Privacy Policy

1. Who we are and what this covers

This Privacy Policy explains what information is collected when you visit classicalnotclassical.com or news.classicalnotclassical.com (together, the “Site”), what we do with it, and the choices you have.

The Site is operated by Classical Not Classical™, a concert production created and owned by Michael Rainwater and based in the State of Georgia, United States (“we,” “us,” or “our”). This Policy forms part of our Terms of Use.

It does not cover other websites we link to — YouTube, Spotify, Apple Music, Instagram, TikTok, press publications, or michaelrainwatermusic.com. Those have their own policies.

2. Information you give us

There is exactly one place on the Site where you can send us information: the booking inquiry form on the Book the Show page. It asks for:

Two additional values are submitted with the form that you do not type:

• a hidden field that is always left empty, and a timestamp recording when the page finished loading. Both exist solely to detect automated spam — a submission that fills the hidden field, or that arrives faster than a human could type, is rejected. Neither is stored or used for any other purpose.
• a regional marker, if the regional-content feature described in section 6 identified you as being near a city we are actively touring. This is a single word such as las-vegas. It tells us which of our campaigns brought you to the form. It is never a street address, a set of coordinates, or your IP address.

Please do not send us sensitive personal information through this form. It is a booking inquiry form; treat it like an email to a stranger.

3. Information collected automatically

Server logs. The Site is hosted by Vercel. Like every web host, Vercel’s network records technical details of requests — IP address, time, page requested, browser and operating system — to deliver pages, defend against attacks, and keep the service running. We do not maintain our own separate access logs, and we do not use this data to build any profile of you.

Analytics. We use Google Analytics 4 to count visits and see which pages people read. It does not load unless you consent. If you decline, or ignore the banner, or send an opt-out signal, the analytics script is never requested and no analytics cookie is set. Details are in sections 5 and 11.

Analytics run on the main site only. The newsroom at news.classicalnotclassical.com has no analytics at all — no tracking of any kind runs there.

When analytics are enabled, Google Analytics records the pages you view, approximate location derived from IP address, device and browser type, and how you arrived. We have configured it not to report your IP address to us, and we do not use Google Signals, advertising features, or audience remarketing.

4. Cookies and similar technologies

The Site sets no cookies at all until you either consent to analytics or play a video. This is the complete list of what can be stored on your device:

The first two are strictly functional: they hold a preference you expressed and never leave your browser. We do not use session-replay software, heat mapping, fingerprinting, or any advertising or social-media pixel.

5. Regional content and the Las Vegas module

Some pages show an additional promotional panel to visitors near a city where the production is actively being presented. We want to be precise about how that works, because location is the kind of thing people are right to ask about.

• We never ask your browser for your location. The Site actively disables the browser geolocation permission at the network edge, so the Site cannot request GPS coordinates even if it wanted to. You will never see a “this site wants to know your location” prompt from us.
• Instead, when a page loads, it asks our own server which broad market you appear to be in. Our host, Vercel, derives an approximate city and coordinate pair from your IP address and provides it to that request. We compare it to the city we are promoting and return a single word, or nothing at all.
• Your IP address is never returned to the page, never written to a file, and never stored by us. The lookup response is marked private and no-store, so it is not cached.
• IP-derived location is coarse — typically city or metropolitan area, and frequently wrong if you use a VPN or a mobile network. It is not “precise geolocation” as that term is used in U.S. state privacy laws, and we do not collect precise geolocation.

6. Video

Performance videos are hosted on YouTube. We have configured them to be as private as an embedded YouTube video can be:

• Nothing loads until you click. Each video is a still image with a play button. No YouTube player, script, or connection is created until you choose to watch. If you never click a video, your visit involves no contact with YouTube at all.
• Thumbnails are served from our own server, not from YouTube’s image hosts, so merely viewing a page with videos on it does not announce you to Google.
• When you do press play, the player frame is loaded from youtube-nocookie.com, YouTube’s privacy-enhanced domain, which limits the cookies YouTube sets. The script that drives the player is fetched from youtube.com at that same moment — that request happens on play, never on page load.
• Once a video is playing, YouTube receives your IP address, device information, and which video you watched, and handles that under Google’s Privacy Policy. If you are signed in to Google, YouTube may associate the view with your account. That is between you and Google; we receive none of it.

We do not operate a video subscription service, we do not maintain any list of subscribers, and we do not transmit information about what you watch to any advertising network, social platform, or data broker. No such pixel exists anywhere on this Site.

7. Who else is involved

Four companies touch data from this Site. That is the complete list.

We may also disclose information if the law requires it, if we need to enforce our Terms of Use, or to protect the rights and safety of any person. If the production is ever reorganized or its assets transferred, information may pass to the successor, subject to this Policy.

8. What we do not do

Stated affirmatively, because these are the questions worth asking of any website:

• We do not sell your personal information, and we never have.
• We do not share it for cross-context behavioral advertising. We run no advertising campaigns that target you based on this Site.
• There is no Meta pixel, no TikTok pixel, no advertising tag, and no data-broker relationship of any kind.
• We do not build profiles, score you, or make automated decisions about you.
• We do not operate a newsletter or mailing list, so you cannot be added to one.
• We do not take payments, sell tickets, or create user accounts.
• We instruct browsers, at the network edge, to exclude this Site from Google’s interest-based advertising cohorts, and to deny camera, microphone, and geolocation access outright.

9. How long we keep things

Booking inquiries are emails in the mailboxes of the two people who handle booking. We keep them while a conversation is live and for as long as the business relationship or a reasonable follow-up window justifies. Ask us to delete yours and we will delete it. We keep no database of inquiries — there is no other copy to find.

Analytics data, if you consented, is retained by Google under our account settings and is aggregated; it is not tied to you by name.

Service logs held by Vercel and Resend follow their own retention schedules, which we do not control.

10. Your choices

Analytics consent

Analytics are opt-in. You can change your mind at any time using the Cookie preferences link in the footer of any page, or the button below. Declining removes the analytics cookie and stops the script from loading on future visits.

Manage cookie preferences

Global Privacy Control and Do Not Track

We honor both. If your browser or extension sends a Global Privacy Control or Do Not Track signal, analytics are disabled automatically, before any script loads, and we do not show you a consent banner at all. Most websites ignore these signals; we do not.

Your browser

You can block or delete cookies in your browser settings. You can also install Google’s Analytics opt-out add-on, which works across all sites.

Email

If you have written to us and would rather we did not keep your message, say so and we will delete it.

11. Your rights

We want to be straight with you about this. Comprehensive U.S. state privacy laws apply to businesses above certain size thresholds — typically tens or hundreds of thousands of consumers per year, or revenue from selling personal data. A concert production’s brochure website does not meet those thresholds, and we sell nothing. We are not claiming to be a “business” under the CCPA or a “controller” under the Virginia, Colorado, or Connecticut statutes, because that would not be accurate.

We would rather honor the rights anyway. Whoever and wherever you are, you may ask us to:

• tell you what information we hold about you;
• give you a copy of it;
• correct anything wrong;
• delete it;
• stop using it.

Email the address in section 14 and we will respond within 45 days, usually far sooner. We will not charge you, and we will not treat you differently for asking. In practice, for almost everyone, the honest answer is that we hold nothing about you at all — if you never sent an inquiry, there is nothing to find.

To verify your identity we will normally just reply to the email address you originally wrote from. We will not demand documents for a request this small.

12. Visitors from the EU, the UK, and elsewhere

We are based in the United States and the Site is hosted there. If you are in the European Economic Area, the United Kingdom, or Switzerland and the GDPR or UK GDPR applies to your visit, our lawful bases are:

• Legitimate interests — operating and securing the Site, and answering an inquiry you chose to send;
• Consent — analytics cookies, which you can give or withdraw freely at any time;
• Legal obligation — where we must retain or disclose something by law.

Sending us an inquiry transfers its contents to the United States. You have the rights listed in section 11. We have kept the number of third parties deliberately small, and we serve fonts and video thumbnails from our own server specifically so that ordinary browsing does not disclose your IP address to a third country.

13. Children

The Site is a promotional site for a concert production and is not directed to children under 13. We do not knowingly collect personal information from children under 13. There is nothing on the Site designed to appeal to a child in a way that would solicit their information — no games, no accounts, no sign-ups. If you believe a child has sent us information, contact us and we will delete it.

14. Security

The Site is served entirely over HTTPS. Inquiries travel encrypted to our email provider and land in ordinary mailboxes. Access credentials are held as server-side environment variables and are not present in the Site’s code. Standard protective headers are applied at the edge.

Our best security measure is that we hold almost nothing: there is no user database to breach, no passwords, no payment details, and no stored profiles. That said, no method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

15. Changes to this Policy

If we change how the Site handles information — adding a tool, changing a provider — we will update this Policy and change the effective date at the top of the page. For a change that materially affects your rights, we will make it noticeable on the Site rather than quietly editing this page.

16. Contact us

Questions about this Policy, or a request about your information:

See also our Terms of Use and our Accessibility Statement.