Back to Home

Privacy Policy

Last updated: June 22, 2026

Introduction

This Privacy Policy describes how Conner Brooke ("we," "us," or "our") collects, uses, and protects your personal information when you visit our website connerbrooke.com (the "Site") and use our services.

We are committed to protecting your privacy and ensuring you understand how your data is handled. This policy complies with applicable data protection laws, including GDPR (EU) and CCPA (California).

Information We Collect

We collect the following types of personal information:

  • Email addresses - When you subscribe to our newsletter or create a "notify me" request
  • Contact form data - Name, email address, subject, and message when you contact us
  • Order information - Name, email, shipping address, and order history when you purchase merchandise
  • Payment information - Processed securely by Stripe (see Third-Party Services below)
  • Notify Me requests - Email and product interest for out-of-stock notifications
  • Website analytics - We collect anonymous usage data through Google Analytics and PostHog, including:
    • Pages visited and time spent on site
    • Traffic sources and referral information
    • Device and browser information
    • Conversion events (email signups, contact form submissions, merchandise purchases)
    • Contact form subject selections (e.g., "booking", "collaboration")
    • Purchase transaction amounts and product details (items purchased, quantities, prices)
    • Anonymous session replays (PostHog) so we can see how visitors navigate the site — text typed into form fields is masked before the recording leaves your browser

How We Use Your Information

We use your personal information for the following purposes:

  • To send you newsletters and artist updates (email signups)
  • To process and fulfill merchandise orders
  • To respond to your inquiries and customer service requests
  • To notify you when out-of-stock products become available
  • To improve our website and services
  • To comply with legal obligations

Third-Party Services

We use the following third-party services that may access your data:

  • Stripe - Payment processing for merchandise orders. Stripe's privacy policy: stripe.com/privacy
  • Vercel - Website hosting and content delivery. Vercel's privacy policy: vercel.com/legal/privacy-notice
  • Neon - Managed PostgreSQL database storage (now part of Databricks). Data is securely stored in encrypted databases. Privacy policy: databricks.com/legal/privacynotice
  • PostHog - Anonymous product analytics (page views, conversion events, aggregate funnel data) plus session replay so we can understand how visitors navigate the site. Session replays use PostHog's default input masking: text typed into <input>, <textarea>, and <select> elements is masked in the browser before the recording is sent to PostHog. We never call PostHog's identify API, so analytics are not linked to your name, email, or any other identifier you've shared with us. PostHog's privacy policy: posthog.com/privacy
  • Google Analytics 4 - Website analytics to understand how visitors use our site. We track:
    • Pageviews: Which pages you visit and how long you stay
    • Email Signups: When someone joins our newsletter (email address is not sent to GA4)
    • Contact Form Submissions: When the form is submitted and the selected subject type
    • Purchases: Transaction IDs, order totals, and product details (names, prices, quantities)

    Note: We do not send personally identifiable information (names, email addresses, phone numbers) to Google Analytics. All analytics data is anonymous or pseudonymous. Google's privacy policy: policies.google.com/privacy

  • Meta (Facebook/Instagram) advertising - On our music-release landing pages (e.g. /listen/...) — the pages our Meta and Instagram ads link to — we run the Meta Pixel and its server-side Conversions API to measure ad performance (which ads lead to email signups) and to reach similar audiences. When you sign up on one of those pages, we send Meta a one-way hashed (SHA-256) version of your email address so it can match the conversion — we never send Meta your email in readable form. The pixel uses cookies. The rest of this site does not run the Meta Pixel. You can manage ad tracking in your Meta ad preferences; Meta's privacy policy: facebook.com/privacy/policy. Note: the "Do Not Track" / "Global Privacy Control" opt-out described below applies to our PostHog analytics, not the Meta Pixel — manage Meta tracking through your Meta ad preferences or an ad/tracker blocker.

Note: We do not sell or rent your personal information. Aside from the Meta advertising matching described above (a hashed email used solely to measure our own ad performance), we do not share your personal information with third parties for marketing purposes.

Your Rights

You have the following rights regarding your personal data:

  • Unsubscribe from emails - You can unsubscribe from our mailing list at any time
  • Request data deletion - Contact us at info@connerbrooke.com to request deletion of your personal data
  • Access your data - Request a copy of the personal data we hold about you (GDPR/CCPA rights)
  • Correct inaccurate data - Request corrections to any inaccurate or incomplete information
  • Object to processing - Object to certain types of data processing (subject to legal limitations)

To exercise any of these rights, please contact us at info@connerbrooke.com.

Data Retention

We retain your personal information for the following periods:

  • Email signups: Until you unsubscribe
  • Order history: 7 years (tax and accounting requirements)
  • Contact messages: 2 years
  • Notify Me requests: Until product becomes available or 1 year, whichever is sooner

After these periods, your data will be securely deleted unless required by law to be retained longer.

Cookies and Analytics

We use minimal cookies and analytics on this site:

  • Session cookies: Used only for admin authentication (password-protected admin dashboard)
  • Google Analytics: We use Google Analytics to understand how visitors use our website. This includes anonymous data such as pages visited, time spent on site, traffic sources, and conversion events (email signups, purchases, contact form submissions). Google Analytics uses cookies to collect this information.
  • PostHog: We use PostHog for anonymous product analytics and session replay (see Third-Party Services above for full details on masking and what we collect). PostHog uses cookies and local storage to maintain a session ID for these recordings. We do not link replays or analytics events to your identity. PostHog requests are routed through our own domain (/ingest) as first-party traffic, so generic ad-blocker and tracker-blocker lists will not block them. To opt out, use your browser's "Do Not Track" or "Global Privacy Control" setting, or contact us at the email below and we will exclude your future visits.

You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

Meta Pixel (release landing pages only): On our music-release landing pages (e.g. /listen/...) we use the Meta advertising pixel, which sets cookies and lets Meta measure ad conversions and build advertising audiences (see the Meta entry under Third-Party Services above). Outside of those landing pages we do not use advertising cookies or track your browsing behavior across other websites.

Data Security

We implement industry-standard security measures to protect your personal information:

  • Encrypted database storage
  • Secure HTTPS connections for all data transmission
  • Regular security updates and monitoring
  • PCI compliance via Stripe (your card data never touches our servers)

While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but take all reasonable precautions.

Children's Privacy

Our services are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically. Continued use of our services after changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at:

Email: info@connerbrooke.com

For privacy-related requests (data deletion, access, corrections), please include "Privacy Request" in your email subject line.