Privacy

Last updated 28 September 2026

The short version. I only collect what's needed to send you your Seismo and keep in touch about it. There's no advertising, no tracking and no analytics, and I never sell or share your details for marketing. Email hello@seismo.rocks to see, fix or delete what I hold about you.

Who's responsible

Seismo is run by Keegan Costley in Aotearoa New Zealand. I'm responsible for your personal information under the Privacy Act 2020. Contact: hello@seismo.rocks.

What I collect

When you order:

Your name, email address and shipping address
What you ordered, the price, shipping, any discount code, and how you paid
An order reference and the payment service's transaction ID

I never see your card number or your crypto wallet. Card payments are handled entirely by Stripe, and crypto payments by NOWPayments. For a bank deposit, I see the name and reference that come with the transfer on my bank statement.

When you tap "Keep me posted": just your email address, and which product you're waiting for.

When you unlock the firmware page (/update): you enter the email your order was placed under. It's checked against orders, and a cookie remembers that you're allowed in, for up to a year. The cookie holds your email and a signature, nothing else.

When you browse: nothing about you. There are no analytics, ad or tracking scripts. The visitor counter is a joke that only counts inside your own browser. Like every web host, the server keeps short-lived technical logs (such as IP addresses) to keep the site running and secure.

What it's used for

Making and sending your order, and emailing you about it (confirmation, delays, tracking)
Answering your questions and sorting out any returns or refunds
Letting you into the firmware page
Keeping business and tax records, as New Zealand law requires
For "Keep me posted": emailing you when that product is available. That's all.

I won't use your details for anything else without asking, and I don't send marketing emails.

Who else handles it

Only the services that make the shop work, each only for its part:

Stripe: card payments (Stripe's privacy policy)
NOWPayments: crypto payments
Resend: sends the order emails
Neon: the database where orders are stored (servers in Singapore)
Railway: hosts the website (servers in Singapore)
NZ Post: your name and address, to deliver your parcel. For overseas orders, the postal service and customs in your country see them too.

Several of these are overseas companies, so your information may be stored or processed outside New Zealand. They're established services with their own privacy protections, and their privacy policies explain how they handle it. Your information is sent over encrypted connections (HTTPS). The order list is protected by a password that only I have.

How long it's kept

Orders: 7 years, because New Zealand tax law requires business records to be kept that long.
"Keep me posted" emails: until that product launches and you've been told, or until you ask me to remove yours.
Pre-orders that were never paid: deleted once they're clearly abandoned.

Your rights

You can ask to see the personal information I hold about you, and ask me to correct it. Email hello@seismo.rocks and I'll reply within 20 working days (usually much sooner). You can also ask me to delete it. I will, except for anything I have to keep for tax records.

If you're not happy with how I've handled your information, please tell me first. You can also complain to the Office of the Privacy Commissioner at privacy.org.nz.

If this policy changes in a way that matters, the date at the top will change, and if it affects an order you've placed, I'll email you.