Privacy Policy
How we handle your data. Plain language, no legalese.
Last updated: February 17, 2026
Who We Are
Storms Within is a hard rock and groove metal band from Erie, Pennsylvania. This policy explains what data we collect through the stormswithinofficial.com website and how we handle it.
This website is designed and hosted by TwelveTake Studios LLC.
What We Collect
Contact form submissions: When you use our contact form, we collect your name, email address, subject, message, and IP address. We use this only to respond to your inquiry. We do not add you to any marketing list.
Server logs: Our web server records standard access logs (pages visited, referral source, browser type, IP address). These are used for debugging and security monitoring only and are retained for up to 90 days.
Fonts: This site uses self-hosted fonts. No requests are made to Google or any other third party to load fonts. Your IP address is not transmitted to any font provider.
Photos: Gallery photos are served from our own infrastructure. No third-party image services or CDNs are used.
What We Don't Collect
We do not use advertising pixels, third-party analytics scripts (like Google Analytics), or retargeting campaigns. We do not build visitor profiles or sell any data. Third-party embeds (YouTube) on our media page may collect data independently as described above.
Cookies
This website itself does not set cookies. However, our media page includes embedded YouTube videos, and YouTube may set cookies when those embeds load. We have no control over cookies set by YouTube.
Our infrastructure provider (Cloudflare) may set strictly necessary cookies for security or abuse prevention. These are not used for tracking or advertising.
Service Providers
We use the following service providers to operate this website:
| Provider | Purpose | Data involved |
|---|---|---|
| Nixihost | Server hosting (Houston, TX) | All website data resides on their hardware |
| Cloudflare | DNS, CDN, DDoS protection | IP addresses, request metadata (transient) |
| Let's Encrypt | TLS/SSL certificates | Domain name and certificate metadata only |
Email is delivered from our own mail server — we do not use a third-party email relay.
Data Retention
Contact form submissions: We retain contact form data for as long as needed to respond to and resolve your inquiry. You may request deletion at any time.
Server logs: Web server access and error logs are retained for up to 90 days for debugging and security monitoring, then deleted.
Third-Party Embeds
Our media page includes embedded YouTube videos. When you load a page with an embedded video, YouTube may collect data according to Google's Privacy Policy. We do not control what data YouTube collects through these embeds.
Links to streaming platforms (Spotify, Apple Music, Bandcamp) are external links — they do not load third-party scripts on our site.
Your Rights
You can contact us at any time to:
- Ask what data we have about you
- Request correction of any inaccurate data
- Request deletion of your data
We will respond within 30 days.
California Residents (CCPA/CPRA)
We do not sell personal information. We do not share personal information for cross-context behavioral advertising.
European Residents (GDPR)
Our legal basis for processing your data is legitimate interest (responding to your inquiry when you contact us). Since we collect minimal data and set no cookies, most GDPR concerns do not apply to this website.
Do Not Sell My Personal Information
We do not sell your personal information. We have never sold personal information. We have no plans to sell personal information.
Children
This website is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will delete it promptly.
Changes to This Policy
If we make material changes to this policy, we will update the "last updated" date at the top.
Contact
Questions about this policy or your data?
See also: Terms of Service