Privacy Policy
Last updated: July 21, 2025
The Uncomfortable Truth About Your Digital Footprints
Welcome to the privacy policy that nobody reads but everyone should. Unlike most privacy policies that bury the important bits in 47 pages of legal jargon, we'll tell you exactly what we're doing with your data while you peruse our corporate dysfunction chronicles.
Legal Basis for Our Digital Snooping
Before we dive into the juicy details, let's cover the boring legal requirements. We process your data based on:
- Legitimate interests (analytics to improve our corporate dysfunction coverage)
- Your consent (for non-essential cookies that make the site work better)
- Legal obligations (compliance with privacy laws, because apparently we have to)
What We Collect (And Why)
Google Analytics 4: Our Digital Surveillance Operation
We use Google Analytics 4 (tracking ID: G-F1KHRG5529) to understand how you interact with our content. Think of it as corporate espionage, but legal and boring.
What Google Analytics tracks:
- Which pages you visit (including how long you linger on particularly damning case studies)
- Your browser and device information (Chrome on Windows? How refreshingly predictable)
- Your approximate location (anonymized to protect your whereabouts from vindictive HR departments)
- How you arrived at our site (search engines, social media, or frantic Slack links from colleagues)
- Your navigation patterns (do you read linearly or jump straight to the juicy parts?)
IP Address Anonymization: We've enabled IP anonymization, which means Google removes the last segment of your IP address. It's like wearing a mask, but for your internet connection.
Buy Me a Coffee Widget: The Guilt-Inducing Donation Portal
Our "Buy Me a Coffee" widget may collect interaction data when you hover over it contemplatively or actually follow through with caffeine-based appreciation. This data helps track donation conversion rates and probably makes the widget vendor feel important.
Cookies: The Digital Crumbs You Leave Behind
Our site uses cookies (the digital kind, not the delicious kind) to:
- Remember your preferences and settings
- Enable Google Analytics tracking
- Power the donation widget functionality
- Ensure you don't see the same content recommendations repeatedly
Cookie Types:
- Essential cookies: Required for basic site functionality (you can't disable these without breaking things)
- Analytics cookies: Google's tracking mechanisms (you can opt out, but we'll be sad)
- Third-party cookies: From Buy Me a Coffee and other integrated services
Cookie Consent: By continuing to use our site, you consent to non-essential cookies. You can withdraw consent anytime by clearing your browser cookies, using an ad blocker, or adjusting your browser settings. Essential cookies will remain because, well, they're essential.
How We Share Your Data (The Uncomfortable Details)
Google Analytics Data Sharing
Your anonymized usage data is shared with Google, who may:
- Aggregate it with data from millions of other websites
- Use it to improve their advertising algorithms
- Store it on servers around the globe
- Analyze it in ways that would make even the most paranoid IT security manager weep
Buy Me a Coffee Data Sharing
Donation-related data is shared with Buy Me a Coffee's platform, which operates under their own privacy policy (spoiler alert: it's probably longer than this one).
Legal Compliance Sharing
We may disclose your information if:
- Required by law (subpoenas, court orders, overzealous regulators)
- Necessary to protect our legal rights (rare, but stranger things have happened)
- Part of a business transaction (unlikely, given our niche market of corporate dysfunction enthusiasts)
Your Rights (Yes, You Have Some)
Under GDPR (If You're in the EU)
You have the right to:
- Access your data: Request a copy of what we've collected (it's mostly page views, but ask away)
- Rectify inaccuracies: Correct any wrong information (though analytics data is typically anonymous)
- Erasure: Request deletion of your data (the "right to be forgotten")
- Data portability: Export your data in a usable format
- Object to processing: Opt out of certain data collection activities
- Withdraw consent: Change your mind about data collection at any time
- Lodge a complaint: If we've violated your privacy rights, you can complain to your local data protection authority
Under CCPA (If You're in California)
California residents have additional rights:
- Right to know: What personal information we collect and how we use it
- Right to delete: Request deletion of your personal information
- Right to opt-out: Refuse the sale of personal information (we don't sell data, but the law requires this notice)
- Right to non-discrimination: We won't penalize you for exercising your privacy rights
Opting Out of Analytics
To opt out of Google Analytics tracking:
- Install a browser ad blocker (uBlock Origin recommended)
- Use Google's opt-out browser addon
- Enable "Do Not Track" in your browser settings
- Browse in incognito/private mode
- Disable JavaScript entirely (warning: this may break other site functionality)
How Long We Keep Your Data (The Retention Schedule)
We don't hoard your data forever, despite what our corporate surveillance expertise might suggest:
- Google Analytics data: 26 months (Google's default, configurable down to 14 months)
- Essential cookies: Session-based (disappear when you close your browser)
- Analytics cookies: Up to 2 years (unless you clear them sooner)
- Contact inquiries: 3 years from last contact (in case you need follow-up corporate dysfunction advice)
- Donation data: Retained by Buy Me a Coffee per their policies
Data Security (Our Minimal Efforts)
We implement reasonable security measures to protect your data, including:
- HTTPS encryption for all site traffic
- Relying on Google's and GitHub's security infrastructure
- Regular security updates (when we remember)
- Strong passwords on all accounts (obviously)
However, no internet transmission is 100% secure. If you're concerned about digital privacy while reading about corporate surveillance, the irony is not lost on us.
Data Breach Notification (When Things Go Wrong)
In the unlikely event of a data breach affecting your personal information, we will:
- Notify relevant authorities within 72 hours (as required by law)
- Inform affected users via email or site announcement
- Provide details about what happened and steps being taken
- Offer guidance on protective measures you can take
- Document everything for regulatory compliance (and possibly future blog material)
Third-Party Services (The Necessary Evils)
Our site integrates with several third-party services, each with their own privacy policies:
- Google Analytics: Google Privacy Policy
- Buy Me a Coffee: Buy Me a Coffee Privacy Policy
- GitHub Pages: GitHub Privacy Statement
Children's Privacy (COPPA Compliance)
Our content is intended for working professionals dealing with corporate bureaucracy. If you're under 13 and already experiencing this level of organizational dysfunction, we're deeply concerned about your life choices, but we don't knowingly collect data from minors.
International Data Transfers
Your data may be transferred to and processed in countries outside your jurisdiction, including the United States. These transfers are governed by appropriate safeguards including:
- Google Analytics: Covered by Google's Data Processing Amendment and Standard Contractual Clauses
- GitHub Pages: EU-US Data Privacy Framework participant
- Buy Me a Coffee: Operating under applicable international transfer mechanisms
Though "appropriate" is admittedly subjective in the current global privacy landscape.
Automated Decision-Making and Profiling
We don't use automated decision-making or profiling that would significantly affect you. Google Analytics may create audience segments for statistical purposes, but we don't use these for individual decision-making. If you're concerned about being profiled as a "corporate dysfunction enthusiast," that's probably accurate but harmless.
Changes to This Policy
We may update this privacy policy occasionally to reflect:
- Changes in our data practices
- New legal requirements
- Additional snark opportunities
- Evolving corporate surveillance techniques
When we make changes, we'll update the "Last updated" date above. For significant changes, we may notify users through site announcements or interpretive dance (probably the former).
Contact Information
Questions about this privacy policy? Concerns about your data? Requests to exercise your privacy rights?
Data Controller: Justin Kowarsch (writing as Ernest Sludge)
Email: ernest@thesludge.report
Address: [Available upon request for legitimate privacy inquiries]
Please allow reasonable time for responses, as privacy inquiries compete with urgent matters like monitoring corporate dysfunction trends and maintaining our coffee supply.
Legal Disclaimer
This privacy policy is designed to comply with applicable privacy laws including GDPR, CCPA, and other relevant regulations. However, privacy law is complex and evolving. This policy represents our good faith effort at compliance and transparency.
For specific legal advice about privacy rights, consult a qualified attorney. For specific advice about surviving corporate bureaucracy, read our blog posts.
Effective Date: This policy is effective as of the date listed above and applies to all information collected on or after that date.
Remember: In the grand theater of corporate surveillance, at least we're telling you about our cameras.