Privacy Policy

This Privacy Policy describes how H2ONU (operated by Ray Culver, an individual proprietor, “we,” “us,” or “H2ONU”) collects, uses, and shares information when you visit h2onu.com, purchase from our shop, or subscribe to our transmissions.

We are a small independent publisher and we treat your data with the same care we'd want for our own. We do not sell your personal information.

Who we are

H2ONU is a novel and accompanying merchandise published by Ray Culver. For privacy questions you can reach us at support@h2onu.com.

What we collect

Information you give us

• Account & checkout: name, email, shipping address, and order history when you buy something or create an account.
• Payment: card details are sent directly to Stripe and never touch our servers. We receive only a token, the last four digits, and the brand for reconciliation.
• Email signups: your email address when you join the waitlist or the newsletter.
• Customer support: the contents of messages you send us.

Information collected automatically

• Device & usage data: IP address, browser type, pages visited, referrer, approximate timing of actions. Used to measure traffic and detect abuse.
• Cookies: a small set of first-party cookies for login session, cart contents, and analytics. See our Cookie Policy for the full list.
• Bot protection: when you submit a form (reserve, newsletter, sign-in, account), we run a Cloudflare Turnstile check to confirm you're a real person and keep bots out. Turnstile may process device and browser signals (including your IP address) to make that determination. It runs silently in the background and does not track you across sites. See Cloudflare's Turnstile Privacy Addendum.

How we use it

• Process orders, ship products, handle returns and refunds.
• Send transactional email (order confirmations, shipping updates, password resets) and — if you opted in — the H2ONU transmission drip.
• Provide customer support and respond to inquiries.
• Measure aggregate site traffic and improve the product.
• Prevent fraud and comply with our legal obligations (tax, accounting, subpoenas).

Who we share it with

We share only the data each service needs to do its job. None of these providers receive your data for their own marketing.

• Stripe — payment processing. Receives card details and order amount. stripe.com/privacy
• Mailgun — transactional and newsletter email delivery. Receives your email address and message contents. mailgun.com/privacy-policy
• Printful — print-on-demand apparel fulfillment. Receives shipping name, address, item details. printful.com/policies/privacy
• IngramSpark / Lulu — print-on-demand book fulfillment. Receives shipping name, address, item details.
• Vercel & DigitalOcean — hosting infrastructure. Process logs (including IP addresses) for security and operations.
• Cloudflare — DNS, DDoS mitigation, and Turnstile bot protection on our forms. Sees request metadata; for Turnstile, processes device/browser signals to tell humans from bots. See Cloudflare's Turnstile Privacy Addendum.

We will share information when legally required (lawful subpoena, court order, regulatory demand) and will tell you when we are permitted to do so.

How long we keep it

• Order records: seven (7) years from the order date, to comply with U.S. tax recordkeeping.
• Account & email-signup data: as long as your account is active. We'll delete inactive accounts after three (3) years of zero activity if you ask, or sooner on request.
• Support correspondence: three (3) years.
• Server logs: 90 days for operational purposes.

Your rights

Depending on where you live (California, EU, UK, etc.) you may have the right to:

• Access a copy of the data we hold about you.
• Correct inaccurate data.
• Delete your data (subject to the retention periods above).
• Object to or restrict certain processing.
• Withdraw consent for marketing email at any time.
• Lodge a complaint with your local data-protection authority if you're unhappy with our response.

To exercise any of these rights, email support@h2onu.com from the address on file. We'll respond within 30 days.

Children

H2ONU is not directed at children under 13 and we do not knowingly collect personal information from anyone under 13. If you believe a minor has provided us with data, email us and we'll delete it.

International transfers

Our servers and most of our service providers are based in the United States. If you're located outside the U.S., your data will be transferred to and processed in the U.S. We rely on Standard Contractual Clauses for transfers from the EU/UK where applicable.

Changes to this policy

We'll post any material changes to this page and update the “Last updated” date. For substantial changes we'll also email subscribed users.

Contact

Privacy questions: support@h2onu.com. General contact: /contact.