Privacy Policy
Last updated: July 27, 2026. Applies to odrcntrl.com and connected services operated by Layercraft LLC (dba ODR CNTRL).
Summary
ODR CNTRL manufactures fragrance-free cosmetic odor-care products and operates digital commerce and partner platforms. We collect data necessary to fulfill purchases, route partner attribution, send transactional and campaign emails, analyze site performance, and comply with safety and legal obligations. We do not sell your personal information.
Information We Collect and How It Is Used
- Orders & Payment Processing: Customer checkout and payment card details are processed directly by Stripe. We receive order metadata, shipping addresses, customer email, and payment confirmation tokens to fulfill orders and calculate partner attribution.
- Fundraising, Athlete NIL & Creator Partner Data: When registering as an organizer, athlete, parent/guardian, or creator, we collect name, contact details, organization/team information, state, and tax compliance selections. Accounts for minors under 18 require adult parent/guardian setup and consent.
- QR Attribution & Referral Tracking: Scanning an ODR CNTRL QR code or clicking a partner referral link sets cookie and session attribution parameters (e.g., seller codes, team IDs) so qualifying sales accurately route to campaign ledgers.
- Sample & Field-Test Submissions: Form submissions for samples or field tests collect contact details, usage notes, and optional photo or video uploads. Uploaded media is processed via secure storage buckets (Cloudflare R2) and used for quality review or approved marketing as permitted by consent selections.
- Email Communications: We send transactional messages (order confirmations, shipping notices, account updates) and optional marketing communications. Delivery is managed via Resend (primary) and ZeptoMail / Zoho Mail (backup).
- Site Security & Infrastructure: Our platform is hosted on Cloudflare Pages & Workers with data managed in Cloudflare D1 databases. Cloudflare processes IP addresses, user agents, and request headers for performance, rate-limiting, and security defense.
- Analytics: We use Google Analytics 4 (GA4) to analyze aggregate visitor behavior and page interaction. See How Google uses data.
Data Sharing and Third-Party Services
We share data strictly with infrastructure, payment, and logistics partners required to operate our service:
- Cloudflare: Hosting, Workers execution, D1 database storage, R2 media storage.
- Stripe & Stripe Connect: Merchant payment processing, tax calculation, and connected payout routing.
- Resend & ZeptoMail: Email delivery and suppression tracking.
- Google Analytics: Site performance metrics.
Retention and Deletion
We retain customer, order, and partner records for as long as needed to fulfill orders, maintain financial ledgers, enforce compliance rules, and fulfill statutory tax obligations. You may request deletion of non-essential contact data or account records by emailing [email protected].
Youth and Guardian Controls
Youth participation in team fundraising or athlete NIL programs requires adult parent or guardian setup and consent. We do not knowingly collect unverified personal data directly from minors without guardian oversight.
Your Privacy Rights
Depending on your location (including California and other U.S. states), you may have the right to request access to, correction of, or deletion of your personal information, or to opt out of marketing communications using the unsubscribe link in our emails or by contacting us.
Contact Us
For privacy inquiries or data requests, email [email protected] or write to:
Layercraft LLC (dba ODR CNTRL)
Tempe, Arizona, USA