Privacy Policy

Effective date: April 18, 2026

This Privacy Policy explains how Aperiodical Publishing Co. (“we,” “us,” or “our”) collects, uses, discloses, and protects information about you when you visit aperiodical.net or purchase products from us. We are based in Seattle, Washington, USA.

If you have questions, contact us at glenn@aperiodical.net.

1. Information We Collect

Information you provide

Order information: name, email address, shipping address, items purchased, and any inscription text you submit.
Payment information: processed directly by Stripe, our payment provider. We do not see, store, or have access to your full credit card number. We receive only a transaction reference, the amount paid, and the billing/shipping name and address you supply at checkout.
Communications: if you email us, we keep your message and our reply for as long as needed to respond and maintain a record.

Information collected automatically

Session cookies: we use a single PHP session cookie to remember your shopping cart contents while you browse. This cookie expires when you close your browser. We do not use advertising or tracking cookies.
Server logs: our web server records standard access logs (IP address, browser type, requested URL, timestamp) for security and debugging. These logs are retained for a limited period and are not used to build a profile about you.

What we don’t collect

We do not use Google Analytics, Meta Pixel, or other third-party tracking. We do not run advertising on this site. We do not sell, rent, or share your personal information with data brokers.

2. How We Use Information

To process and fulfill your orders, including shipping physical items and delivering digital downloads.
To send you transactional emails: order confirmations, download links, shipping notifications, and responses to your inquiries.
To calculate sales tax and shipping based on your delivery address.
To detect and prevent fraud, secure our systems, and comply with legal obligations.
To maintain accurate records of past transactions for accounting and tax purposes.

We do not send marketing emails. We do not use your information for automated decision-making or profiling that produces legal or similarly significant effects.

3. Legal Bases for Processing (GDPR / UK GDPR)

If you are in the European Economic Area, the United Kingdom, or Switzerland, our legal bases for processing your personal data are:

Performance of a contract — to fulfill orders you place.
Legal obligation — to comply with tax, accounting, and consumer-protection laws.
Legitimate interests — to operate, secure, and improve our website and to prevent fraud, balanced against your rights and freedoms.
Consent — where required by law (you may withdraw consent at any time).

4. Service Providers

We share information only with service providers that help us operate our business, and only to the extent needed for them to perform their service:

Stripe (payment processing) — handles all payment card data. See stripe.com/privacy.
Amazon Web Services (file storage) — stores digital product files we deliver to you. See aws.amazon.com/privacy.
Amazon Simple Email Service and Fastmail (email delivery) — send transactional emails to you.
Adobe Fonts (web fonts) — serves the typeface used on this site. See adobe.com/privacy.
Shipping carriers (USPS, UPS, etc.) — receive your name and shipping address to deliver physical products.

These providers are bound by their own privacy policies and contractual obligations. We do not sell your personal information to anyone.

5. Data Retention

Order records are retained for at least seven years to comply with U.S. tax and accounting requirements.
Email correspondence is retained as long as needed for business purposes.
Server access logs are typically retained for 30 to 90 days.
Session cookies expire when you close your browser.

6. International Transfers

We are based in the United States, and our service providers are primarily located in the United States. If you are outside the U.S., your information will be transferred to and processed in the U.S., where data-protection laws may differ from those in your country. We rely on appropriate safeguards (such as our service providers’ standard contractual clauses) where required by law.

7. Your Rights

Rights for everyone

Regardless of where you live, you may contact us at glenn@aperiodical.net to:

Request a copy of the personal information we hold about you.
Correct inaccurate information.
Ask us to delete your information (subject to record-keeping obligations).
Ask questions about this policy.

Rights for residents of the European Economic Area, United Kingdom, and Switzerland (GDPR)

You have the right to access, rectify, erase, restrict processing of, and port your personal data, and to object to processing based on our legitimate interests. You may lodge a complaint with your local data-protection authority.

Rights for California residents (CCPA / CPRA)

California residents have the right to:

Know what personal information we collect, use, disclose, and (if applicable) sell or share.
Request a copy of the specific pieces of personal information we have collected about you in the past 12 months.
Request deletion of your personal information.
Correct inaccurate personal information.
Limit our use of sensitive personal information (note: we do not collect sensitive personal information beyond what is necessary to fulfill your order).
Opt out of the sale or sharing of personal information — we do not sell or share your personal information, so this right does not require any action.
Not be discriminated against for exercising these rights.

You may exercise these rights by contacting us at glenn@aperiodical.net. We will verify your identity by requiring you to confirm details of a recent order, or by another reasonable method. You may designate an authorized agent to make a request on your behalf; we will require written authorization.

Rights for residents of other U.S. states

If you live in Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, or another state with a comprehensive consumer privacy law, you have rights similar to those above: the right to know, access, correct, delete, and port your personal information, and to opt out of targeted advertising, sales, and certain profiling. We do not engage in targeted advertising, sales of personal information, or significant profiling. To exercise your rights, contact us at glenn@aperiodical.net.

If we deny your request, you may appeal by replying to our denial. If your appeal is denied, you may contact your state attorney general.

8. Security

We use HTTPS to encrypt data in transit. Payment card data is handled exclusively by Stripe under PCI DSS compliance. Database access is restricted, and digital product files are served via expiring signed URLs. No system is perfectly secure; we cannot guarantee absolute security but follow industry-standard practices.

9. Children

This site is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, contact us and we will delete it.

10. Do Not Track and Global Privacy Control

We do not use cross-site tracking, so “Do Not Track” browser signals and Global Privacy Control (GPC) signals do not change our behavior — we already do not track you across sites or sell your information.

11. Cookies

This site uses one essential cookie: a PHP session cookie that remembers your shopping cart contents while you browse. It is set only after you add an item to your cart and expires when you close your browser. We do not use any non-essential, advertising, or analytics cookies. Because we do not use non-essential cookies, no cookie banner is required.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The “Effective date” at the top will reflect the most recent update. Material changes will be highlighted on the home page or via email if you have placed an order with us. Continued use of the site after changes constitutes acceptance.

13. Contact

Aperiodical Publishing Co.
Glenn Fleishman, Owner
Seattle, Washington, USA
Email: glenn@aperiodical.net

Aperiodical Publishing Co. was formerly known as Aperiodical LLC.