Privacy policy.

• Order data: name, email, ship-to address, order contents, payment method type (not crypto wallet addresses beyond what is necessary to verify payment).
• Communication data: any email or message you send to the correspondence desk.
• Site usage: minimal server logs (IP, timestamp, user-agent) retained for 30 days for fraud and abuse prevention.
• Local storage: your basket contents and researcher-gate acknowledgement are stored in your browser’s local storage. These never leave your device.

• We do not run third-party advertising trackers or fingerprinting pixels.
• We do not use Google Analytics, Meta Pixel, or similar consumer analytics.
• We do not record, store, or share the contents of emails with third parties.
• We do not on-sell any customer data to any third party, under any circumstance.

We use Plausible Analytics for aggregate page-view counts only. Plausible is a GDPR-compliant, cookieless analytics service hosted in the EU. It does not set cookies, does not collect personal data, does not track you across sites, and does not store your IP address. Aggregate data only — no individual user profile is ever created.

• Fulfil your order. Ship-to address and email are used to dispatch material and provide tracking.
• Payment settlement. Payment records are retained as required by accounting and anti-fraud obligations.
• Fraud prevention. Server logs and order-correlation help us prevent and investigate fraudulent orders.
• Legal compliance. Where we are obliged by law to retain or disclose information, we do so to the minimum extent required.

• Order records: 7 years (accounting-minimum retention).
• Correspondence records: 2 years from last message, then deleted.
• Server logs: 30 days rolling, then rotated and destroyed.

If you are in the European Economic Area, the United Kingdom, or a jurisdiction with a substantially similar regime, you have the right to:

• access the data we hold about you;
• correct inaccurate data;
• request deletion of data we are not obliged to retain;
• object to processing for marketing (we do not market outbound);
• port your data to another provider.

Send a request to the correspondence desk — identity verification may be required.

• Email: our email is processed through a standard mail transport agent for delivery. Contents are not shared with third parties.
• Payments: crypto payments are verified on public blockchain infrastructure; we do not use a centralised custodial processor for crypto.
• Couriers: ship-to details are shared with the chosen courier solely for dispatch purposes.
• Hosting: Hetzner Cloud (Germany / Finland). See Hetzner’s data-protection documentation for their role as processor.

Omega Grade does not use tracking cookies. We use only the local-storage mechanism described in section 1 (basket and researcher-gate acknowledgement). No third-party cookie is set by this Site.

Material updates to this policy will be reflected in the effective date at the top of this page and announced on the Site for at least 30 days before taking effect.

Privacy-related questions should be directed to the correspondence desk — contact.