When you do, we delete your account and library. We keep what the law requires, such as records of payments and tax, and a do-not-send note so we don't email you again.
• A request to sell is deleted if we decline it.
• A report of illegal content is kept for as long as the law needs it.

You can ask to see the data we hold about you, correct it, delete it, limit or object to how we use it, take a copy of it, or withdraw a consent you gave. Write to [email protected]; we answer within a month. If you live in the EU or UK you can also complain to your local data protection authority. If you live in a US state with a privacy law, you have the same rights to know, correct and delete, and we don't sell or share your data for advertising, so there is nothing to opt out of.

Cloudflare, Stripe and Namecheap may handle data in the United States and other countries. They rely on standard contract terms approved for sending data out of the EU and UK.