Privacy

Booking a shoot asks for your name, email address and phone number, the date and time you want, the location, what the shoot is for, and any shot list or music you'd like. That's it. Nothing is collected from you before you fill the form in.

Typing a location suggests addresses as you go. Those keystrokes are sent to a geocoding service to fetch suggestions and are not stored anywhere by me.

Card details. Deposits are handled entirely by Stripe. Your card number never reaches this site — it goes from your browser to Stripe directly, and I only ever learn that a deposit succeeded and for how much.

I count page views so I know which work people actually look at. It is deliberately cookieless: your IP address and browser are combined into a one-way hash that changes every day and cannot be reversed. It tells me “forty people visited” — never who you are, and never that today's visitor was also here yesterday.

No cookie banner, because there is nothing to consent to. The only cookies this site sets are on the studio login at /control, and they exist purely to keep me signed in. A visitor to the public pages is never given one.

The work page can show reels hosted on Instagram. Those play inside a frame served by Instagram, and Meta may set their own cookies and see that you loaded them — exactly as if you had opened the reel on Instagram itself. That's their collection, governed by their privacy policy, not mine. Nothing on my side is involved.

Only what running the service actually requires:

• Vercel — hosts the site.
• Upstash — the database holding your booking.
• Stripe — takes the deposit and issues any refund.
• Cloudflare — stores your finished photos and video until you download them.
• Google or Apple Calendar — receives the date, time and location so the shoot lands on my calendar.
• Gmail — sends your confirmation and delivery emails.

Your details are never sold, never rented, and never handed to anyone for advertising.

Finished photos and video: 30 days. Your delivery link expires and the files are removed. Download them to your own drive — that copy is yours forever and nothing here can take it away.

Booking records are kept while we might reasonably need them: to honour the booking, to handle a refund, and afterwards for tax records. Visitor statistics are deleted automatically after 90 days.

Email book@atxbat.com and ask. I'll delete what I'm not legally required to keep and tell you what's left and why. You can also ask for a copy of everything I hold about you. No forms, no account, just an email.

The site is served over HTTPS. The studio login is protected by a password and a second factor from an authenticator app. I'll tell you promptly if anything happens that affects your details.

This service isn't aimed at anyone under 13, and I don't knowingly collect their details. If a shoot involves a minor, the booking is made by their parent or guardian.

Anything at all — book@atxbat.com or +1 (512) 627-8622.