Privacy Policy

Antonio Vargas Photography (“we,” “our,” “us”) is a sole-proprietor sports photography business based at 4112 Madison Ave, Brookfield, IL 60513. For any privacy question, email inquiry@antoniovargas.io or call (708) 736-4247.

We only collect the minimum we need to run the business. Specifically:

• Inquiry form data. Name, email, phone, organization, event details, and whatever message you submit via /coverage, /clubs, or the gallery-specific inquiry flow.
• Waitlist signups. Email address and optional team-interest fields from the footer gallery waitlist.
• Purchase data. When you buy photos, Stripe collects your name, email, billing address, and card details. We never see or store card numbers. We do receive your email, amount paid, and a reference to which gallery the purchase covered.
• Attribution metadata. UTM parameters (source, medium, campaign), referring URL, and the page you submitted from. Used to understand how people found us.
• IP address. Temporarily, for rate-limiting inquiry and waitlist submissions. Not logged long-term.
• Analytics events. Pageviews and button-click events via the tools listed below. No sensitive data is passed to analytics.
• Photographs. We take photos of youth athletes at publicly-held sporting events with the permission of the family, team, or event organizer who engaged us.

• To respond to your inquiry or fulfill your order.
• To notify you about galleries that include your team (waitlist only, and only when you opted in).
• To improve the business — which marketing works, which pages convert, which galleries parents actually use.
• To comply with legal and tax obligations.

We use a small set of service providers that each handle one job:

We don’t sell your data. We don’t share it for purposes other than running the services listed above.

We use cookies for four things:

• Session + analytics. Vercel Analytics, Google Analytics, and Meta Pixel each set their own cookies. These are standard and can be blocked with any browser extension if you prefer.
• Admin session. The avp_admin_token cookie authenticates Antonio into the admin dashboard. Not set for regular visitors.
• Gallery unlocks. If you enter an access code for a protected gallery, a signed cookie (avp_unlock_<id>) stores that you unlocked that gallery, for 90 days.
• Checkout. Stripe sets its own cookies during the checkout flow. See stripe.com/privacy.

• Inquiries and waitlist signups: up to 24 months of inactivity, then pruned.
• Orders and invoices: kept for 7 years for tax and accounting purposes, per IRS guidance.
• Photographs: retained indefinitely in archive form. Clients may request removal of specific gallery pages at any time.
• Server access logs: up to 30 days.

Youth sports photography involves photos of children. We only shoot at events where the family, team, or organizer has engaged us or consented to coverage. We will remove specific photos or full galleries on request from a parent or legal guardian — email inquiry@antoniovargas.io with the gallery URL and the detail of what you’d like removed. We act on these requests within 7 days.

You can ask us at any time to:

• Tell you what data we hold about you.
• Correct anything that’s wrong.
• Delete your inquiry, waitlist, or order records (we will honor this where not legally required to retain them).
• Unsubscribe from the waitlist — reply to any waitlist email or email us directly.

Email inquiry@antoniovargas.io with the request and we’ll respond within 30 days.

We use standard practices: HTTPS everywhere, secrets stored in encrypted environment variables, admin access gated behind a shared secret, private R2 bucket for purchased originals. No system is perfectly secure, but we keep the attack surface small on purpose.

If we make material changes, we’ll update the “last updated” date at the top and mention it in the monthly report for active clients. Small cosmetic edits may happen without notice.