This page sets out what BrokeAndBuff collects when you visit, why it is collected, and what you can ask us to do about it.
What this covers
What follows applies to this site alone. Sites we link to run their own policies, and any social platform we post on collects under its own terms, not ours.
What the site collects
Loading a page transmits technical data: your IP address, the browser and device you use, which pages you open, the site you came from, and how long you read. We keep it in aggregate and never link it to a person.
The only information you hand over directly is an email address (if you subscribe) and the content of any message you send through the form.
How the data is used
- Serve the pages and diagnose faults when something breaks.
- See in bulk which budget high-protein meals pages earn their place and which do not.
- Write back when you contact us.
- Send the newsletter, to subscribers only.
- Satisfy a legal requirement where one exists.
Third parties
Four outside services touch this data, each under its own privacy policy: Google Analytics (aggregate statistics), Google AdSense (advertising), our hosting provider (server logs), and our email provider (newsletter delivery). They may set their own cookies.
Data passed to the third parties named here crosses to the United States, where those companies operate. The transfer mechanisms are theirs and are documented in their own policies.
Newsletter data
The only thing a subscription requires is an address. It is not sold, not lent, and not used for anything other than the newsletter. Unsubscribing takes it off the list.
On what basis
European and United Kingdom law asks for a lawful basis, so here they are: consent for anything you opt into, legitimate interest for the operation and aggregate measurement of the site, and legal obligation where applicable. Consent is reversible on request.
How long anything lasts
How long things last: hosting logs are rotated by the host, analytics data expires according to the retention setting in Google Analytics, newsletter addresses live until you leave, and contact-form messages are deleted once the conversation is over.
What you can ask for
Ask and you will get a copy of what is held on you, a correction, or a deletion. The unsubscribe link works the first time. Cookie choices belong to your browser. Where the law grants more — EEA, UK, California — we apply the same standard to every reader rather than sorting by geography.
What never happens
Nothing here is sold, and nothing is handed to a third party for its own marketing. No broker is involved. For California readers, that is the substance of the CCPA opt-out: the sale that the right protects against does not happen.
Automated decisions
There is no automated decision-making and no significant profiling. The aggregate statistics described above are counts, not judgements about individuals.
Readers under 13
Readers under 13 are not the audience for BrokeAndBuff and we do not knowingly hold their data. A message from a parent or guardian is enough to have anything of the sort erased.
Safeguards
Sensible precautions are taken on the technical and the organisational side. Anyone claiming a website is perfectly secure is selling something.
Raising a problem
Raise a problem with us through the contact page and it gets dealt with. That said, nothing obliges you to come to us first: your national supervisory authority takes complaints directly.
Changes to this page
When this policy changes, the date at the top changes with it. Material changes are announced on the site.
Contact
Questions about any of this go through our contact page.