Privacy
Policy

Section 01Who we are

Ookii Pup Studio is operated by OokiiPup LLC, a limited liability company organised under the laws of the State of California, United States. In this policy, "we", "us" and "our" mean OokiiPup LLC. "You" means anyone visiting ookiipup.com or using a Studio tool.

OokiiPup LLC is the controller of the limited personal information described here. You can reach us at info@ookiipup.com.

Section 02What this policy covers

This policy applies to the website at https://ookiipup.com/ and to every tool published under https://ookiipup.com/studio/.

It does not cover any other website you reach by following a link from ours. Once you leave, that site's own policy applies.

Section 03What we collect

We do not operate accounts, mailing lists or user profiles. We do not ask for your name, your email address or any other identifying detail in order to use a tool. This section is also our notice at collection for California residents.

We collect nothing else. We do not collect sensitive personal information as that term is defined under California law. We do not use any of the above for profiling, for automated decision making, or for advertising of any kind.

We do not collect the files you open in a Studio tool. We could not, because those files are never transmitted anywhere.

Section 04How each tool handles your data

Every tool listed below, with the single exception noted, does all of its work inside your browser using the processing power of your own device. The file or text you provide is read into browser memory, worked on, and discarded when you close the tab. It is never uploaded, never copied to a server and never seen by us.

This is checkable rather than something you have to take on trust. If you open your browser's developer tools and watch the network panel while using any tool other than Ookii Fetch, you will not see your content go anywhere. You will still see the requests that load the page itself, which are the page, its stylesheet, its script and its fonts, all served from ookiipup.com.

Section 05Ookii Fetch, the one exception

Ookii Fetch follows a shortened or wrapped link and tells you where it actually goes. This cannot be done inside your browser, so the tool sends the URL you paste to a small server function we run. This is the only place in the Studio where anything you type leaves your device.

What happens to the URL

• It is received by our server function, used to follow the redirect chain, and then discarded when the request finishes.
• We do not write submitted URLs to any database, file or store that we operate. We keep no record of what anyone has unwrapped, and we cannot produce a history of it.
• Our hosting provider operates its own platform logging over which we have limited control, in the same way it does for every request to every site it hosts. We do not deliberately place submitted URLs into it, and we do not read platform logs to see what has been unwrapped. We cannot promise a URL has never appeared in a diagnostic record on our host's infrastructure, so we will not make that promise.
• The content of the destination page is never rendered, stored or shown to you. Only the addresses in the chain are returned.

What the destination site sees

When our server follows the link, the request comes from our host's infrastructure rather than from you. The destination site therefore sees our server rather than your browser. That is a side effect of how the tool works. It is not an anonymity feature and you should not rely on it as one. If you need to visit a link without revealing your address, use a tool built for that purpose.

Rate limiting

To keep the tool available and to stop it being used for automated scanning, we limit how many requests can come from one network address in a given period. Your IP address is processed for that purpose alone, for no longer than the limit window requires. We do not build a profile from it and we do not use it to identify you.

Section 06Data stored on your device

Some tools save your settings so you do not have to configure them again on your next visit. Ookii Mark, for example, can save brand kits and recent jobs.

This uses your browser's local storage. It stays on your device. It is not synchronised to us, it is not readable by us, and it is not transmitted anywhere. Every tool that stores anything says so on its own page and offers a way to clear it. You can also remove it yourself at any time by clearing site data for ookiipup.com in your browser settings.

Why there is no consent prompt for this

Rules such as the European ePrivacy Directive cover storing information on your device generally rather than cookies specifically, so local storage is in scope. Those rules exempt storage that is strictly necessary to provide a service you have asked for. The only things we store are the settings you yourself created inside a tool, kept so that the tool works the way you asked it to. Nothing stored is used for analytics, advertising, measurement or identification, and nothing stored is ever sent to us or to anyone else. On that basis we do not ask for consent to store it. If we ever store anything outside that description, we will ask first.

Section 07Hosting and server logs

This site is hosted by Netlify. Like every web host, Netlify records technical information about requests made to its servers. This typically includes your IP address, the page requested, the time of the request, and your browser's user agent string.

These logs are generated by the act of loading a web page. They exist for every website you visit, including this one, and they are created before any of our code runs. We do not use them to build profiles, we do not connect them to anything you do inside a tool, and we do not sell or share them.

Netlify processes this information as our service provider under its own privacy terms, which you can read at https://www.netlify.com/privacy/.

Section 08Analytics

We use Netlify Web Analytics to see how many people visit the site and which tools they use. It is enabled for ookiipup.com as a whole, including every page under https://ookiipup.com/studio/.

It works differently from the analytics most sites run. There is no script. Nothing is added to any page, nothing is downloaded into your browser, and no code runs on your device to record your visit. The figures are read from the server logs already described in section 7, which our host creates for every request whether we look at them or not. Enabling this did not start a new collection of information about you. It gave us a view of one that already existed.

What it shows us, all of it counted in aggregate:

• Total pageviews, and an approximate visitor count based on distinct IP addresses
• Which pages were requested most, which is how we tell which tools people actually use
• The country or region a request came from, derived from the IP address
• Which websites linked to us
• Which requests returned a not found error, so we can fix broken links

What it does not show us. Not who you are. Not anything you did inside a tool, because nothing inside a tool is ever transmitted. Not any file you opened. Not a path from one page to the next, because no identifier is assigned to you to join those requests together. Nothing follows you to another website, and nothing recognises you when you come back.

Netlify processes this as our service provider, in the United States, under the terms described in section 12. Figures are held on a rolling 30 day basis and older data is not retained. You can read how the service works at https://docs.netlify.com/manage/monitoring/web-analytics/how-web-analytics-works/ and Netlify's privacy terms at https://www.netlify.com/privacy/.

Because no cookie is set and nothing is written to your device, there is no banner here and nothing for you to accept or refuse. We should be straight with you about the other side of that: since there is no script involved, blocking scripts, using an ad blocker or sending a Do Not Track signal will not remove your request from the count. The only information involved is the log entry your browser creates by asking for the page, and the only way to avoid that is not to load the page. We would rather say so plainly than let you assume otherwise.

If we ever change provider or add anything that runs in your browser, we will name it here and update the date at the top of this page before the change goes live.

Section 09Cookies

We set no cookies of our own. Not for analytics, not for advertising, not for preferences. The analytics described in section 8 are read from server logs and set nothing on your device. There is nothing on this site that tracks you from one visit to the next or from one website to another.

Our host may set a cookie of its own in limited circumstances, such as when a platform level feature is in use. We do not run split testing, personalisation or any similar feature, so in ordinary use you should see none. Any such cookie would be strictly operational and would carry no advertising or profiling function.

If you click through to contribute, Stripe may set cookies on its own payment page. That happens on Stripe's domain rather than ours, only after you have chosen to go there, and is described in section 10.

Because nothing here requires consent, there is no cookie banner and nothing for you to accept or refuse. Local storage, described in section 6, is a separate mechanism and is covered there.

Section 10Third party services

Studio tool pages load no third party code. Every library and typeface a tool needs is served from our own domain rather than from an external content delivery network. There are no embedded videos, no social widgets, no advertising tags and no tracking pixels.

The service providers we do rely on are:

• Netlify, for hosting the site, running the Ookii Fetch function, and providing the server side analytics described in section 8. Netlify acts as our processor and service provider.
• GitHub, where the source code lives. GitHub receives nothing about you as a visitor.
• Stripe, for handling contributions made through the About and Support page. Stripe acts as an independent controller of payment data as well as our service provider.

We do not disclose personal information to anyone for money or for anything else of value, and we do not disclose it for advertising purposes.

Contributions

Supporting the Studio is entirely optional and no tool requires it. The contribution buttons on https://ookiipup.com/about/ are ordinary links. No Stripe script, widget or embedded checkout runs on any page of this site, so nothing about Stripe touches your browser unless you click through by choice.

When you click one you leave ookiipup.com and land on a payment page hosted by Stripe. From that point Stripe's own privacy policy governs what happens, and it may set cookies and collect information on its own domain that we neither control nor see. You can read it at https://stripe.com/privacy.

We never see your full card number, expiry date or security code. Those go to Stripe and stay with Stripe. What we do receive, and we would rather tell you than let you assume otherwise, is the record Stripe shows us for a completed contribution: your name, the email address you gave, the amount, the card brand and its last four digits, and the country the card was issued in. We use that to recognise the contribution, to issue a refund if you ask for one, and to keep our books. We do not add it to a mailing list, and there is no mailing list to add it to.

If you contribute and later want your details removed from our records, write to info@ookiipup.com. We will remove what we are not required to keep for tax purposes and tell you plainly what is left.

Section 11How long anything is kept

• Server logs. Held by Netlify under its own retention schedule rather than ours. We do not extend it, and we do not copy logs into any store of our own.
• Analytics figures. Derived from those logs and shown to us on a rolling 30 day basis. Anything older drops out and is not available to us. We do not export or archive it.
• URLs submitted to Ookii Fetch. Discarded when the request finishes. Not retained by us. See section 5 for the one qualification.
• Rate limiting information. Processed only for as long as the limit window is open.
• Contribution records. Held by Stripe under its own schedule. Our own copy of the transaction record is kept for as long as United States and California tax and accounting rules require us to keep it, which is currently seven years from the end of the relevant tax year, and then deleted.
• Email you send us. Kept in the info@ookiipup.com mailbox for up to 24 months so we can follow up on a conversation, then deleted. Ask us to delete a message sooner and we will.
• Anything a tool saved on your device. Kept until you clear it. We have no ability to reach it or remove it.

Where we are required to keep something longer to comply with a legal obligation, to resolve a dispute or to enforce our Terms, we will keep it only for as long as that requires.

Section 12Where your information is processed

OokiiPup LLC is based in California, and this site runs on infrastructure operated by providers in the United States. If you are in the European Economic Area, the United Kingdom, Switzerland or anywhere else with similar rules, the limited information described in section 3 is transferred to and processed in the United States.

Where such a transfer requires a safeguard, we rely on the European Commission's Standard Contractual Clauses and the United Kingdom's International Data Transfer Addendum, which form part of our agreements with the providers named in section 10. You can ask us for more detail about this at any time.

The practical position is that what crosses a border is a page request and, if you use Ookii Fetch, one URL. Nothing you process in a Studio tool is transferred anywhere, because it never leaves your device in the first place.

Section 13Children and minors

The Studio is not directed at children and is not designed for use by anyone under 13. We do not knowingly collect personal information from children. Since we operate no accounts and collect no identifying information from anyone, there is in practice nothing of a child's for us to hold. If you believe otherwise, write to us and we will act on it.

We do not sell or share the personal information of anyone, and we have actual knowledge of no sale or sharing of the personal information of consumers under 16 years of age.

California residents under 18

If you are a California resident under 18 and you have posted content on this site, California Business and Professions Code section 22581 gives you the right to request its removal. Write to info@ookiipup.com describing the content and where it appears, and we will remove it or make it invisible to other users. In practice this site offers no way to post content publicly, so there is normally nothing to remove. The right is stated here so you know it exists.

Section 14Your rights

Depending on where you live, you may have rights over personal information a company holds about you. These can include the right to know what is held, to obtain a copy, to have it corrected or erased, to restrict or object to certain processing, to receive it in a portable format, and to withdraw consent where consent was the basis for processing. If you are in the European Economic Area or the United Kingdom these come from the GDPR. If you are in California see section 15. Other places have equivalents.

We can only act on data we actually hold. Because we operate no accounts and store no user records, in almost every case the honest answer to a request will be that we hold nothing about you. The exceptions are server logs held by our host, the record of any contribution you made through Stripe, and any email you have sent us. Write to info@ookiipup.com and we will do what we can.

We aim to respond to any request within 30 days. If we need longer we will tell you why.

Our lawful basis for the limited processing we do is legitimate interest in operating, securing and maintaining the site. You can object to processing on that basis at any time.

If you are in the European Economic Area or the United Kingdom, you also have the right to complain to your national supervisory authority. We would rather you told us first, but that right does not depend on doing so.

Section 15Notice for California residents

This section supplements the rest of this policy and applies to California residents under the California Consumer Privacy Act as amended by the California Privacy Rights Act.

What we collect and why

The categories of personal information we collect, the sources, the business purposes and the retention periods are set out in the table in section 3 and in section 11. The sources are you and your browser directly, our hosting provider acting on our behalf, and Stripe where you have chosen to make a contribution.

Sale and sharing

We have never sold personal information and we have never shared it for cross context behavioural advertising. We do not do so now and we have no plans to. Because of this there is no "Do Not Sell or Share My Personal Information" link on this site, as there is nothing for such a link to switch off.

Your rights

• Right to know. Ask what categories and specific pieces of personal information we have collected, the sources, the purposes, and who we disclosed it to.
• Right to delete. Ask us to delete personal information we collected from you.
• Right to correct. Ask us to correct inaccurate personal information.
• Right to limit use of sensitive personal information. We collect none, so there is nothing to limit.
• Right to opt out of sale or sharing. We do neither, so there is nothing to opt out of.
• Right to non discrimination. We will never treat you differently for exercising any of these rights. The tools are free to everyone and stay that way.

How to make a request

Write to info@ookiipup.com and say what you want. We will confirm receipt within 10 business days and respond within 45 days, extending by a further 45 days if the request is complex, in which case we will tell you before the first period runs out.

Because we hold no account records, we usually cannot verify that a request relates to you specifically. Where we cannot verify a request we will say so plainly rather than guess, and we will not disclose information to someone who may not be you. An authorised agent may submit a request on your behalf with written permission from you.

Section 16Security and breach notification

The site is served over HTTPS. Tools are built so that sensitive material stays on your device by design rather than by policy, which removes most of the ways it could be exposed.

No system is perfectly secure, and we do not claim otherwise. If we become aware of a breach affecting personal information we hold, we will investigate it, act to contain it, and notify affected people and any regulator we are required to notify within the timeframes the law sets, which under the GDPR is 72 hours from becoming aware where the breach is notifiable. We will describe what happened plainly rather than minimise it.

If you find a security issue, please tell us at info@ookiipup.com rather than posting it publicly. We will not pursue anyone who reports a genuine issue in good faith and does not access or alter other people's data.

Section 17Changes to this policy

We may update this policy as tools change or as new ones ship. The effective date at the top of the page always reflects the current version. If a change materially affects how your information is handled, we will make it obvious rather than quietly editing a line.

Section 18Contact

Questions about this policy, requests about your data, and security reports all go to info@ookiipup.com.

OokiiPup LLC, California, United States.