Privacy

LAST UPDATED 19 OCTOBER 2026

OIYI is run by Kami Akbari (Sabda) in Washington, DC. This page says plainly what is kept about you, where, and how to get it back or erase it. Questions: oiyiproject@gmail.com.

When you create an account

• Kept: your email address, a password (stored only as a one-way hash; nobody, including OIYI, can read it), and if you add them, a name, a picture and whether you want release notes.
• Where: Supabase, the account service behind OIYI, in the United States (us-east-1, Supabase/AWS).
• Pictures are private. Only you, signed in, can see your profile picture, through short-lived signed links. Deleting your account deletes your pictures with it. If the pictures cannot be deleted, the deletion stops and you can try again.
• Signing in with Google or Apple: Google tells OIYI your name, email address and profile picture, nothing else. Apple tells OIYI your email address and, if you allow it, your name. The service learns that you signed in to OIYI.
• Release notes: off unless you turn them on. On means one email when something new comes out, and a way out in every one.
• Saved addresses. If you save a delivery address in your account (up to 5: name, street, city, state, ZIP, phone), it is stored with your account in Supabase and used only to fill the delivery form for you. You can edit or delete each one, and deleting the account deletes them.

When you buy something

• Guest checkout is the default. You do not need an account. A guest gives a receipt email and, only when something ships, a US shipping address: name, street, city, state and ZIP, and a phone number if you choose to add one (it is optional, and only for the carrier to reach you about the delivery). OIYI sells to buyers in the United States only.
• Shipping prices come from Shippo. To show you what USPS charges, OIYI sends Shippo, a shipping service, your delivery ZIP (and the address if given) and the weight of the parcel. Shippo returns the rates; it is a processor working for OIYI. Read Shippo's privacy notice.
• Promo codes. A code you enter is checked on OIYI's server, and the order records which code was used and the discount it gave.
• Marketing email is opt-in. The box at checkout is unticked. What you choose is stored on the order, and OIYI sends no marketing email to a buyer who did not tick it. Receipts and shipping notices are not marketing. Every marketing email will carry an unsubscribe link and OIYI's postal address.
• Software is bought at Polar (polar.sh), which sells it on OIYI's behalf: you give Polar your email and card (processed by its card processor), and Polar keeps the order, the receipt, your licence key and its activations (the label of each computer, such as “TIRIICK on Studio Mac”, and a one-way code made from that computer's hardware id, never the id itself). The product checks the key with Polar when you activate it and, when online, now and then after that. OIYI sees the order and the key in Polar's dashboard.
• Payment for things that ship happens at PayPal, in PayPal's own windows or in PayPal-hosted card fields. OIYI never sees or stores card numbers or CVV. PayPal shares with OIYI the payer email (PayPal or Venmo), the payer country, for cards the last 4 digits, the card brand and the billing ZIP and country, and the capture id. What PayPal keeps is set out in PayPal's privacy statement.
• What OIYI stores for each order, in Supabase in the United States: the receipt email, the payer email, the payer country, the items, the amounts, the shipping charged, the shipping address, licence keys, a hashed download token, a hashed order nonce, the PayPal order and capture ids, the payment method, whether it was a test or a real order, refunds, and tracking once a parcel ships. Test (sandbox) orders are kept apart from real ones.
• Guest orders and accounts. A guest order joins an OIYI account only after that account's email is confirmed and matches the email used for the purchase.
• Emails. Receipts and shipping notices are sent by Resend from orders@oiyi.space. Account emails (confirmations, resets, sign-in and deletion codes) are sent through Resend from accounts@oiyi.space. Replies to either go to oiyiproject@gmail.com.
• The Kiiip tee is sold by OIYI in the same cart and shipped by Kami from Virginia. Its order is stored like any other: items with the size and print placement, your delivery address and the shipping option you chose.
• No sales tax is added at checkout.

On this site

• No advertising, no tracking pixels, and no analytics run by OIYI. OIYI sets no tracking cookies. The embedded players named below are the only third-party code that can load on a page, and each loads only on the page that carries it, and only after you press play.
• In your own browser (localStorage), on your device only: your cart ("oiyi.cart.v1": product ids and quantities, nothing else); the recent orders made on this device ("oiyi.orders.v1": the order reference, the order id and a private nonce that lets this browser reopen its own confirmation, the last 12); and, if you are signed in, a session token so you stay signed in. If you choose not to stay signed in, the session token lives in that tab only. Signing out removes the session token. Clearing your browser's site data removes all of it.
• The site is hosted by Netlify, which keeps standard server logs (IP address, time, page) for security.
• Embedded players. In the Sabda room, SoundCloud's player and YouTube's player load only when you press their play button; until then your browser contacts neither (the YouTube preview picture is a thumbnail fetched from YouTube). Once a player loads, that service sees your IP address and may set its own cookies under its own privacy terms. Spotify opens in a new tab and is never loaded here. Fonts are served from OIYI itself, so no font provider is contacted.
• Named: Shippo (shipping rates at checkout); Polar (software checkout, licence keys and downloads); PayPal (payment for things that ship); Supabase (accounts and orders); Resend (email delivery); Netlify (hosting and forms); r4.rominimal.club serves the live radio stream and the track title, only after you press Play, and while it plays the page asks for the title every 15 seconds; SoundCloud (players in Sabda and leela); YouTube (videos in Sabda); Spotify (opened in a new tab, never loaded here).
• Track ID and the forms. A track you send through Track ID, a booking request, and the email if you leave one, are stored by Netlify Forms and read by Sabda; write to oiyiproject@gmail.com to have it removed.
• The newsletter in the page footer is a Netlify form. Your email goes to Netlify Forms and is read by Sabda, and it is used to send releases, nights and store news. Every such email carries an unsubscribe link and OIYI's postal address; write in to be removed sooner.

Age

You must be 18 or older to buy; an account needs a person 13 or older. OIYI does not knowingly keep information about anyone younger; write in and it is erased.

How long

• Your account: until you delete it.
• Orders: kept. They are tax and accounting records, and they stay after an account is deleted. OIYI has not set an automatic deletion date and nothing deletes orders on a schedule. If you want an order record looked at, write in and a person handles it by hand.
• Server logs: kept by Netlify, for as long as Netlify's privacy policy says.
• Form submissions (Track ID, bookings, newsletter): kept in Netlify Forms until they are deleted by hand. Write in to have yours removed.
• Marketing preference and promo use: kept on the order record with the order.

What you can do

• See it: Account, then Settings, then Download. The server builds one file with your profile (email, dates, name, release-notes choice, picture path), every order tied to your account in any status (items, amounts, licence keys, address, tracking, refunds), and your Polar purchases when Polar is connected. It does not include PayPal's or Supabase's own internal logs.
• Change it: name, picture, email and password, in Settings.
• Erase it: Settings, then Delete account. OIYI asks for fresh proof first: your current password, or a one-time code emailed to the account (the only way for Google and Apple sign-ins). The code works once and expires within the hour. Your sign-in, profile and pictures are then deleted. Order records are kept for tax and accounting, with the link to your account removed and the account's last confirmed email recorded on them, so a future account with that confirmed email gets them back.
• Anything else, or a question about your data: oiyiproject@gmail.com. A person reads every message.

Never

OIYI does not sell, rent or trade your information, and does not share it with anyone beyond the services named on this page, which handle it only to do their part.

Changes

This page carries its date at the top; a real change is announced to account holders by email.

The terms cover your account and what you buy, and the help page covers shipping and returns.