Privacy Policy
How we handle your data. Plain language, no legalese.
Last updated: August 4, 2026
Who We Are
Storms Within runs this site and is responsible for the data collected through it. This policy explains what we collect and how we handle it.
This website is designed and hosted by TwelveTake Studios LLC.
What We Collect
Contact form submissions: When you use our contact form, we collect your name, email address, subject, message, and IP address. We use this only to respond to your inquiry. We do not add you to any marketing list.
Server logs: Our web server records standard access logs (pages visited, referral source, browser type, IP address). These are used for debugging and security monitoring only and are retained for up to 90 days.
Fonts: This site uses self-hosted fonts. No requests are made to Google or any other third party to load fonts. Your IP address is not transmitted to any font provider.
Photos: Gallery photos are served from our own infrastructure. No third-party image services or CDNs are used.
What We Don't Collect
We do not use advertising pixels, third-party analytics scripts (like Google Analytics), or retargeting campaigns. We do not build visitor profiles or sell any data. Third-party embeds (YouTube) on our media page may collect data independently as described above.
Mailing List
If you sign up for the mailing list we store your email address, the date and time you signed up, the page you signed up from, and the IP address the request came from. The last three exist to prove you asked to be on the list; we keep them for exactly that reason.
We use double opt-in. Signing up sends you one email asking you to confirm. You are not on the list, and we will not send you anything else, until you confirm. If you never confirm, the record is dropped.
Every email includes a one-click unsubscribe, and honours your mail client's own unsubscribe button. One click removes you, with no confirmation step and no attempt to talk you out of it. You can also manage your subscription from the preferences link in any email.
The list is used to tell you about new music, shows and merch. We do not sell, rent, share or trade it, and it is not shared with any other project or business.
If a message to you hard-bounces or is reported as spam, we suppress the address and stop sending.
Cookies
This website itself does not set cookies. However, our media page includes embedded YouTube videos, and YouTube may set cookies when those embeds load. We have no control over cookies set by YouTube.
Our infrastructure provider (Cloudflare) may set strictly necessary cookies for security or abuse prevention. These are not used for tracking or advertising.
Service Providers
We use the following service providers to operate this website:
| Provider | Purpose | Data involved |
|---|---|---|
| Nixihost | Server hosting (Houston, TX) | All website data resides on their hardware |
| Cloudflare | DNS, CDN, DDoS protection | IP addresses, request metadata (transient) |
| Let's Encrypt | TLS/SSL certificates | Domain name and certificate metadata only |
Email is delivered from our own mail server; we do not use a third-party email relay.
Data Retention
Contact form submissions: We retain contact form data for as long as needed to respond to and resolve your inquiry. You may request deletion at any time.
Server logs: Web server access and error logs are retained for up to 90 days for debugging and security monitoring, then deleted.
Third-Party Embeds
Our media page includes embedded YouTube videos. When you load a page with an embedded video, YouTube may collect data according to Google's Privacy Policy. We do not control what data YouTube collects through these embeds.
Links to streaming platforms (Spotify, Apple Music, Bandcamp) are external links and do not load third-party scripts on our site.
Your Rights
You can contact us at any time to:
- Ask what data we have about you
- Request correction of any inaccurate data
- Request deletion of your data
We will respond within 30 days.
California Residents (CCPA/CPRA)
We do not sell personal information. We do not share personal information for cross-context behavioral advertising.
European Residents (GDPR)
Our legal basis for processing your data is legitimate interest (responding to your inquiry when you contact us). Since we collect minimal data and set no cookies, most GDPR concerns do not apply to this website.
Do Not Sell My Personal Information
We do not sell your personal information. We have never sold personal information. We have no plans to sell personal information.
Children
This website is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will delete it promptly.
Changes to This Policy
If we make material changes to this policy, we will update the "last updated" date at the top.
Contact
Questions about this policy or your data?
See also: Terms of Service