Privacy Policy

Last updated: 2026-04-30

The short version

This is a personal site. I don't run ads, I don't sell data, and I don't try to track visitors across the web. The few things that do touch your data are listed below — mostly third-party services that make the site work (maps, image hosting, analytics).

What this site collects directly

• Google Analytics (GA4). I use Google Analytics to understand which pages people read and where visitors come from. GA records standard analytics data — IP-derived rough location, device and browser, referrer, and pages viewed — and sets cookies (_ga, _ga_*) for session continuity. I don't use this data to identify you personally, and Google's privacy terms apply. You can opt out with a tracker blocker or the Google Analytics opt-out add-on.
• Azure logs. The pages are served from Azure Static Web Apps, which logs standard request metadata (IP, user-agent, path, response code) for security and debugging, retained for a short window.
• Admin cookie. The /admin area uses a signed admin_token HTTP-only cookie to keep me logged in when I'm editing the site. It's only set after I sign in and is not set for ordinary visitors.

Third-party services

• OpenStreetMap — map tiles on the concerts, venues, and travel pages come from OpenStreetMap. Rendering a tile requires your browser to request it, which exposes your IP to their servers.
• Wikipedia and Nominatim — used from the admin area only (for venue research and place lookups); visitor browsing does not touch them.
• YouTube — if a concert page embeds YouTube videos, YouTube's privacy rules apply while those players load. I use the youtube-nocookie.com domain where possible to limit tracking.
• setlist.fm — I import my own attended setlists from setlist.fm for the Concerts section. That request happens on the server; your browsing doesn't hit them.
• Azure — Static Web Apps (site hosting), Blob Storage (photos and files), and Cosmos DB (structured data). Microsoft's privacy terms apply.

Cookies

The site itself only sets the admin cookie mentioned above, and only for me. Google Analytics sets first-party cookies as described above. Embedded YouTube players may set their own cookies when they load. Blocking third-party cookies in your browser is a reasonable default and won't break anything here.

Comments

There's no comment system on the site right now. If you want to reach me about something you read, email me at the address below.

Email & contact

If you email me directly, I'll read it. I won't subscribe you to anything. There's no newsletter.

Changes

If this page changes meaningfully, I'll update the “Last updated” date above. No email notifications — check back if you care.

Contact

Questions, corrections, or takedown requests: tedcromwell@gmail.com.