1The short version
- No analytics package. No advertising pixel. No behavioural tracking of any kind.
- No cookie is set by this site, which is why there is no consent banner to dismiss.
- No account, no login, no newsletter, no marketing list.
- The scoring form does not send your details to a server. It composes an email in your own mail application, and you press send.
- Nothing about you is sold, rented or shared. There is nothing here to sell.
- The only personal data that reaches the studio is what you choose to put in an email.
- Video and audio come from third party hosts. Their players load only when you press play; one film sample’s cover image is fetched from its host when the page loads. The inventory is in section 6.
The rest of this notice exists because "we value your privacy" is not a statement anybody can check. What follows is checkable.
2Who is responsible
Zazie Productions LLC is the controller of the personal data described here. The studio is a single composer operation, so the person who reads your email is the person responsible for it.
Contact for any privacy matter, including a rights request: [email protected]. The studio is established in the United States and has no establishment in the EEA, the UK or Switzerland. There is no separate data protection officer, because at this scale there is nobody else to appoint; requests are handled directly by the composer.
The site is hosted on an edge platform that serves the static files. That provider processes standard request metadata on the studio's behalf, described in section 3.
3What is collected, and why
| Data | Where it comes from | Why | Legal basis |
|---|---|---|---|
| Your inquiry: name, email, project details, budget, timeline, and anything else you write | You send it, from your own mail application, when you use the scoring form or write directly | To answer the inquiry, quote the work, and perform a commission | Pre contract steps and performance of a contract; legitimate interest in answering business correspondence |
| Project material you choose to send: cuts, scripts, reference audio, storyboards | You send it, by link or transfer service, after the first reply | To spot, compose and deliver the score | Performance of a contract |
| Billing details on an invoice: name, production company, address, and the payment record | You supply it when an invoice is raised | Invoicing, payment, accounting and tax records | Performance of a contract and compliance with a legal obligation |
| Request metadata at the edge: IP address, user agent string, timestamp, requested path, referring site | Your browser, on every request, handled by the hosting platform | Serving the files, caching, rate limiting and abuse prevention | Legitimate interest in operating and securing the site |
That is the complete list. There is no analytics record of your visit, no device fingerprint, no interest profile and no advertising identifier, because nothing on the site creates one.
The scoring form builds a mailto: link. When you press the button, your own mail client opens with the message you typed. Nothing is posted to this site's host, no copy is stored here, and if you close the draft the studio never learns you filled it in.
Please do not include special category data in an inquiry unless the project genuinely requires it. A logline and a runtime are enough for a quote.
4Cookies and local storage
This site sets no cookies. Not one session cookie, not one preference cookie, not one analytics cookie. There is nothing to accept and nothing to reject.
Two storage mechanisms are used on your device, and both are listed here because an honest notice says what it does rather than what sounds good:
- One session storage key,
zpBootShown, written by the opening sequence on the portfolio so it does not replay on every page in the same tab. It is deleted when you close the tab, it holds no personal data, and it never leaves your device. - A service worker cache, registered on load, which stores copies of pages, fonts and images in your browser so a repeat visit renders immediately and the site still opens offline. It is a local file cache, not a profile, and it can be cleared at any time from your browser settings or from section 5.
The privacy page reads your cookie jar, your storage keys and your cache names in order to show them to you. It writes none of them.
Your hosting provider or content delivery network may set its own cookie, for example a bot management cookie on your first request. That cookie is set by that provider under its own policy, not by this site, and the studio cannot read or remove it from here.
5Check it yourself
This runs entirely in your browser against this origin. It makes no network request, sends nothing to the studio, and reports only what your own device is holding.
Device inspector · horror.zazieproductions.com
Nothing inspected yet. Press the button to read this origin's cookies, storage keys, caches and any third party script running on the page.
If that panel ever shows a cookie or a storage key this notice does not describe, treat the panel as correct and this notice as out of date, and tell the studio. The claim on this page is meant to be falsifiable.
6Third parties, exactly
No third party script runs on this site. What follows is the full list of external hosts that can be contacted, and what triggers each one.
| Host | When contacted | What it receives |
|---|---|---|
| youtube-nocookie.com Google LLC |
When you press play on a film sample. A connection hint is made at page load, and hovering a sample pre fetches the embed document before you press play. | Your IP address, user agent, the video identifier and the page URL, under Google's own policies. |
| drive.google.com Google LLC |
When the page loads, for the cover image of the one film sample hosted there rather than on YouTube; and again when you press play on it. A self hosted image loads instead if the request fails. | Your IP address, user agent and the file identifier, under Google's own policies. |
| f4.bcbits.com Bandcamp |
When the catalogue loads: cover art for the records is served from Bandcamp's image server. | Your IP address, user agent and the requested image path. These requests carry no referring page: cover images are loaded with referrerpolicy="no-referrer". |
| img.itch.zone, public-files.gumroad.com, i.ebayimg.com itch.io, Gumroad, eBay |
When the catalogue loads: cover art for libraries, tools and objects is served from each marketplace's own image server. | Your IP address, user agent and the requested image path, again with no referring page. |
| Edge hosting platform | Every request for a file on this domain. | The request metadata described in section 3, under that provider's terms and privacy policy. |
| Google (studio mailbox) | When you send an email to the studio. | The message and its headers, stored in the mailbox the studio uses for correspondence. |
Nothing else. Fonts are self hosted on this domain, so no font service sees your visit. There is no analytics provider, no advertising network, no social media embed, no live chat widget and no payment processor anywhere on this site.
Two hosts appear as connection hints in the page head only, static.doubleclick.net and googleads.g.doubleclick.net, which are hosts the YouTube player itself may reach. No code on this site requests anything from them. The head also hints at i.ytimg.com; no thumbnail is fetched from it. Every poster on this site is a self hosted image, with one exception: the cover frame for the Eclipsed sample comes from drive.google.com, as the row above records.
Pressing a card in the catalogue, or any external link in the footer, takes you to that marketplace or platform. From that point their privacy policy applies to you, and the studio has no visibility of what happens there.
7Embedded video and audio
Film samples are embedded with the privacy enhancing youtube-nocookie.com host and no iframe exists in the page until you press play, so a visit that never plays anything never loads a player. The showreel audio is served from this domain.
One image is the exception, and it is named rather than buried: the cover frame for the Eclipsed sample is requested from drive.google.com when the page loads, falling back to a self hosted image if that request fails. It is an image request and not a player, but it is a third party contact made without any action from you.
One behaviour is worth stating precisely because it is easy to hide: hovering a film sample pre fetches the embed document from YouTube so that playback starts instantly. That is a network request to a third party made before you press play, and it is disclosed here rather than buried.
If you would rather no third party were contacted at all, browse with images and media blocked, or use a browser that partitions or blocks third party requests. Every cue title, credit and description on this site is readable as text without loading a single embedded player.
8How long things are kept
| Material | Kept for |
|---|---|
| Inquiry correspondence | For the life of the project, then 24 months, in case the production comes back |
| Project material you sent: cuts, scripts, references | For the life of the project, then 12 months, after which it is deleted unless you ask for archival |
| Delivered score, stems and session data | As above. Retrieval after the retention period is not guaranteed |
| Invoices and payment records | 7 years, to satisfy tax and accounting record keeping |
| Request metadata | Controlled by the hosting platform's own retention window, not by the studio |
Ask for something to be deleted sooner and it will be, except where a record has to be kept for tax or legal reasons, in which case the studio will say which record and why.
9Where data goes
The studio, its mailbox and the site's hosting are in the United States. If you contact the studio from outside the US, your message is transferred there for the purpose of answering it, which is the transfer you asked for by writing.
The studio does not onward transfer personal data to any other party, does not use it for marketing, and does not share it except where a project requires a session player or engineer who has signed the same confidentiality obligation as clause 14 of the terms.
If you need the transfer mechanism that applies to a specific recipient, for example for your own compliance file, ask and the studio will answer in writing.
10Your rights
Rights are exercised by email to [email protected]. There is no form, no portal and no identity verification service, because there is no account to protect: the studio asks only for enough detail to find the correspondence you mean, and will ask a follow up question rather than request identification documents.
In the EEA, the UK and Switzerland
- Access: a copy of what is held about you.
- Rectification: correction of anything inaccurate.
- Erasure: deletion, subject to the record keeping in section 8.
- Restriction and objection: including objection to processing based on legitimate interest, which stops it unless there is a compelling reason to continue.
- Portability: your correspondence and project files back in a usable format.
- Withdrawal of consent, where consent was the basis, without affecting earlier processing.
Requests are answered within one month. The studio has no establishment in the EEA, the UK or Switzerland and has not appointed a representative there, so requests go to the studio directly. That does not limit your right to complain to your own supervisory authority, and it does not affect any right you have under your local law.
In California and other US states
- Right to know what personal information is collected, the categories of source and the purpose. The tables above are that disclosure.
- Right to delete, subject to the same record keeping exceptions.
- Right to opt out of the sale or sharing of personal information. The studio does not sell or share personal information, so there is nothing to opt out of and no "do not sell" link is needed.
- Right to non discrimination for exercising any of the above.
- Right to correct inaccurate personal information.
An authorised agent may make a request on your behalf with your written permission.
Anywhere else
The studio will apply the same standard to a request from any jurisdiction, whether or not a local law requires it. A request is answered on its merits, not on where it came from.
11Security
The site is served over TLS with security headers set at the edge, including X-Content-Type-Options, X-Frame-Options, a restrictive Referrer-Policy and a permissions policy that disables camera, microphone and geolocation for every page. Project files are held on encrypted storage with access limited to the composer.
Email is not end to end encrypted. If you need to send something genuinely sensitive, ask for an alternative and the studio will arrange one rather than have it cross the internet in the clear.
If a breach ever affects personal data the studio holds, anyone affected will be told directly and without undue delay, and a supervisory authority will be notified where the law requires it.
12Children
This site is not directed at children, and the studio does not knowingly collect personal data from anyone under 16. The catalogue includes sound libraries and physical objects intended for adult buyers. If you believe a child has sent the studio personal data, say so and it will be deleted.
13Do Not Track and Global Privacy Control
The site does not track, so a Do Not Track or Global Privacy Control signal changes nothing here. Both are respected by default, in the sense that there is no tracking to switch off. If a third party host described in section 6 receives a signal from your browser, that host's handling of it is governed by its own policy.
14Changes to this notice
The effective date at the top of this page changes when the notice does. A change that expands what is collected, or that adds a third party, will be announced on the site before it takes effect rather than slipped in quietly.
The inventory in section 6 is the part most likely to change, because it follows the site's build. If you spot a host there that this page does not name, that is a bug worth reporting.
15Complaints
Tell the studio first: [email protected]. Most complaints are a misunderstanding about what a page does, and those get fixed.
If the answer is not good enough, you can complain to the supervisory authority where you live or work: a national data protection authority in the EEA, the Information Commissioner's Office in the UK, or your state attorney general in the United States. Nothing in this notice limits that right.