Privacy Policy

PRIVACY POLICY

Last updated: November 8, 2026

Welcome to DREADFUL.WORK. This policy outlines how personal and technical data are processed when accessing the site, technical ezine archives, and federated services, including our community communications platform Fluxer (fluxer.dreadful.work) and the Single Sign-On system (Authentik at idp.dreadful.work).

1. Data Controller and Purpose

dreadful.work is an independent, non-commercial engineering infrastructure focused on systems administration, applied telecommunications, and operational security. Data is processed solely to provide secure authentication, maintain platform stability, and operate community services.

Administrator Contact: [email protected]

2. Information Collected

A. Federated Single Sign-On (Authentik & Google OAuth)

When authenticating to community services via Authentik or third-party OAuth providers (Google):

User Identifier (Sub): A unique identifier generated by the OAuth provider.
Email Address: Used to identify and verify your account in the Authentik identity directory.
Name / Handle: Display name or username associated with your profile.

We do not request, access, or store passwords from external providers (e.g. Google), nor do we access files, contacts, or secondary account data.

B. Technical Logs and Network Diagnostics

To maintain operational security, mitigate denial-of-service attempts, and protect infrastructure integrity, system servers may temporarily log:

Source IP address
Request timestamp
Client / Browser User-Agent
Target resource / API endpoint

These logs are collected solely for security auditing and operational diagnostic purposes and are routinely rotated and purged.

3. Core Principles: Zero-Tracking & No Commercialization

No Advertising Trackers: We do not use Google Analytics, advertising pixels, or behavioral profiling trackers.
No Data Brokering: We do not sell, rent, monetize, or transfer account data to commercial entities or third parties.
Data Minimization: We strictly collect the minimum data necessary to establish secure sessions and deliver services.

4. Data Retention and Account Deletion

Account records persist as long as the account remains in active use. Users may request account and metadata termination at any time by contacting the administration, upon which all associated records are purged from the identity directory.

In accordance with applicable privacy frameworks (including EU Regulation 2016/679 - GDPR), you have the right to inspect, correct, export, or request immediate erasure (right to be forgotten) of your data.

To exercise these rights, email [email protected] or reach out via our community on Fluxer.