Privacy Policy.
Last updated September 16, 2026.
The short version
I collect only what I need to reply to you and to understand how the site is used. I don't sell your information, and I don't share it with anyone except the services that run this site and my business.
What I collect
What you send me. When you fill out the contact form, I receive your name, email address, business name, who referred you, and your message. If you email me directly, I keep that correspondence.
How you use the site. The site uses Google Analytics, which sets cookies and records the pages you visit, roughly where you're visiting from, the device and browser you're using, and how you arrived. I see this in aggregate. Google may process your IP address to produce it.
Fonts. The site loads its typefaces from Adobe Fonts and Google Fonts. When your browser requests a font, those services receive your IP address and standard request details, the way any web request does.
Hosting. The site is hosted on Netlify, which keeps standard server logs and processes form submissions on my behalf.
How I use it
- To reply to your inquiry and, if we work together, to prepare a proposal and run the project.
- To keep records of my business, including client correspondence and agreements.
- To understand which pages people read and how they find the site, so I can improve it.
- To keep the site secure and working.
I don't use your information for automated decisions, and I don't send marketing email unless you've asked for it.
Who handles it
These services process information on my behalf, each under its own privacy policy:
- Netlify, for hosting and form submissions.
- Google, for Google Analytics and Google Fonts.
- Adobe, for Adobe Fonts.
- My email provider, for correspondence.
I don't sell personal information, and I don't share it with advertisers. I'll disclose it if the law requires me to, or to protect my rights or someone's safety.
Cookies
Google Analytics sets cookies to tell repeat visits from new ones. You can block or clear cookies in your browser settings, and you can opt out of Google Analytics across all sites with Google's browser add-on. The site works fine without cookies.
How long I keep it
I keep inquiries and correspondence for as long as I need them to run the business and meet my legal and accounting obligations, then delete them. Analytics data is retained by Google for the period set in my account, currently 14 months, and is aggregate.
Your choices
You can ask me what personal information I hold about you, ask me to correct it, or ask me to delete it. Email tori@ossarastudio.com and I'll respond within 30 days. If you're in a place whose privacy laws give you additional rights, such as California or the European Union, those rights apply and I'll honour them.
I don't respond to browser Do Not Track signals, because there's no agreed standard for them, but the cookie choices above always apply.
Children
This site is for businesses and the people who run them. It isn't directed at children under 13, and I don't knowingly collect information from them. If you think a child has sent me something, email me and I'll delete it.
Security
The site is served over HTTPS, and form submissions travel encrypted. No system is perfectly secure, so I can't guarantee the safety of information sent over the internet, but I take reasonable steps to protect what I hold.
Changes to this policy
I may update this policy as the site or my tools change. The date at the top tells you when it last changed. Significant changes will be noted here.
Contact
Questions about privacy can go to tori@ossarastudio.com.