Privacy Policy

Your privacy matters. Here's exactly what we collect and how we protect it.

Last Updated: June 23, 2026

Overview

Nino Chavez Photography operates photography.ninochavez.co. This privacy policy explains what data we collect, how we use it, and your rights regarding it.

What We Collect

Anonymous Traffic Analytics

We use Cloudflare Web Analytics to understand how visitors use our site. This service is cookieless and fully anonymized — no individual tracking, no persistent identifiers, and no personally identifiable information is collected. Aggregated usage data (pages visited, referrers, device types) is collected but cannot identify you.

Player Tags (Athlete Names & Jersey Numbers)

Visitors can optionally tag athletes in photos by submitting their name and optional jersey number. Before becoming public, all tags are reviewed by an admin. Published tags appear on the photo for identification purposes. To submit a tag, you must confirm you have permission from the athlete (or their parent/guardian if under 18).

Account Holders (Admins & Contributors)

Users who create accounts to approve tags or contribute content authenticate via Supabase Auth. We collect your email address and any name you provide. Authentication is encrypted end-to-end using industry-standard protocols.

Media Delivery Infrastructure

Photos and videos are delivered via Cloudflare Images and Cloudflare Stream. These services are infrastructure providers — they cache and serve media but do not track individual visitors. Standard CDN logs (IP, timestamp, requested asset) are retained transiently for operational purposes (debugging, DDoS prevention, performance).

Cookies & Tracking

We do not use tracking cookies. Cloudflare Web Analytics does not set any cookies.

Logged-in users only: If you create an account, Supabase Auth sets first-party essential cookies to maintain your session. These are functional cookies required for the service to work — not for tracking. Anonymous visitors receive no cookies.

No consent banner needed: Because we do not use tracking cookies or non-essential data collection, we do not require cookie consent under GDPR or similar regulations.

Youth Athletes (Under 18)

Tags may identify youth athletes in photos. Submitting a tag for a minor requires documented permission from a parent or legal guardian. By submitting a tag for someone under 18, you confirm you have obtained this permission.

If you are a parent or guardian and believe a minor's name or likeness has been published without consent, please contact us immediately at nino@ninochavez.co.

Data Retention

Player tags: Retained while the album is published on our site. Upon removal request, approved tags are deleted from the public view within 48 hours.

Account data (email, authentication tokens): Retained as long as the account exists.

Analytics data: Cloudflare retains aggregated analytics for 30 days.

CDN infrastructure logs: Transient, rotated per Cloudflare's standard retention policy.

Your Rights (CCPA & GDPR)

You have the right to:

  • Request access: See what personal data we hold about you.

  • Request deletion: Ask us to delete your data (subject to legal retention requirements).

  • Request removal of a tag: Have your name or a player's name removed from a photo's public tags.

To exercise any of these rights, email nino@ninochavez.co with a clear description of your request.

Contact Us

If you have questions about this privacy policy or how we handle your data, reach out: