Privacy Policy
Last Updated: June 14, 2026
About This Policy
This Privacy Policy explains how Spacemance collects, uses, discloses, and protects your personal information when you visit spacemance.com or buy a Spacemance product.
It is written to comply with the European Union General Data Protection Regulation (GDPR) and the United Kingdom GDPR. It also follows the Australian Privacy Act 1988 and Australian Privacy Principles, and the California Consumer Privacy Act as amended by the CPRA.
Where local privacy laws grant you additional rights, those rights apply in addition to this policy.
Who Is the Data Controller
Spacemance is operated by Integrate Your Marketing, PO Box 902, Paddington NSW 2021, Australia. Starbound Press is our publishing imprint.
For all privacy enquiries, including exercising the rights described below, contact us at hello@spacemance.com.
We have not appointed a Data Protection Officer because our processing does not meet the GDPR Art. 37 thresholds (we do not carry out large scale systematic monitoring or large scale processing of special category data).
EU and UK Representative
Spacemance has no establishment in the European Union or the United Kingdom.
When you buy a product, Lemon Squeezy acts as the merchant of record and is the controller for that purchase. It carries the associated European obligations for the transaction (see "Who Receives Your Personal Information" below).
The personal data we process directly is limited to website server logs, optional cookieless analytics that runs only if you consent, and our mailing list once it is offered.
We keep our obligation to designate a representative under GDPR Art. 27 and UK GDPR Art. 27 under review, and will appoint one where it is required for the personal data we process directly. In the meantime, you can raise any EU or UK data protection matter with us, or exercise any of the rights described below, by emailing hello@spacemance.com.
You retain the right to complain to your local supervisory authority (see "Right to Lodge a Complaint").
Personal Information We Collect
We collect the following categories of personal information, only for the purposes described in the next section:
| Category | What it includes | When we collect it |
|---|---|---|
| Order data | Name, email address, billing address, country, payment confirmation token, transaction reference | When you purchase a Spacemance product |
| Mailing list data | Email address, country (for tax and segmentation) | When you subscribe to our mailing list (if and when this is offered) |
| Customer support data | Name, email address, content of your message | When you contact us via hello@spacemance.com or the contact form |
| Server log data | IP address, browser type and version, referring URL, pages visited, request timestamp | Automatically, when you load any page on spacemance.com |
Some order data (your name and email address) is provided to us indirectly by Lemon Squeezy, our merchant of record, after you complete a purchase (GDPR Art. 14). We receive it so that we can deliver your book and handle support and refunds.
We never receive your card details.
We do not collect special category data (Art. 9 GDPR / sensitive information under APP 3.3) and we do not knowingly collect personal information from anyone under 16 years of age. If you believe a child has provided personal information to us, contact hello@spacemance.com and we will delete it.
How We Use Your Personal Information
For each processing activity we identify the purpose and the lawful basis we rely on under GDPR Art. 6.
| Processing activity | Purpose | Lawful basis (GDPR Art. 6) |
|---|---|---|
| Selling and delivering ebooks | Fulfil your order, send purchase confirmation, provide download access, respond to refund requests, comply with consumer law obligations | Performance of a contract (Art. 6(1)(b)); compliance with a legal obligation (Art. 6(1)(c)) for tax and consumer guarantees |
| Mailing list (when offered) | Send release announcements, bonus content, and behind the scenes updates about Spacemance titles | Your consent (Art. 6(1)(a)): separate, granular, freely given |
| Replying to customer support | Answer your enquiry, resolve a complaint | Performance of a contract (Art. 6(1)(b)) for customers, or our legitimate interest in responding to enquiries (Art. 6(1)(f)) for people who are not customers |
| Operating the website | Deliver pages, prevent abuse and fraud, maintain security, monitor performance | Our legitimate interest in running a functional and secure website (Art. 6(1)(f)) |
| Measuring website usage (optional) | Understand aggregate site usage so we can improve the site, using cookieless analytics that runs only if you opt in | Your consent (Art. 6(1)(a)) |
Providing order data is required to enter into a purchase contract.
Subscribing to the mailing list is entirely optional and you can decline without affecting your ability to buy our products.
Withdrawing consent for marketing emails does not affect any processing carried out before you withdrew it.
We do not engage in profiling or automated decision making within the meaning of GDPR Art. 22.
Cookies and Similar Storage
By default this website uses only strictly necessary and functional first party storage. We do not load advertising cookies, social plugins, cross site tracking pixels, or any third party advertising or profiling tools.
The only optional, nonessential processing we offer is privacy friendly cookieless analytics, described below, which never runs unless you opt in.
Specifically:
- The fonts used on this site are self hosted from our origin server. They do not call out to Google Fonts or any other third party CDN.
- The Lemon Squeezy checkout overlay script is not loaded on the marketing pages. It runs only on the Lemon Squeezy checkout page itself, after you click "Buy Ebook Direct" and Lemon Squeezy presents its own privacy notice.
- The only nonessential processing we offer is cookieless analytics via Vercel Web Analytics. It is served first party from our own domain, sets no cookies, and builds no cross site or cross device profile of you. A consent banner appears on your first visit with all nonessential categories switched off by default; this analytics loads only if you switch on the "Analytics" category, and never before. At the time of this update it is dormant and collects no data. If we switch it on, it will still run only for visitors who have opted in, and you can withdraw consent at any time using the Cookie preferences link in the footer.
- Your cookie choice is stored in first party local storage on your own device so we can honour it. You can change or withdraw it at any time using the Cookie preferences link in the site footer.
Before you make a cookie choice we set only strictly necessary and functional first party storage. This means the record of your consent choice, and small cookies that remember or suggest your language and region so the site can show the right localisation.
These exist only to deliver functionality you use, and none of them track you across other sites or build an advertising profile. We do not place any advertising, cross site, or analytics cookies unless and until you opt in.
In particular, the country code in sm_geo_country is derived once from your connection's network region, never from a stored IP address. It is never combined with your name, email, or any other identifier, is never shared with anyone, and exists solely so the site can offer, never force, a language that might suit you. If you dismiss the language suggestion, that choice is remembered (in sm_lang_banner_dismissed) and the suggestion is not shown again for up to 180 days.
The complete list of first party storage this site can set is:
| Name | Purpose | Type and duration |
|---|---|---|
| spacemance_consent | Remembers your cookie choice (consent receipt) | localStorage; until you change it, or 365 days |
| sm_geo_country | Coarse country code from your connection's region, used only to suggest a language | Cookie; up to 1 year |
| sm_suggest_locale | The language we would suggest for your region (a suggestion only, never a redirect) | Cookie; up to 1 year |
| sm_locale | The language you actively chose | Cookie; up to 1 year |
| sm_lang_banner_dismissed | Remembers that you dismissed the banner suggesting a language | Cookie; up to 180 days |
| sm_mt_cache | Caches machine translated text for the current tab so pages render faster | sessionStorage; cleared when you close the tab |
| Vercel Web Analytics | Cookieless, privacy focused usage measurement | No cookie; loads only if you opt in to Analytics |
Machine translation. When you select a language other than English, the English text on the page is sent to a third party machine translation provider (currently MyMemory by Translated) through our own server so it can be translated. Only page content is sent, never your name, email, or any account identifier.
Because the request is made by our server rather than your browser, the provider does not receive your IP address. English pages, and our legal pages, are never sent for translation.
Who Receives Your Personal Information
We share your personal information only with the following recipients, each bound by a written agreement governing its role. Processors such as Vercel (and the email service provider once added) operate under a data processing agreement.
Lemon Squeezy operates under controller to controller terms, acting as an independent controller and merchant of record for the purchase.
| Recipient | Role | Country | What they receive | Why |
|---|---|---|---|---|
| Lemon Squeezy (Lemon Squeezy LLC) | Merchant of record and payment processor; data controller for the checkout transaction | United States | Order data | They process the purchase, charge the card, calculate and remit applicable taxes, send the receipt, and provide the download. Spacemance never receives your card number. See lemonsqueezy.com/privacy. |
| Vercel (Vercel Inc.) | Hosting and CDN provider; data processor | United States | Server log data; cookieless analytics events (only if you opt in) | Delivers the website and, where you consent, provides cookieless first party analytics. See vercel.com/legal/privacy-policy. |
| [Email service provider, to be added when the mailing list goes live] | Marketing email delivery; data processor | TBC | Mailing list data | Sends release announcements you have subscribed to |
We do not sell or rent personal information to anyone, and we do not share it with advertising networks or data brokers. CCPA "sale" and "sharing" status: we do not sell or share personal information.
International Data Transfers
Lemon Squeezy and Vercel are based in the United States, so personal information may be transferred from your country to the United States.
For the purchase transaction, Lemon Squeezy collects your order data directly at its own checkout as an independent controller. It is responsible for that transfer and the safeguards it relies on, which are described in its own privacy notice at lemonsqueezy.com/privacy.
Spacemance never receives your card number.
For the personal information Spacemance processes directly (Vercel server logs, and cookieless analytics where you have consented), we rely on the following GDPR Art. 46 safeguard:
- Vercel: adequacy under the EU-US Data Privacy Framework (Vercel Inc. is listed at dataprivacyframework.gov).
If Vercel is not (or ceases to be) certified under the Data Privacy Framework, we will rely on the European Commission's Standard Contractual Clauses (Module 2 controller to processor, Decision 2021/914). We combine those clauses with a Transfer Impact Assessment.
UK transfers rely on the UK International Data Transfer Addendum to the SCCs.
Australian transfers rely on Australian Privacy Principle 8.1. For the purchase, Lemon Squeezy collects and discloses your order data as controller under its own privacy notice.
For the data we disclose ourselves (to Vercel, and the email provider once added), we rely on the contractual safeguards in our agreements with that recipient.
You may request a copy of the relevant SCCs or the equivalent transfer mechanism by emailing hello@spacemance.com.
How Long We Retain Personal Information
| Data | Retention |
|---|---|
| Order data and transaction reference | 7 years from the date of purchase, to satisfy taxation and consumer law record keeping obligations (Australian Tax Office record keeping requirements; IRS retention guidance; ACL s51-59 consumer guarantees claim window) |
| Mailing list data | Until you unsubscribe, or 24 months of inactivity (no opens / clicks), whichever is sooner |
| Customer support data | 24 months after the support thread is closed, then deleted unless still required for an active complaint |
| Server log data | 30 days, then automatically purged by Vercel |
Your Rights
Depending on where you live, you have some or all of the following rights in relation to your personal information.
Under GDPR (EU and UK residents) and APP (Australian residents):
- Access: ask us what personal information we hold about you and receive a copy.
- Rectification: ask us to correct inaccurate or incomplete information.
- Erasure / deletion: ask us to delete personal information that is no longer necessary, where you have withdrawn consent, or where you object and there is no overriding legitimate ground.
- Restriction: ask us to limit how we use your information while a dispute is resolved.
- Portability: receive your information in a structured, machine readable format, or have it sent directly to another controller where technically feasible.
- Object: object to processing based on our legitimate interests, including any direct marketing.
- Withdraw consent: withdraw consent for processing that relies on consent (e.g. mailing list) at any time, without affecting prior lawful processing.
- Not be subject to automated decision making: we do not carry out automated decision making, but you have this right if we ever did.
Under CCPA / CPRA (California residents):
- Right to know what personal information is collected and how it is used.
- Right to delete personal information we have collected.
- Right to correct inaccurate personal information.
- Right to opt out of the sale or sharing of personal information (we do not sell or share, but you have this right anyway).
- Right to limit the use and disclosure of sensitive personal information.
- Right not to be discriminated against for exercising any of the above rights.
To exercise any of these rights, email hello@spacemance.com from the address associated with your purchase or subscription so we can verify your identity. We will respond within 30 days (GDPR), 45 days (CCPA), or such other period as the applicable law allows.
Right to Lodge a Complaint
If you believe we have not handled your personal information in accordance with this policy or applicable law, you can complain to a supervisory authority.
- EU residents: the data protection authority in the member state where you live, work, or where the alleged infringement occurred. A list is maintained at edpb.europa.eu/about-edpb/about-edpb/members_en. Spacemance has no establishment in the European Union, so the GDPR one stop shop mechanism does not apply; each EU member state authority retains competence over complaints from its residents.
- UK residents: the Information Commissioner's Office at ico.org.uk.
- Australian residents: the Office of the Australian Information Commissioner at oaic.gov.au.
- California residents: the California Privacy Protection Agency at cppa.ca.gov, or the California Attorney General.
We would prefer to resolve any concern directly first, so please consider emailing hello@spacemance.com before lodging a formal complaint.
Security
We protect personal information using TLS encryption in transit, encryption at rest where supported by our processors, role based access control on internal systems, and regular review of access lists.
Lemon Squeezy is PCI DSS Level 1 certified for the payment data they handle.
Despite our efforts, no system is perfectly secure.
If we ever discover a personal data breach affecting your information, we will notify the relevant supervisory authority within 72 hours (GDPR Art. 33) and notify affected individuals where the breach is likely to result in a high risk to their rights and freedoms (Art. 34).
Children
We do not knowingly collect personal information from anyone under 16 years of age.
Spacemance titles are written for adult readers.
If we learn that a child under 16 has provided us with personal information, we will delete it as soon as we discover this.
To report such a case, email hello@spacemance.com.
Changes to This Policy
We may update this policy from time to time.
The current version is identified by the lastModified date at the top of the page.
Material changes that reduce your rights will be notified by email to active mailing list subscribers and by a notice on this page for at least 30 days before the change takes effect.
Contact
For privacy enquiries, including to exercise any of the rights described above, contact us at hello@spacemance.com.