Privacy Policy

The short version

Where Is The Photobooth is a vintage photobooth rental business based in New York City. When you sign up on this site, we collect your email address and a small amount of technical metadata so we can tell you where the booth pops up next. We don't sell your data, we don't run ads, and we don't track you around the web.

What we collect

When you submit the signup form, we store:

• Email address — the one you type into the form.
• IP address — captured automatically with your signup. Also used transiently for rate limiting and spam prevention.
• Browser and device information — the user-agent string your browser sends.
• Marketing attribution — if you arrived through a tracked link, we store the UTM parameters (source, medium, campaign, term, content) and the page that referred you. Only present when those values exist in the URL.
• Signup timestamp — when you joined the list.

How we use it

• To send your signup confirmation and announce upcoming pop-up locations and events.
• To notify our team when someone new joins the list.
• To prevent spam and abuse of the signup form (reCAPTCHA and rate limiting).
• To understand which channels bring people to the booth (UTM and referrer data, reviewed in aggregate).

We do not use your information for automated decision-making or profiling.

Third parties that process your data

• Google reCAPTCHA — we use reCAPTCHA v3 to keep bots off the signup form. It runs invisibly and may collect device and behavioral data subject to the Google Privacy Policy and Terms of Service.
• Email delivery provider — your email address is passed to our transactional email service solely to deliver confirmations and announcements.
• Hosting and database infrastructure — your signup record is stored in a database on our hosting provider's servers.

We do not sell, rent, or share your personal information with third parties for their own marketing purposes.

Cookies and tracking

This site does not set its own tracking cookies. reCAPTCHA sets a cookie (_GRECAPTCHA) required for its fraud detection — that's Google's, not ours.

Data retention

We keep your signup record until you ask us to remove it or we no longer need it to run the list — whichever comes first.

Security

Consistent with the New York SHIELD Act, we maintain reasonable administrative, technical, and physical safeguards for the data we hold: encrypted transport (HTTPS), rate limiting, bot protection, and access limited to the systems that need it. If a breach ever affects your private information, we'll notify you as required by New York law.

Your rights

You can ask us at any time to confirm what we hold about you, correct it, or delete it entirely. Email [email protected] and we'll take care of it. You can also unsubscribe from announcements using the link in any email we send.

Children

This site isn't directed at children under 13, and we don't knowingly collect their information. If you believe a child has signed up, contact us and we'll delete the record.

Changes to this policy

If we change what we collect or how we use it, we'll update this page and revise the date at the top. Significant changes will be announced to the list.

Contact

Questions about this policy or your data? Email [email protected] or reach us on Instagram.