Privacy
We collect what an order needs and nothing else.
One analytics tag counts visits so we know which pages are worth keeping. Beyond that there are no advertising tags, no tracking pixels, no third-party scripts and no mailing list. That is not a promise about the future written vaguely; it is a description of what is in the page you are reading right now.
Last updated 15 August 2026.
Who we are
Oil and Ashes is operated by Oil and Ashes, LLC in Georgia, United States, and this policy covers oilandashes.com and any order placed through it.
What we collect
If you only read. Nothing that identifies you to us. There is no account to make. Google Analytics sets a cookie and records which pages were viewed, roughly where in the world from, and what kind of device, so we can tell whether anyone is reading the verse pages. We never see a name or an address from it and we have not joined it to anything that would. Our host also keeps ordinary server logs, described below.
If you buy something. Your name, the address it ships to, your email address, and what you ordered. We need every one of those to send you a bottle and tell you it is on the way.
If you write to us. Whatever you put in the form, and the address you asked us to reply to.
Your card details never reach us. Payment is handled by Stripe and the card number goes to them, not through our site. We see that an order was paid for and the last four digits. We could not leak your card number because we never hold it.
What we do with it
We use it to take payment, pack the order, ship it, and answer you if you write. That is the whole list.
We do not sell it, rent it, trade it, or hand it to anyone for advertising. We do not build a profile of you, and we do not email you about anything other than the order you placed, because there is no marketing list to be added to.
Who else touches it
Only the companies it takes to run a shop, and only the part each one needs.
- Cloudflare
- Hosts the site. Keeps standard server logs, including IP addresses, to serve pages and block attacks.
- Google Analytics
- Counts page views and tells us which pages people actually read. It sets a cookie and sees your IP address and browser. It is the only third-party script on the site.
- Stripe
- Takes the payment and holds the card details under their own privacy policy.
- The postal carrier
- Gets the name and address on the parcel, for the obvious reason.
We would also hand something over if the law actually required it, and we would rather say that here than pretend otherwise.
Two things that load from elsewhere
The songs on the verse pages are hosted by Servant Recordings. Nothing is requested from them until you press play, and pressing play tells their server your IP address, the same as opening any web page does.
Some links leave for netbible.com or servantrecordings.com. Once you follow one, you are on somebody else's site under somebody else's policy.
How long we keep it
Order records for as long as tax and accounting rules require, which in the United States means several years. Messages sent through the contact form until the question is answered and there is no reason to keep them.
Asking us what we have
Write to us and ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it. We will do it. Depending on where you live you may have a legal right to all three; we are not going to make you cite the statute. The one thing we cannot delete is a record we are legally required to keep for tax.
Children
This is not a shop for children and we do not knowingly collect anything from anyone under 13. The product is undiluted fragrance oil and should be kept away from them for reasons that have nothing to do with privacy.
If this changes
The date at the top changes with it. If we ever add analytics or anything that watches what you do here, this page says so before it goes live rather than after.