LEGAL

Privacy Policy

EFFECTIVE: · LAST UPDATED:

What This Policy Covers

This policy explains what information is collected when you visit nathanielrohr.com (the "Site"), how it's used, who else touches it, and the rights you have over it. The Site is owned and operated by Nathaniel Rohr, an individual based in Illinois, United States. It covers this site and the tools hosted on it. It doesn't cover other places you might find me — YouTube, Instagram, or ShotCard — which run under their own terms.

What I Collect (It Isn't Much)

The class waitlist. If you sign up on the class page, the form asks for your name, your email address, and a sentence about what you shoot. That form is handled by Netlify Forms and the submissions land in my account there and in my inbox. I use them to tell you when the class opens, and occasionally to share something new on the site — a tool, a guide, a video worth your time. I don't send anything else, and every message includes a way to get off the list. Asking to come off it is permanent and takes one email.

Email you send me. If you email me, I get your address and whatever you wrote. I use it to read and reply, and nothing else.

Automatically, as you browse. The Site is hosted on Netlify. Like any web host, Netlify processes standard technical data when it serves a page — your IP address, your browser type, and which page you asked for — for delivery, security, and abuse prevention. I also have Netlify's built-in analytics turned on. It works from those server logs rather than from a script in your browser, so it sets no cookies and doesn't follow you between sites. What I see is counts: how many visits, which pages, which countries, which links people came from. Never a profile of you.

What Stays On Your Device

The interactive tools on this site are built to run entirely in your browser. Nothing you put into them is uploaded, and I never see any of it.

Photo Flashcards saves your progress — which terms you've marked "got it" and which you're still learning, plus your card-order preference — in your browser's local storage under the keys nrfc1 and nrfc1m. That data never leaves your device, and clearing your browser's site data erases it.

The Camera Pocket Guide PDF is a file you download and fill in on your own machine. Whatever you type into it stays in your copy.

ShotCard (at shotcard.app) reads a photo's EXIF data in your browser to build a settings card. The photo is never uploaded. It's a separate site with its own terms, but it's mine, and it's built on the same principle.

What I Don't Do

No selling or renting your data. No advertising networks. No cross-site tracking pixels. No data brokers. No profiling. No accounts to create and no passwords to lose. Your email address is used for the thing you gave it for, and nothing else.

Cookies

The Site sets no cookies of its own, and there's no cookie banner because there's nothing to consent to. Two things can still put a cookie on your device while you're here: a YouTube video embedded in a page, if you press play on it, and a link that takes you off the Site to somewhere like Amazon or Ko-fi. Video embeds use YouTube's no-cookie player, which holds off until you actually start watching. If the Site ever adds something that sets its own cookies, this policy gets updated first and the change is called out at the top.

The Services Behind The Site

A handful of services help deliver these pages. Each one may see your IP address as part of doing its job — that's unavoidable for anything loaded over the internet. Here's the whole list, so you're not guessing:

If a new tool or service is ever connected to the Site — analytics, comments, anything — this list gets updated to match it.

Affiliate Links & Support

Some gear posts link to Amazon through the Amazon Associates program, and a few short links on the Site (like /olight) point there too. If you buy something after following one, I may earn a small commission at no extra cost to you. Amazon knows the visit came from me and sets its own cookies once you land there — I never see who bought what, only a total. The same goes for the Ko-fi link if you choose to support the work: Ko-fi handles the payment and I never see your card details.

How Long Things Are Kept

Waitlist entries are kept until the class has launched and you've heard from me about it, or until you ask to be removed — whichever comes first. Emails you send me stay in my inbox as long as the conversation is useful, and I clear out old ones periodically. Netlify keeps its server logs briefly under its own retention policy; the aggregate visit counts are just numbers and aren't tied to you.

Your Choices And Your Rights

You can ask me at any time to show you, correct, or delete anything I hold about you. Email nrohr@nathanielrohr.com and I'll handle it myself — there's no ticket queue, it's one person reading it. I'll confirm when it's done, normally within a few days and always within 30.

You can also clear the tools' saved progress yourself at any time by clearing site data for nathanielrohr.com in your browser settings. You don't need to ask me, and nothing is kept on my end to delete.

If you're in the EU or UK, the GDPR and UK GDPR give you rights to access, correct, delete, restrict, and port your data, and to object to how it's used. My lawful basis is your consent when you hand me your email on the waitlist form, and legitimate interest for the basic server logs that keep the Site up and secure. You can withdraw consent whenever you want without affecting anything that came before, and you have the right to complain to your local data protection authority.

If you're in California, the CCPA gives you the right to know what's collected, to have it deleted, to correct it, and not to be treated differently for asking. I want to be plain about one of them: I do not sell your personal information, and I do not share it for cross-context behavioural advertising. There is no "Do Not Sell" button on this site because there is nothing to opt out of.

Wherever you live, I'll honour these requests the same way.

Children

The Site isn't directed at children under 13, and I don't knowingly collect personal information from them. If you think a child has submitted something through the Site, email me and I'll delete it.

Security

The Site is built to have almost nothing worth stealing: it's a static site with no user accounts, no login, and no visitor database. Everything is served over HTTPS with hardened security headers and a strict content security policy. The small amount of personal information that exists — waitlist entries and emails — lives in my Netlify account and my inbox, both protected with strong, unique passwords and two-factor authentication. No system is perfect, and I won't pretend otherwise; what I can promise is that there isn't much here to lose in the first place.

International Visitors

The Site is operated from the United States and its services process data there. If you're visiting from elsewhere, your information is handled in the U.S. under this policy.

Changes To This Policy

When the Site changes — new features, new services, new tools — this policy is updated to match, with the "Last updated" date revised and anything material called out. What won't change is the philosophy: collect the minimum, sell nothing.

Contact

Privacy questions or requests? Email nrohr@nathanielrohr.com — it goes straight to me. The companion to this page is the Terms of Service.