Privacy

This is what Nick Leoni Studios collects when you visit nickleoni.com, what we do with it, and the choices you have. Questions, or any request about your information: [email protected].

What we collect

When you send a message through the contact form, we collect your name, your email, your message, an optional preferred session date if you share one, and your IP address (kept up to 7 days, for spam protection). We use it only to reply to you.

When you subscribe to the newsletter, we collect your email and the time you signed up. It is double opt-in: we send a confirmation email and only add you to the list once you click to confirm. Every newsletter has a one-click unsubscribe.

We may use Cloudflare Web Analytics to count page views. It is cookieless and does not identify you. We do not use Google Analytics, Meta Pixel, or any cross-site tracking. If you have a studio dashboard login (most visitors do not), we store your email and sign-in state to control access.

What we don't do

We do not sell or rent your information. We do not share it with advertising networks. We do not profile you or build a marketing picture of you beyond Nick's own newsletter.

How it's handled

Because of who this studio is for, we treat what you share with particular care: we never profile you, categorize you, or infer anything about you from your message; we never use it for advertising; and only the people who need to read it in order to reply ever see it.

The site runs on the Aurochs platform, and Aurochs LLC operates the infrastructure as our data processor. Your submissions are stored in a database scoped to Nick Leoni Studios (Supabase), the site is served by Cloudflare, and emails are sent through Resend. While the studio's own email is being set up, inquiry notifications go to a booking-desk mailbox Aurochs runs ([email protected]).

Your rights

You can ask us to show you, correct, or delete the information we hold about you, to give it to you in a portable form, or to stop using it. To make a request, email [email protected]; for the newsletter, the unsubscribe link in any email does it instantly. California residents (CCPA/CPRA) and residents of other US states with privacy laws have these rights, and we honor Global Privacy Control signals from your browser.

If you are in the EU or UK: we rely on our legitimate interest in replying to inquiries you start, and on your consent for the newsletter. Our infrastructure providers are US-based, so we use Standard Contractual Clauses for those transfers. You can withdraw consent or object at any time.

How long we keep it

Inquiry messages are kept for up to 24 months, then deleted. Newsletter subscribers are kept until you unsubscribe (then a short suppression record, then deleted). Server logs are kept 7 days. Backups are encrypted.

Contact

Privacy questions or requests: [email protected]. For Aurochs (the data processor) directly: [email protected].