Privacy Policy

This Privacy Policy explains what personal information Osda Life collects through the website osdalife.com, why we collect it, and the choices you have. Osda Life is an Indigenous-owned vintage ebook shop, operated as a sole proprietorship by Tseyadi and based in California, United States. For the purposes of data protection law, Osda Life is the data controller for this Website.

What This Website Does and Does Not Do

This Website is an archive and a storefront window. It does not take payment and does not process orders. Every title is purchased through our shop on Etsy, where checkout, payment, and order information are handled by Etsy under Etsy's own privacy policy, which you can read at etsy.com/legal/privacy. We never see or store your card or billing details.

Information You Give Us Directly

We collect personal information only when you choose to give it to us:

• Your email address, when you join our email list or request a free resource. Our email list is managed through MailerLite, our email service provider.
• Your name, email address, and message, when you write to us through the contact form. The form is handled by Netlify Forms, the form service of our website host. We use what you send only to read and reply to your message.

Information Collected Automatically

When you visit the Website, our hosting provider, Netlify, records standard server log data such as your IP address, browser type, the pages you view, and the date and time of your visit. This data is generated automatically by the web server and is used to keep the site running, secure, and free of abuse. This Website does not run advertising trackers, and it does not build a profile of you across other websites. The only analytics on this Website is Google Analytics, which runs only if you choose to allow it, as described below.

Analytics and Cookies

Google Analytics does not run for visitors in the European Economic Area, the United Kingdom, or Switzerland. The Website recognizes those regions from the country of your connection, as reported by our host Netlify, and from your device's time zone. In those regions, no cookie notice appears and no analytics cookies are set. If you visit from one of those regions through a VPN or with a device set to a time zone elsewhere, the Website may not recognize your region. In that case you will see the cookie notice instead, and analytics runs only if you select Accept.

Everywhere else, when you first visit, a notice asks whether you allow analytics cookies. Nothing is set until you choose.

• If you select Accept, the Website loads Google Analytics, a service of Google LLC. It sets first-party cookies (their names begin with _ga, and they expire after 13 months at most) and collects information such as the pages you view, how long you stay, the website that referred you, your general location by region, and your device and browser type. We use this only to understand which pages are useful and to improve the Website. Google signals and advertising features are turned off, and the data is not used for advertising. Google processes this information on our behalf under its terms, which you can read at policies.google.com/privacy.
• If you select Decline, Google Analytics never loads and no analytics cookies are set.
• Your choice is saved in your browser for six months, after which you will be asked again. You can change it at any time with the Cookie Settings link at the bottom of every page. Choosing Decline after accepting turns analytics off and removes its cookies.
• If your browser sends a Global Privacy Control signal, we treat it as Decline.
• Do Not Track: this Website does not respond to the older Do Not Track browser setting, which most browsers have retired. It does honor the Global Privacy Control signal, and analytics never runs unless you accept.

The Website also saves your cookie choice itself in your browser's local storage so the notice does not appear on every page. This is necessary for the notice to work and does not identify you.

Our Lawful Basis for Processing

If you are in the European Economic Area or the United Kingdom, the law requires us to name a lawful basis for using your personal information:

• For our email list and free resource, the basis is your consent, which you give by signing up and confirming your subscription. You may withdraw it at any time.
• For replying to a contact form message, the basis is taking steps at your request.
• For server logs, the basis is our legitimate interest in operating and protecting the Website.
• Google Analytics does not run for visitors in these regions, so no analytics data is collected about you.

How We Share Information

We do not sell your personal information, and we do not share it for anyone else's marketing. We rely on a small number of service providers who process data on our behalf so the Website can function:

• MailerLite, which stores our email list and sends our emails.
• Netlify, which hosts the Website, keeps server logs, and receives contact form submissions through Netlify Forms.
• Google, which provides Google Analytics, only if you accept analytics cookies.

We may also disclose personal information if the law requires it, for example in response to a lawful request from a public authority, or where it is necessary to protect our legal rights.

Images Hosted by Etsy

Some pages on this Website, such as the homepage and the shop pages, display product images that are stored on Etsy's image servers (i.etsystatic.com) rather than on our own. When your browser loads one of these images, it requests the file directly from Etsy, which means Etsy receives your IP address and basic browser information as part of that request. This happens only so the product images can appear, and it is governed by Etsy's privacy policy, which you can read at etsy.com/legal/privacy. We do not use these images to track you, and we receive no information from Etsy about your visit.

How Long We Keep It

We keep your email address for as long as you remain subscribed. If you unsubscribe or ask us to delete your information, we remove it from our records. Contact form messages are kept only as long as needed to handle your request. Google Analytics data is kept for 14 months and then deleted automatically. Return visits do not extend this period.

Your Rights

You have the right to ask what personal information we hold about you, to have it corrected or deleted, and to withdraw your consent to our emails at any time. Every email we send includes an unsubscribe link. If you are a resident of the European Economic Area, the United Kingdom, California, or another region with data protection laws, you may have further rights, including the right to object to or restrict certain processing and to request a copy of your data. To exercise any of these rights, please write to us through our contact form, and we will respond within the time the applicable law allows.

International Visitors

Osda Life operates from the United States, and any information you provide is processed there. If you send personal information from the European Economic Area or the United Kingdom, it is processed in the United States. Google Analytics does not run for visitors in the European Economic Area, the United Kingdom, or Switzerland, so no analytics data from those regions is sent to Google.

Visitors in the European Economic Area and the United Kingdom

Osda Life is a sole proprietorship based in the United States, and the shop is directed to customers in the United States. We do not market to the European Economic Area or the United Kingdom, we do not price in euros or pounds, and the website and listings are in English only. On that basis we do not consider the business to fall within the scope of Article 27 of the GDPR or UK GDPR, which would otherwise ask a business outside those regions to appoint a local representative. Any personal data we process from these regions is occasional and limited to email addresses and contact form messages.

If you are in the European Economic Area or the United Kingdom, you may contact us about your personal data through our contact form, and you may lodge a complaint with your local data protection authority.

Children

This Website is not intended for anyone under the age of 18. We do not knowingly collect information from children, and we will delete it if we learn that we have.

Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or for legal and operational reasons. The date at the top of this page shows when it was last revised. Any change takes effect when it is posted here.

Contact Us

If you have a question about this policy or about how we handle your information, please reach us through our contact form.