Short version: if you hand us your email, we keep it so we can email you. No ad networks, no selling anything about you. Some pages show videos and posts from other platforms, and those platforms see your visit when they load. That's spelled out below.
Your email address — only if you type it into the newsletter signup. Nothing else is asked for and nothing else is stored with it beyond the date you signed up.
Contact form messages — if you use the contact form, we keep what you send (your name, email, subject and message) along with your IP address and browser user-agent, so we can reply and spot abuse.
Standard server logs — like every website, our host (Cloudflare) records ordinary request data: IP address, browser user-agent, which page was requested, and the time. We use this to keep the site online and to stop abuse. Your IP address is also used, briefly, to limit how many times the newsletter and contact forms can be submitted from one place — that counter is discarded after an hour.
Visit counts — Cloudflare Web Analytics runs on our pages. Its script loads from Cloudflare (static.cloudflareinsights.com) and reports page views and page-load timing back to Cloudflare. We use it to see how many people visit and what they read.
Bot verification — the newsletter and contact forms use Cloudflare Turnstile to tell humans from bots. It loads from Cloudflare only when you submit one of those forms.
Articles can include videos and posts from YouTube, Vimeo, Instagram (Meta), X and TikTok, plus videos we host ourselves on Cloudflare Stream. They load on their own as they come near the screen — you don't have to press play first. This isn't limited to articles: the homepage, the Dig archive, the Channels page and each show's episode list display YouTube preview images, which your browser fetches from Google (i.ytimg.com). So visiting those pages contacts Google even if you never open an article.
When one loads, your browser connects straight to that company. It receives your IP address, your browser's user-agent, and our site's address (not the article's; the X player is sent no referrer at all), and it can set or read its own cookies. TikTok's player, for one, sets cookies of its own. We ask for the more private option where a platform offers one: every YouTube player on this site — inside an article, the video at the top of an article, and the player on the Channels pages — loads from youtube-nocookie.com, and Vimeo and X players are loaded with their do-not-track setting on. What each company does from there is up to its own privacy policy.
Before a YouTube video is shown — in an article, on the Channels page, or on a show's episode list — your browser asks noembed.com, a free lookup service, whether that video still exists, so readers don't get YouTube's error box. The same service is used to find out whether a Vimeo video is portrait or landscape. noembed.com receives the address of the video being looked up, along with your IP address and browser user-agent.
Their policies: Google (YouTube) · Vimeo · Instagram · X · TikTok · Cloudflare
Every page loads its typefaces from Google Fonts, so your browser fetches those files from Google. The homepage and the Goods page load the current product list from our Shopify store.
We don't run advertising trackers or ad networks. Our own site sets no cookies for visitors — the only cookie it ever sets is a login session for staff on the admin panel, and only if you're staff logging in. (It does remember, in your browser tab, that the intro animation has already played; that never leaves your device.) The platforms above can set their own cookies when their players load, and those aren't ours to control. We don't sell, rent, or trade your information to anyone, for any reason. We don't build profiles on visitors.
Newsletter emails and contact messages live in a Cloudflare D1 database that only Circle 6 staff can reach, behind a passworded admin panel.
Orders and payments never touch this site. When you buy something, you're handed off to our store on Shopify, and everything after that — your name, address, and payment details — is collected and held by Shopify under their privacy policy. We can see order information in our Shopify dashboard to fulfil and support your order. We never see your full card number.
Tickets for some events are sold on that same store; a few events link out to third-party ticketing sites, which have their own policies.
Newsletter emails are kept until you ask us to remove yours. Server logs are short-lived and handled by Cloudflare on their standard retention. Our database backups roll off automatically after 30 days.
Email booking@c6live.com and ask us to remove your email address or a message you sent, tell you what we hold, or correct it — and we'll do it. No account or form required. For anything about an order, contact us the same way and we'll sort it in Shopify. If you're in a place with laws like the GDPR or CCPA, those requests are your right; we handle them the same way regardless of where you live.
This site isn't directed at children under 13, and we don't knowingly collect their information. If a child has signed up, email us and we'll delete it.
If this changes, we'll update this page and the date below. Last updated: September 15, 2026.
// Questions? booking@c6live.com
