ALL THE SMOKE PRODUCTIONS
PRIVACY POLICY
Effective Date: October 1, 2026
This Privacy Policy describes how All The Smoke Productions, LLC, a Delaware limited liability company (the “Company”, “we”, “us” or “our”), collects, uses and discloses information about you when you visit allthesmokeproductions.com and allthesmoke.store (each, a “Site” and together, the “Sites”), subscribe to our email or text messaging programs, purchase merchandise, submit content or questions to us, attend or participate in our events, or otherwise interact with us, including through our podcast feeds, video channels and social media pages (collectively with the Sites, the “Services”). In this Privacy Policy, “include” and “including” mean including, but not limited to.
Our podcasts, video content and social media pages are distributed through third party platforms, including YouTube, Spotify, Apple Podcasts, Instagram, TikTok and X. Those platforms collect information about you directly, under their own privacy policies, and we do not control that collection. Section 3 explains what we receive from them, and Section 14 explains what this means for you.
1. Notice at Collection
The information below summarizes what we collect, where it comes from, why we use it, who receives it and whether it is sold or shared. The detail follows in Sections 2 through 9.
Identifiers
Examples: Name, postal address, email address, telephone number, account name, IP address, online and device identifiers, cookie identifiers.
Sources: You; automatically from your device; our e-commerce and email providers.
Sold or Shared: Yes, shared for cross-context behavioral advertising.
Customer records
Examples: Name, contact information, shipping and billing address, payment card information processed by our payment processor and not retained by us.
Sources: You; our payment and fulfillment providers.
Sold or Shared: No.
Commercial information
Examples: Merchandise ordered, order history, returns, subscription and event participation records.
Sources: You; our e-commerce provider.
Sold or Shared: Yes, shared for cross-context behavioral advertising.
Internet or other network activity
Examples: Pages viewed, content viewed or played, referring URLs, search terms, clicks, session duration, email open and click data.
Sources: Automatically from your device; our analytics and email providers.
Sold or Shared: Yes, shared for cross-context behavioral advertising.
Geolocation data
Examples: Approximate location derived from IP address or shipping address. We do not collect precise geolocation.
Sources: Automatically from your device; you.
Sold or Shared: No.
Audio, electronic, visual or similar information
Examples: Voicemails, video or audio you submit, photographs, comments and other submissions.
Sources: You.
Sold or Shared: No.
Professional or employment information
Examples: Information you provide if you apply for a role, pitch a project or seek a partnership.
Sources: You.
Sold or Shared: No.
Inferences
Examples: Preferences, interests and audience segments drawn from the above.
Sources: Derived by us and by our advertising and analytics partners.
Sold or Shared: Yes, shared for cross-context behavioral advertising.
Why We Use Each Category and Who Receives It
Identifiers
Primary Purposes: Operate the Services, fulfill orders, send communications you request, security and fraud prevention, advertising and measurement.
Categories of Recipients: Hosting and e-commerce providers, payment and fulfillment providers, email and text message providers, advertising and analytics partners, professional advisors.
Customer records
Primary Purposes: Process and fulfill orders, returns and customer service.
Categories of Recipients: E-commerce, payment and fulfillment providers, customer support providers.
Commercial information
Primary Purposes: Order fulfillment, customer service, merchandising, advertising and measurement.
Categories of Recipients: E-commerce and fulfillment providers, advertising and analytics partners.
Internet or network activity
Primary Purposes: Operate and secure the Services, measure audience engagement, advertise and market.
Categories of Recipients: Hosting providers, analytics providers, advertising partners.
Geolocation data
Primary Purposes: Shipping, fraud prevention, regional content and tax determination.
Categories of Recipients: E-commerce, payment and fulfillment providers.
Audio, electronic, visual information
Primary Purposes: Produce, program and promote our content; respond to you.
Categories of Recipients: Hosting and storage providers, production and post-production vendors, distribution platforms.
Professional or employment information
Primary Purposes: Evaluate and administer the opportunity or relationship.
Categories of Recipients: Professional advisors, recruiting or production vendors.
Inferences
Primary Purposes: Audience measurement, content programming, advertising and marketing.
Categories of Recipients: Advertising and analytics partners.
Sensitive Personal Information. We do not collect or process sensitive personal information for the purpose of inferring characteristics about you, and we do not use or disclose sensitive personal information for purposes other than those permitted under Cal. Civ. Code Section 1798.121 and its implementing regulations. As a result, we do not offer a separate right to limit the use of sensitive personal information. We also do not collect consumer health data, biometric identifiers, government identification numbers or financial account numbers.
Sale and Sharing. We do not sell personal information for money. We do use advertising and analytics technologies that may constitute a “sale” or “sharing” of personal information under California law, and a sale or targeted advertising under other state privacy laws. You may opt out at any time as described in Section 6 and at our Your Privacy Choices page.
2. Information We Collect
(a) Information you provide to us
- Contact and inquiry information you submit through a form on a Site, by email, by voicemail or by direct message.
- Order information when you purchase merchandise, including your name, shipping and billing address, email address, telephone number and the items you order. Payment card details are collected and processed by our payment processor and are not stored by us.
- Subscription information when you join our email list or opt in to our text messaging program, including the date, time and source of your sign-up.
- Submissions, including questions, comments, photographs, audio, video, fan mail and any other content you send us or post to our pages, as further described in Section 4 (Submissions and User Content) of our Terms of Service.
- Business and professional information if you apply for a role, pitch a project or propose a partnership.
- Information you provide when you enter a promotion, attend an event or participate in a live recording.
(b) Information we collect automatically
When you use a Site, we and our service providers and advertising partners collect information through cookies, pixels, tags, software development kits and similar technologies, including your IP address, device and browser type, operating system, language and region settings, referring and exit pages, pages and content viewed, links clicked, and dates and times of access. Our Cookie and Tracking Technologies Notice describes these technologies, the vendors involved and your choices in detail.
(c) Information we receive from third parties
- Aggregated audience and performance analytics from podcast, video and social media platforms, described in Section 3.
- Order, fulfillment, shipping and fraud screening information from our e-commerce, fulfillment and payment providers.
- Marketing and advertising measurement information from our advertising partners, including whether an advertisement led to a visit or a purchase.
- Information from sponsors, partners, promoters and vendors in connection with events, sponsorships and promotions, where you have agreed to that sharing with them.
3. Podcast, Video and Social Analytics
Most people experience our content on a platform rather than on our Sites, and the information flow there works differently. This Section explains it.
Podcast Downloads. Audio episodes are hosted and delivered by Megaphone, a Spotify company. When an app requests an episode, Megaphone receives the request, which includes an IP address, a user agent string identifying the app and device, and the time of the request. That information is used to count downloads, to estimate audience size and approximate location at the level of country, state or metropolitan area, and to deliver and measure advertising inserted into episodes. We receive reports built from it. We do not receive the name, email address or account of any listener from a podcast app.
Our Hosting Provider’s Own Use. For distribution and analytics, Megaphone acts as an independent controller of the listener information described above rather than solely as our service provider, and it uses that information for its own purposes, including delivering its services, analytics, platform monitoring and product improvement. Its handling of that information is governed by its own terms and privacy policy, not by this Privacy Policy.
Video Platforms. Video is delivered by platforms such as YouTube. Those platforms collect information about what you watch, for how long and, where you are signed in, about your account. We receive aggregated reports, such as views, watch time, traffic sources and audience demographics presented in ranges. We do not receive the identity of individual viewers.
Social Media. When you follow, comment on, tag or message our accounts, the platform processes that interaction under its own policy. We see what any account holder would see, and we receive aggregated reach and engagement reports.
What This Means for You. Your privacy choices on a platform are made in your account with that platform. Our choices on this Site do not change what a platform collects, and the platform’s choices do not change what we collect here.
4. How We Use Personal Information
We use personal information for the following business and commercial purposes:
- To operate, maintain, secure and improve the Services.
- To process, fulfill and support merchandise orders, returns and customer service inquiries.
- To send you newsletters, announcements, promotions and text messages you have requested, and to allow you to unsubscribe.
- To produce, program, promote and distribute our podcast, video and other content, including using submissions on air and across our channels as permitted by our Terms of Service.
- To measure audience engagement and the performance of our content, campaigns and sponsorships, and to report aggregated results to sponsors and partners.
- To advertise and market our content, merchandise, live events and partner offerings, including through cross-context behavioral advertising.
- To administer promotions, sweepstakes, contests and events.
- To respond to your inquiries, submissions and requests, including privacy rights requests.
- To detect, investigate and prevent fraud, abuse, security incidents and other unlawful or prohibited activity.
- To comply with applicable law and legal process, to enforce our terms, and to establish, exercise or defend legal claims.
- To evaluate, negotiate or complete a corporate transaction, including diligence for a proposed transaction.
- For any other purpose disclosed to you at the time of collection or to which you consent.
We will not collect additional categories of personal information, or use personal information collected for materially different, unrelated or incompatible purposes, without first providing you notice.
5. How We Disclose Personal Information
We disclose personal information to the categories of recipients identified above, as follows:
- Service providers and contractors that perform services for us, including hosting, e-commerce, payment processing, order fulfillment, email and text message delivery, podcast and video hosting, analytics, customer support, security and professional advisory services. These parties are bound by contract to process the information only on our instructions, only to perform those services, and not to sell or share it or use it for their own purposes.
- Advertising and analytics partners, which may receive identifiers, internet activity information and inferences in connection with cross-context behavioral advertising and measurement. These disclosures may constitute a sale or sharing of personal information under state privacy laws.
- Distribution and social media platforms, where information is collected directly by the platform when you view or engage with our content.
- Sponsors, partners and promoters in connection with events, sweepstakes and promotions, where disclosed to you at the time of collection.
- Affiliates and related entities under common ownership or control with us.
- Professional advisors, insurers and auditors.
- Acquirers or successors in connection with a merger, financing, reorganization, sale of assets or similar transaction, including in diligence for a proposed transaction, subject to the acquirer honoring this Privacy Policy as to information collected before the transaction.
- Law enforcement, regulators and other parties where we believe in good faith that disclosure is required by law or legal process, necessary to protect our rights, property or safety or those of others, or necessary to investigate suspected fraud or misconduct. Where legally permitted, we will give you notice of a legal demand for your information.
In the preceding twelve (12) months we disclosed for a business purpose each category of personal information identified above to the categories of recipients listed above, and we sold or shared the categories marked “Yes.” We do not knowingly sell or share the personal information of consumers under sixteen (16) years of age.
6. Sale, Sharing and Targeted Advertising
We do not sell personal information for money and we have never done so. We do allow advertising and analytics partners to collect identifiers, internet activity information and inferences through our Sites so that we can advertise our content, merchandise and events elsewhere and measure whether that advertising works. Under California law that is a “sale” or a “share,” and under other state laws it is a sale or processing for targeted advertising, whether or not money changes hands.
How to Opt Out. Use the Your Privacy Choices page, transmit the Global Privacy Control from your browser, or contact us as described in Section 11. We do not require you to create an account or verify your identity to opt out, and we will not treat you differently for opting out.
Opt-Out Preference Signals. We recognize and honor the Global Privacy Control and other opt-out preference signals we are required to recognize under applicable law as a valid request to opt out of the sale and sharing of personal information from the browser or device transmitting the signal. If you are signed in to an account with us when the signal is received, we apply the opt-out to that account as well, and we return a confirmation that the request has been processed.
Do Not Track. Some browsers transmit “do not track” signals. Because no common industry or legal standard for those signals has been adopted, we do not respond to them at this time. We do honor the opt-out preference signals described above.
Minors. We do not sell or share the personal information of consumers we know to be under sixteen (16) years of age. Consumers between thirteen (13) and sixteen (16) years of age, or a parent or guardian on behalf of a consumer under thirteen (13), must affirmatively authorize any sale or sharing before it occurs.
7. Cookies and Tracking Technologies
We and our partners use cookies, pixels, tags and similar technologies on the Sites for necessary operations, performance and analytics, functionality, advertising and embedded content. Our Cookie and Tracking Technologies Notice describes each category, the vendors involved, how long each technology lasts and your choices, including the cookie preference control available in the footer of each Site.
8. Financial Incentives
From time to time we offer a discount, early access or other benefit in exchange for joining our email or text message list. Where we do, the benefit is a “financial incentive” under California law and the following applies.
- What we collect: your email address or mobile telephone number, and your engagement with the messages we send.
- How to opt in: by submitting your information through the sign-up form and confirming where confirmation is requested.
- How to withdraw: unsubscribe using the link in any email, reply STOP to any text message, or contact us as described in Section 11. Withdrawing ends the incentive going forward and does not affect a benefit already received.
- Why the incentive is permitted: the value of your information to us is reasonably related to the value of the benefit offered. We calculate that value by reference to the expected revenue from a subscriber over the period the subscription typically lasts, less the cost of the benefit and the cost of operating the program. On that basis, the benefit offered is not unjust, unreasonable, coercive or usurious.
9. How Long We Keep Personal Information
We keep each category of personal information for as long as reasonably necessary to carry out the purposes described in this Privacy Policy, and then delete, de-identify or archive it. The criteria we apply and our general retention guidelines are set out below. Actual retention periods may be longer where required by law, where the information is subject to a legal hold, or where the information is needed to establish, exercise or defend legal claims.
Email and text message subscriber information
Criteria: Duration of your subscription, plus the period needed to honor and evidence your opt-out.
General Retention Guideline: Until you unsubscribe, plus twenty-four (24) months.
Order and transaction records
Criteria: Statutory tax, accounting and recordkeeping periods, and the period for returns, chargebacks and disputes.
General Retention Guideline: Seven (7) years from the date of the order.
Customer service and inquiry records
Criteria: Time needed to resolve the matter and address follow-up questions.
General Retention Guideline: Twenty-four (24) months from last contact.
Submissions and user content
Criteria: Duration of the license granted to us and the period in which the content remains in our library or archive.
General Retention Guideline: Duration of our use of the content, plus the applicable limitations period.
Web and app log, analytics and advertising identifiers
Criteria: Time needed for security, fraud prevention, measurement and reporting.
General Retention Guideline: Twelve (12) to twenty-four (24) months.
Podcast and video measurement reports
Criteria: Time needed for audience reporting and sponsor verification.
General Retention Guideline: Thirty-six (36) months, in aggregated form.
Promotion and event records
Criteria: Period required by the official rules and by applicable sweepstakes law.
General Retention Guideline: Four (4) years from the end of the promotion.
Business, partnership and applicant information
Criteria: Time needed to evaluate and administer the relationship or opportunity.
General Retention Guideline: Twenty-four (24) months, or the term of the relationship plus four (4) years.
Privacy rights request records
Criteria: Period we are required to maintain records of requests and our responses.
General Retention Guideline: Twenty-four (24) months.
Information subject to a legal hold or an open claim
Criteria: Duration of the hold, claim, investigation or proceeding.
General Retention Guideline: Until the matter is resolved and the applicable limitations period expires.
We do not retain personal information indefinitely. Where a category is no longer needed for the purpose for which it was collected, we delete or de-identify it in the ordinary course of our records management, subject to technical limitations on residual copies in backups, which are overwritten on a rolling basis.
10. Security
We maintain physical, technical and administrative safeguards designed to protect personal information against unlawful, accidental or unauthorized access, destruction, loss, use, modification or disclosure, appropriate to the nature of the information and the size and complexity of our business. These include access controls limiting information to personnel who need it, multi-factor authentication on the systems that hold it, encryption of information in transit, contractual security commitments from our service providers, and periodic review of who has access to what.
No system is perfectly secure, however, and we cannot guarantee the security of information transmitted to or from the Services. If we become aware of a security incident affecting your personal information, we will notify you and any regulator as required by applicable law.
11. Your Privacy Rights
(a) California residents
If you are a California resident, you have the following rights under the California Consumer Privacy Act, as amended:
- Right to know the categories and specific pieces of personal information we have collected about you, the categories of sources, the purposes for collection, and the categories of third parties to whom we disclose it. You may request information for a period longer than twelve (12) months preceding your request, going back to January 1, 2022, unless doing so proves impossible or would involve disproportionate effort.
- Right to delete personal information we have collected from you, subject to the exceptions in the statute, including where we need it to complete a transaction, detect security incidents, comply with a legal obligation or exercise a right provided by law.
- Right to correct inaccurate personal information we maintain about you.
- Right to opt out of the sale or sharing of your personal information.
- Right to non-discrimination for exercising any of these rights. We will not deny you goods, content or services, charge you a different price or provide a different level or quality of service because you exercised a privacy right, except where a difference is reasonably related to the value of a financial incentive you have chosen under Section 8.
(b) Residents of other states
Our State Law Privacy Rights Supplement sets out the state-by-state detail and is part of this Privacy Policy. We extend the core rights to confirm, access, correct, delete, obtain a portable copy and opt out of targeted advertising and the sale of personal data to every United States resident, whatever state you live in. We do not engage in profiling in furtherance of decisions that produce legal or similarly significant effects.
(c) How to submit a request
- Use our Your Privacy Choices page, which carries the opt-out control and the privacy request form.
- Email us at info@allthesmokeproductions.com with the subject line “Privacy Request.”
- Call us toll free at 877-642-2877.
- To opt out of the sale and sharing of personal information, use the Your Privacy Choices link in the footer of each Site, or enable the Global Privacy Control in your browser.
(d) Verification, timing and agents
We will verify your identity before acting on a request to know, delete or correct, generally by matching two or more data points you provide against information in our records, and, where the request concerns particularly sensitive or valuable information, by requesting additional verification or a signed declaration under penalty of perjury.
We will acknowledge a request within ten (10) business days and respond within forty-five (45) days, which we may extend by an additional forty-five (45) days with notice to you. An opt-out of sale or sharing does not require verification and will be honored within fifteen (15) business days.
Where we cannot verify your identity we will tell you why, and we will treat a request to delete as a request to opt out where that is the most we can do safely.
You may use an authorized agent to submit a request on your behalf. We may require the agent to provide written permission signed by you and may require you to verify your identity directly with us, unless the agent provides a valid power of attorney.
(e) Appeals
If we decline to act on your request, you may appeal by replying to our response or by contacting us with the subject line “Privacy Appeal.” We will respond in writing within forty-five (45) days and, if we deny the appeal, we will provide you with a method to contact your state attorney general. California residents may also complain to the California Privacy Protection Agency at cppa.ca.gov.
12. Children
The Services are intended for a general audience and are not directed to children under thirteen (13) years of age. We do not knowingly collect personal information from children under thirteen (13). If we learn that we have collected personal information from a child under thirteen (13), we will delete it promptly.
If you believe a child has provided us with personal information, contact us as described in Section 17. Our video content on third party platforms is not designated as made for children, and those platforms apply their own protections to viewers they identify as children.
13. Notice to Residents of the European Economic Area and the United Kingdom
This Section applies if you are located in the European Economic Area, the United Kingdom or Switzerland. For purposes of the General Data Protection Regulation and the UK GDPR, the Company is the controller of your personal data.
Fulfilling an order, providing the Services, responding to your request
Legal Basis: Performance of a contract with you, or steps taken at your request before entering into one.
Operating, securing, measuring and improving the Services; promoting our content and merchandise; protecting our rights
Legal Basis: Our legitimate interests, where not overridden by your interests and rights.
Marketing emails and text messages, and non-essential cookies and advertising technologies
Legal Basis: Your consent, which you may withdraw at any time.
Tax, accounting and other statutory recordkeeping; responding to legal process
Legal Basis: Compliance with a legal obligation.
Establishing, exercising or defending legal claims
Legal Basis: Our legitimate interests, and where applicable a legal obligation.
Your Rights. Subject to applicable law, you have the right to access your personal data, to correct or erase it, to restrict or object to its processing, including processing for direct marketing, to receive it in a portable format, and to withdraw consent at any time without affecting the lawfulness of processing before withdrawal. You also have the right to lodge a complaint with your local supervisory authority or, in the United Kingdom, the Information Commissioner's Office.
International Transfers. We operate in the United States and personal data we collect is transferred to and processed in the United States, which may not provide the same level of protection as the laws of your jurisdiction. Where required, we rely on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum or another lawful transfer mechanism, together with supplementary measures where appropriate. You may request a copy of the relevant safeguards by contacting us as described in Section 17.
Automated Decision-Making. We do not make decisions producing legal or similarly significant effects about you based solely on automated processing, and we do not engage in profiling of that kind.
14. Third Party Platforms and Links
Our content is distributed on, and our Sites link to, platforms and websites we do not control, including video, podcast, social media, ticketing and merchandise platforms. When you view or engage with our content on those platforms, the platform collects information about you directly under its own privacy policy and terms, and its practices are not covered by this Privacy Policy.
Your privacy choices on a platform are made in your account with that platform. We encourage you to review the privacy policy of any platform or website before providing information to it.
15. Accessibility
If you need this Privacy Policy in an alternative format because of a disability, contact us at info@allthesmokeproductions.com or 877-642-2877 and we will provide it.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will revise the Effective Date above and, where required by law or where the changes are material, provide additional notice, which may include posting a notice on the Sites or sending an email to the address associated with your subscription (email acceptable).
Material changes affecting how we use information already collected will not be applied retroactively without your consent where consent is required. Your continued use of the Services after the effective date of an updated Privacy Policy constitutes your acknowledgment of it.
17. How to Contact Us
If you have questions about this Privacy Policy or our privacy practices, contact us at:
All The Smoke Productions, LLC
Attn: Privacy
P.O. Box 10129
Marina Del Rey, CA 90295
Email: info@allthesmokeproductions.com
Telephone: 877-642-2877