Privacy Notice

Information from website visits

Sparrow Studios’ managed servers and infrastructure providers may process ordinary request and security logs, such as an IP address, requested page, date and time, browser information, and error details. Sparrow Studios does not add behavioral tracking or targeted-advertising tools.

Contact form

When a visitor submits the contact form, Sparrow Studios processes the name, email address, optional phone number, selected topic, preferred reply method, optional timing, and message provided. The server also uses limited request data, including an IP-address-derived rate-limit record, to reduce automated abuse and to log secure receipt or delivery events.

After a submission attempt, the site may save a time-stamped draft of those form fields in session storage in that browser tab. The draft is available for recovery for 30 minutes, is cleared after a successful submission, and is removed the next time the site runs after it expires. Browser tab-restoration behavior can vary. The hidden anti-spam field is not included in the draft.

An accepted submission is first saved as an encrypted, integrity-checked inquiry record in protected storage outside the public document root. Depending on Sparrow Studios’ configuration, an immediate owner alert or a daily email or text summary may then report that inquiry to Carrie. Alerts and summaries are operational notices rather than the authoritative copy of the request. Delivery and security events in the private application log are configured for retention of up to 90 days.

Closed inquiry records are eligible for deletion after the configured record-retention period of up to 730 days. Unresolved inquiries remain available until staff handle or close them and may therefore be kept longer when reasonably necessary for service, correspondence, security, legal obligations, disputes, fraud prevention, or an approved preservation request. Do not include passwords, payment details, medical information, or other unnecessary sensitive material. Submitting the form does not confirm an appointment, session, project, or studio visit.

Calls and texts

The contact page lists the studio's Twilio phone number. The call and text links open the visitor's phone or messaging application; selecting a link alone sends nothing.

Choosing “Text message” as the preferred contact-form reply and confirming the form records consent for Sparrow Studios to reply about that inquiry and, if the visitor and Carrie agree to a booking, send its confirmation at the exact mobile number provided. Message and data rates may apply, and the recipient can reply STOP to opt out. The preference is not treated as general marketing consent.

If a caller chooses to leave a voicemail after the recording prompt, Twilio records the caller’s message. Sparrow Studios stores protected voicemail metadata in the private Studio Desk and retrieves the audio from Twilio only through Carrie’s authenticated staff session; the system does not send a public playback link. Carrie may mark a message heard, return it to new, archive it, or request deletion of the provider recording. New unheard voicemail counts may appear in Carrie’s private morning summary. Twilio may retain provider records under its own configured retention and legal requirements until deletion succeeds.

When a visitor communicates by phone or text, Sparrow Studios and its configured service providers may process the information needed to receive, route, secure, and respond to that communication. This may include the visitor's name, contact details, message or voicemail content, attachments, timestamps, routing information, delivery records, and limited anti-abuse data. Do not send unnecessary sensitive information. A message or requested time does not confirm an appointment or project.

Private booking and payment records

When Carrie accepts an appointment or session, Sparrow Studios may keep the client name, mobile number, email address, requested service, appointment time, private scheduling notes, calendar reference, message-delivery status, and payment information needed to administer that booking. Payment information may include the agreed total, payment purpose such as deposit or balance, amount, currency, status, payment method category, timestamps, refund status, and transaction and status identifiers. The private staff tool is not available to public visitors.

Booking information may be processed through Sparrow Studios' hosting and email services, a private calendar provider, Twilio communications services, and Stripe payment services as applicable. Stripe hosts card entry; Sparrow Studios keeps transaction and status references rather than full card numbers. On Sparrow Studios’ managed servers, new and updated private JSON records use authenticated encryption tied to their protected storage location. Access-controlled staff exports, operational logs, calendar files, provider-held copies, and encrypted recovery snapshots have their own safeguards and are not represented as the same storage layer.

If a staff submission has an uncertain result, the private tool may keep a recovery draft in that staff member's authenticated PHP session so the fields are not immediately lost. These session-resident drafts are outside the protected JSON encryption layer, expire after two hours, and are pruned to at most 12 entries and 32 KiB of encoded data across the session. They are removed as they are consumed or cleared and when the staff session is destroyed. Staff are instructed to check provider and appointment history before retrying because a restored draft does not prove that the earlier delivery failed.

The installable staff tool caches only its generic static application shell for reconnection guidance. It does not make authenticated pages, client records, payment details, messages, exports, media, or submitted forms available offline. Installation is intended only on a secured private device and still requires the normal staff sign-in and an internet connection for private records and actions.

The private scheduler is configured to retain closed inquiry and protected appointment, message, and payment records for up to 730 days, operational application logs for up to 90 days, and encrypted recovery snapshots for up to 30 days. Unresolved inquiries remain available until staff handle or close them. Mailbox, calendar, Twilio, Stripe, and hosting-provider records may follow their own retention schedules. Information may be kept longer when reasonably necessary for an active service, payment reconciliation, legal obligation, dispute, fraud prevention, or an approved preservation request, and may be deleted earlier when no longer needed.

External links

The website links to maps, social networks, project websites, blockchain explorers, marketplaces, and other independent services. Those services control their own content, availability, security, and privacy practices.

Optional YouTube video

The Signature Scenes page initially displays a locally hosted preview and does not contact YouTube. If a visitor selects the play button, the website loads a privacy-enhanced embed from youtube-nocookie.com. YouTube may then receive ordinary request information, such as the visitor's IP address, browser details, and the video requested, and may process later interactions under its own privacy terms. Visitors can choose not to activate the video.

Portfolio photographs

If you appear in a portfolio photograph and have a privacy or permission concern, contact Sparrow Studios using the methods below. Private permission or release records are not published on this website.

Questions and requests

Use the contact form, call (806) 484-0411, or text (806) 484-0411 with a privacy question or a reasonable request concerning information previously provided directly to Sparrow Studios. Identity or authority may be verified before a request is completed.