Privacy Policy

Effective date: July 7, 2026

I am Doug Cravillion, a one-person photography business in Sussex, Wisconsin. I built and run this website myself, and I care about keeping your information safe and treating it the way I would want mine treated. This page explains what happens with any details you share with me here.

The short version

• This website sets no advertising cookies and runs no third-party ad or tracking scripts — no Google Analytics, no Facebook or Meta pixel, no ad trackers.
• My analytics are self-hosted and cookieless. They count visits in aggregate and cannot identify you.
• Anything you send through a form comes straight to me. I do not sell, rent, or trade your information, ever.
• Everything lives on my own server at home, not on a third-party website host.

Where your information lives

This site and its behind-the-scenes pieces run on my own server here in Wisconsin, sitting behind a secure gateway. When you fill out a form, the information is saved to a file on my own server and emailed to me — it is not handed off to a third-party marketing platform. Those notification emails are delivered through my email provider, Namecheap Private Email, which carries the message to my inbox.

Analytics (and why there's no cookie banner)

To understand what people find useful, I use a private, self-hosted analytics tool called Umami. It is cookieless and only collects aggregate, non-identifying numbers — things like page views, which site referred you, an approximate country, region, or city, and the general type of device or browser. It uses your IP address for a moment to estimate a rough location and then discards it; your IP is not stored. It cannot identify you as an individual, and it does not follow you around other websites.

Because this site sets no cookies of its own and stores no personal data through analytics, there is nothing to consent to — so you won't see a cookie-consent banner here.

"Do Not Track" signals

Some browsers can send a "Do Not Track" request. Because this site doesn't track you across other websites in the first place, there's nothing for me to switch off — you're not being tracked either way.

What the forms collect

When you choose to reach out, here is what each form asks for:

• Contact form: your name, email, the type of session you have in mind, how you heard about me, and your message.
• Kind Words (testimonial) form: your name, email, session type, a star rating, your testimonial, and a checkbox where you decide whether I may publish your first name and last initial on the site.
• Email sign-ups (the footer "Join the list," the pricing-guide request, and the wedding "date check"): your email address, which page or offer it came from, and — for the date check — your wedding date.

I use these details to reply to you, plan and deliver your session, publish a testimonial only if you've allowed it, and send the occasional update you asked for. I don't use them for anything else.

Client galleries

Finished photos are shared through my own private gallery app at gallery.doug-photography.com. You open your gallery with a password I send you. So you stay signed in while you browse and download, that area uses a functional login token — a necessary "keep me signed in" cookie, not a tracking cookie.

Email updates

If you join the list, I'll use your email to send occasional updates — new work, or mini-session dates — nothing frequent and no spam. You can opt out anytime. For now, just email me and I'll remove you right away; once regular sending is set up, every message will also include an unsubscribe link. (Broadcast sending isn't active yet.) If I later use an outside email-delivery service to send these, it will only handle your email address for the purpose of delivering the message.

Spam prevention

To keep junk submissions out, the forms use a few basic, invisible spam-prevention measures. These don't ask anything of you and don't track you — there is no CAPTCHA or puzzle to solve.

What I never do

• I do not sell or rent your personal information.
• I do not share it with advertisers.
• I do not use it for cross-site tracking or profiling.

Links to other sites

This site links out to a few other places — recommended print labs, review sites like Google, and my social media pages. Those are run by other companies with their own privacy policies; this policy covers only my site.

How long I keep things

I keep your information only as long as I reasonably need it — to answer your inquiry, deliver and support your session, and keep my own business records. When it's no longer needed, I remove it. If you'd like your information deleted sooner, just ask.

Your choices and rights

However the law where you live labels it, I'm happy to honor these requests: to see what information I have about you, to correct it, to have it deleted, or to opt out of updates. You won't be treated any differently for asking. To make any of these requests, email me at docr@doug-photography.com and I'll take care of it. This section is written to be friendly to California (CalOPPA and CCPA/CPRA) and GDPR-style requests, even though a business my size likely falls under those laws' thresholds.

Children's privacy

This site and my services are meant for adults booking photography sessions. They are not directed to children under 13, and I don't knowingly collect information from them. If you believe a child has sent me information, please contact me and I'll delete it.

Changes to this policy

If I update how any of this works, I'll revise this page and change the effective date at the top. The current effective date is July 7, 2026.

Contact

Questions about your privacy, or want to make a request? Reach me anytime:

Doug Cravillion Photography
Sussex, Wisconsin 53089
docr@doug-photography.com
262-804-7634

A note for transparency: I'm a photographer, not a lawyer. I've written this policy honestly and in plain language to explain how I handle your information — but it isn't legal advice.