This Privacy Policy describes how Absurditi LLC ("Absurditi," "we," "us," or "our") collects, uses, discloses, and protects personal information when you visit https://absurditimatter.com and related services (collectively, the "Services"). It is designed to meet requirements applicable in the United States, including California, and in the European Economic Area ("EEA"), United Kingdom, and Switzerland, where those laws apply to our processing.
Effective date: October 30, 2026. Last updated: October 30, 2026. By using the Services, you acknowledge this Policy. Where consent is required (for example, for certain cookies), we obtain it separately as described in our Cookie notice.
1. Who we are and how to contact us
Controller: Absurditi LLC is the data controller for personal information processed through the public website and customer accounts.
Contact: privacy@absurditimatter.com (privacy requests) or support@absurditimatter.com (account support).
Postal: Absurditi LLC, Attn: Privacy, 347 Boston Post Road, Orange, CT 06477, United States.
Data protection contact: privacy@absurditimatter.com. If you are in the EEA or UK and we are required to appoint a local representative, we will publish their contact details here.
2. Scope
This Policy applies to:
- Visitors to our public site, archive, and store experiences;
- Registered customer accounts (registration, login, orders when available);
- Individuals who communicate with us (email, support, or pre-order inquiries).
Internal employee authentication and administration are governed by separate workforce policies. Employee session data is not used for marketing or public-site analytics.
3. Personal information we collect
"Personal information" / "personal data" means information that identifies or can reasonably be linked to you. We collect the following categories:
3.1 Information you provide
- Account and identity: first and last name, email address, date of birth for age eligibility, and password (stored only as a secure one-way hash on our servers).
- Terms and marketing preferences: the version and timestamp of your Terms acceptance and—only if you choose it—your marketing email preference, its timestamp, version, and source. We do not store IP address as part of this customer consent record.
- Commerce (when enabled): shipping and billing contact details, order history, and customer service communications.
- Communications: content of messages you send us and associated metadata.
3.2 Information collected automatically
- Security and abuse prevention: we process IP address and limited request metadata at request time to apply rate limits and protect the Services. We do not use IP address to build customer profiles, infer location for marketing, or retain it as a customer account field.
- Security and session data: opaque session identifiers stored in HttpOnly cookies (see Cookie notice), authentication timestamps, and security logs.
- Local preferences: appearance and interface choices stored in your browser's local storage (not cookies).
3.3 Information from third parties
- Payment processors (e.g., Stripe, when checkout is enabled): payment confirmation and limited billing metadata—we do not store full payment card numbers on our servers.
- Delivery and fulfillment partners (when applicable): shipment status and carrier references.
3.4 Sensitive information
We do not ask you to provide sensitive personal information (such as government IDs, health data, or precise geolocation) through the Services. If you voluntarily include such information in a message to us, we will use it only to respond to your request and will delete it when no longer needed, unless law requires retention.
4. How we use personal information
We use personal information to:
- Provide, operate, and improve the Services;
- Create and secure customer accounts, authenticate users, and prevent fraud;
- Process and fulfill orders, returns, and related communications;
- Send transactional messages (verification, password reset, order updates);
- Send product releases and other marketing email only when you have opted in; you can withdraw that preference at any time.
- Respond to inquiries and provide customer support;
- Comply with law, enforce our Terms, and protect rights and safety;
- Analyze aggregated or de-identified usage to understand performance (we do not use third-party advertising cookies on the site today).
5. Legal bases (EEA, UK, and Switzerland)
Where GDPR or similar law applies, we rely on:
- Contract: processing necessary to provide the Services you request (accounts, purchases, support).
- Legitimate interests: security, fraud prevention, service improvement, and limited analytics, balanced against your rights.
- Legal obligation: tax, accounting, and regulatory requirements.
- Consent: where required (e.g., non-essential cookies or optional marketing when offered). You may withdraw consent at any time without affecting prior lawful processing.
6. How we disclose personal information
We may disclose personal information to:
- Service providers who process data on our instructions (hosting, email delivery, payment processing, analytics if enabled later)—bound by contract and permitted to use data only to serve us;
- Professional advisers (lawyers, accountants) under confidentiality;
- Authorities when required by law or to protect safety and rights;
- Business transfers in connection with a merger, acquisition, or asset sale, subject to this Policy or notice to you.
We do not sell personal information and we do not "share" it for cross-context behavioral advertising as defined under California law. If that changes, we will update this Policy and provide a clear opt-out mechanism before doing so.
7. International transfers
We are based in the United States. If you access the Services from outside the U.S., your information may be transferred to and processed in the U.S. and other countries that may not provide the same level of data protection as your home country. Where required, we use appropriate safeguards such as Standard Contractual Clauses approved by the European Commission (and the UK Addendum where applicable) with our processors, and we assess transfer risks as required by law.
8. Retention
We retain personal information only as long as necessary for the purposes described in this Policy, including:
- Account data: for the life of your account and a reasonable period after closure for backup, dispute resolution, and legal compliance;
- Order and tax records: as required by applicable commercial and tax law (often seven years or longer where mandated);
- Security logs: typically up to twelve months, unless needed for an investigation;
- Marketing preferences: until you opt out or we discontinue the program; we may keep a minimal suppression record afterward to honor your opt-out.
We may retain de-identified or aggregated information without limit.
9. Security
We use administrative, technical, and organizational measures designed to protect personal information, including encryption in transit (TLS), hashed credentials, HttpOnly session cookies, access controls for internal systems, and monitoring. No method of transmission or storage is completely secure; you use the Services at your own risk and should protect your account credentials.
10. Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or object to certain processing, and to data portability. You may also have the right to lodge a complaint with a supervisory authority (EEA/UK) or a regulator in your state.
To stop marketing email, use the unsubscribe control included in a marketing message or contact privacy@absurditimatter.com. Transactional account and order messages are not marketing messages.
10.1 EEA, UK, and Switzerland
To exercise GDPR/UK GDPR rights, email privacy@absurditimatter.com. We may need to verify your identity. We respond within one month, or longer where permitted with notice.
10.2 California (CCPA/CPRA and similar state laws)
California residents may request:
- Know/access: categories and specific pieces of personal information we collected, sources, purposes, and disclosures;
- Delete: personal information we collected from you, subject to legal exceptions;
- Correct: inaccurate personal information;
- Opt out of sale/share: not applicable today because we do not sell or share for cross-context behavioral advertising;
- Limit use of sensitive personal information: not applicable to data we intentionally collect today.
Submit requests to privacy@absurditimatter.com or the postal address above. We verify requests as required by law. You may use an authorized agent with proof of authorization. We will not discriminate against you for exercising privacy rights.
Shine the Light: California residents may request information about disclosure of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing.
10.3 Other U.S. states
Residents of Colorado, Connecticut, Virginia, Utah, and other states with comprehensive privacy laws may have similar rights. Contact privacy@absurditimatter.com and we will honor applicable requirements.
11. Automated decision-making
We do not make decisions based solely on automated processing that produce legal or similarly significant effects concerning you. Internal fraud and security systems may flag activity for human review.
12. Children
The Services and customer accounts are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 provided us data, contact us and we will delete it. Minors who meet the registration age may use the Services only as permitted by applicable law and our Terms.
13. Third-party links
The Services may link to third-party sites or services. Their privacy practices are governed by their own policies, not this one.
14. Changes
We may update this Policy from time to time. We will post the revised version on this page and update the effective date. For material changes, we will provide additional notice (for example, email or a prominent site notice) where required by law.