// the record
privacy.
tonedamage.com respects your privacy choices.
what we collect
Country code. We use Cloudflare's Analytics Engine to record one event per page view: which page, which country (derived from your IP by Cloudflare before our code sees the request), and a counter. On tonedamage.com itself: no IP address stored, no browser fingerprint, no cookies, no cross-site or advertising tracking script. No third-party tag manager. No ad-pixel.
Web Vitals. Cloudflare's Web Analytics also injects a
small client-side beacon that measures how the page performs for you —
load timing and Core Web Vitals — and reports it back to this same
domain at /cdn-cgi/rum, not to a third-party domain. It's
cookieless, sets no identifier, and builds no profile: it tells us
whether pages are fast for real visitors, not who you are. Your browser
or an extension can block it.
Operational logs. When your browser blocks something
on our page because of our security policy, it may send a small report
to a /csp-report endpoint we run. The report describes
what was blocked (which directive, which resource URL, which source
file and line), not who you are. We use these to fix bugs; they're
retained in Cloudflare's Workers Logs and rotate out automatically.
Contact form. If you use the contact form in the footer, we collect what you type — your name, email, the topic, and your message — and email it to the band so we can reply. That's the whole deal: we don't store it in a database, we don't add you to any list, and we don't use it for anything but answering you. Rather not use the form? Email us directly instead.
how we use it
Country code. We use it to know roughly where folks come from, so we can understand exposure and prioritize where to invest outreach + access work. Aggregated by country; individual visits aren't tracked back to a person.
Contact form. Only to read your message and reply. No marketing, no resale, no profiling.
third parties
One service sees your data with their own privacy policy:
- Cloudflare hosts this site, runs the analytics engine, and — when you submit the contact form — delivers that message via Cloudflare Email Sending. They terminate the HTTPS connection, derive your country code, serve the static files, and route the contact email to us. Their privacy policy: cloudflare.com/privacypolicy (opens in a new tab).
Bandcamp + SoundCloud + Spotify + Apple Music are LINKED FROM this site but they're separate platforms with their own privacy contracts. When you click out to one of those, you're on their turf, under their terms. We don't share data with them; you visit on your own and they see what they see.
your rights
- Block analytics in your browser: Cloudflare respects DNT and Global Privacy Control where applicable; your browser or extension can also block both the analytics dispatch and the client-side Web Vitals beacon entirely.
- Ask questions: write to hello@tonedamage.com.
- Stop visiting: closing the tab ends the data we might collect from you. Aggregated country counters from past visits stay, but those aren't tied to you.
updates
When this policy changes, the new version replaces this page. If you want to confirm the policy as of a specific date, write us.
contact
edition 2026.06.05