First Job Out of College
Privacy Policy

Privacy Policy

Last updated: May 4, 2026

The short version. If you read posts and never sign up for anything, the only data this site collects is the standard web-server-and-CDN logs everybody collects (IP, browser, page viewed). If you sign up for the newsletter, your email goes to ConvertKit, who sends you the emails. If you post a comment, the comment system stores your name, the email you used to sign in, and what you wrote. That's it. We don't sell your data. We don't run ad networks. You can ask us to delete anything we have on you and we will.

What we collect

When you read the site

Standard server logs and Cloudflare CDN logs. These include IP address, user-agent string (browser + OS), the URL you requested, referrer, and a timestamp. We use this to keep the site online, detect abuse, and understand which posts are useful to people. We don't try to identify individual readers from this data.

We also use Google Analytics 4 to understand aggregate traffic — page views, time on page, referral source, country, and which posts are popular. Google Analytics sets a cookie on your browser. We've configured it with IP anonymization on (your IP address has its last octet dropped before Google sees it), and we don't link analytics data to anything else we know about you. To opt out at the browser level, install Google's official opt-out add-on or use a tracker-blocking browser extension.

When you subscribe to the newsletter

We collect the email address you provide and the date you signed up. The email is stored by Kit (formerly ConvertKit), who handles delivery. ConvertKit also tracks which emails you open and what you click — that's how email platforms work, and it helps us write better issues. You can unsubscribe with a one-click link at the bottom of every email; that removes you from our list immediately.

When you comment

Comments are hosted by a self-managed instance of Remark42 running at comments.firstjoboutofcollege.com. To comment, you sign in either anonymously (with just a display name) or via Google OAuth. We store the display name, the comment text, and the user identifier returned by your sign-in method. If you sign in with Google, we receive your name, email, and profile picture URL — we never see your Google password.

Cookies and local storage

The site itself stores one preference in your browser's local storage: which color theme (light or dark) you've chosen. The comment system uses a session cookie to keep you signed in (the JWT cookie at comments.firstjoboutofcollege.com). Google Analytics sets a measurement cookie (_ga) — typically valid for 24 months — to count unique visitors. Cloudflare may set its own cookies for security and DDoS protection. We don't run any third-party advertising networks.

Why we collect it

  • Server logs: uptime, debugging, abuse detection.
  • Newsletter email: to send you the newsletter you signed up for.
  • Comment data: to display comments and let you participate in the conversation.
  • Theme preference: so the site remembers whether you prefer light or dark mode.

We don't sell, rent, or trade any of this data. We don't run ad networks. We don't use this data to retarget you on other sites.

Who has access

The site is operated by Mike Halpert. The data above is accessible to Mike and the small set of services that store or process it on our behalf:

  • Cloudflare — CDN, DNS, security. Sees request metadata in transit.
  • Kit (ConvertKit) — newsletter delivery. Stores subscriber emails and engagement metrics.
  • Remark42 — self-hosted on our server. Stores comment text, display names, and OAuth user IDs. No third party gets this data.
  • Google Analytics — aggregate site analytics with IP anonymization on. Stores a cookie to count unique visitors.
  • Google OAuth — only if you choose Google sign-in for comments. Google handles the auth flow and shares basic profile data with us per their OAuth policy.

How long we keep it

  • Server / CDN logs: rotated within 30 days.
  • Newsletter subscriptions: retained until you unsubscribe, then removed within 30 days.
  • Comments: retained indefinitely as part of the public conversation. You can request deletion of any comment you posted.
  • Theme preference: lives in your browser; clearing site data removes it.

Your rights

Regardless of where you live, you can:

  • Ask what data we have about you.
  • Ask us to correct or delete it.
  • Unsubscribe from the newsletter at any time.
  • Request that a comment you posted be deleted.

For California residents (CCPA) and EU/UK residents (GDPR), the same rights apply, plus formal data-portability and objection-to-processing rights. To exercise any of these, email [email protected] with the subject line "Privacy request" and we'll respond within 30 days.

Children

The site is aimed at adults entering the workforce. We don't knowingly collect data from anyone under 13. If you believe a child has subscribed or commented, email us and we'll remove the record.

Changes to this policy

When this policy changes, we update the "Last updated" date at the top and post a note on the homepage for at least 30 days. We won't retroactively apply weaker protections to data we've already collected without telling you.

Contact

Privacy questions, deletion requests, or anything else: [email protected].

This policy is written in plain English to be useful, not as legal advice. If you need a formal legal review, talk to a lawyer.