1. Who we are and what this covers
dadabase. is operated by FAFO Marketing, LLC, based in Iowa ("we", "us"). This policy covers our website at dadabase.co and our Slack app (together, the "Services"). It does not cover other websites we link to, or the services of the companies named in section 4, which have their own policies.
2. Information we collect
Information you give us
- Email subscription. If you subscribe, you enter your email address into a form provided by SendFox, our email service. SendFox collects it on our behalf and may send you a confirmation email.
- Messages to us. If you email us, we receive your email address and whatever you write.
- Slack app setup. When a Slack workspace installs the app, we receive the workspace ID and name, the Slack user ID of the person who installed it, and a secure access token that lets the app post. When an administrator schedules daily jokes, we store the channel ID, time, timezone, days and chosen categories. When someone rates a joke, we store the rating together with a one-way coded value derived from their Slack user ID, not the ID itself.
Information collected automatically
- Visit data. When you visit the website, our hosting provider, Cloudflare, receives your IP address, browser and device type, the pages you request, the date and time, and the page that referred you. This is used to deliver the site and keep it secure.
- Slack app activity. When you use the app, we receive the command or button you used, and your Slack workspace and user identifiers, so we can respond to you and enforce who can change settings. We keep anonymous counts of actions (for example, how many punchlines were revealed) that contain no names or identifiers.
- Diagnostic logs. We keep technical logs of events and error codes, which can include a Slack workspace ID, and never message content or access tokens.
What we do not collect
- The Slack app does not read your workspace's conversations or message history. It only sees the commands you type to it and the buttons you press.
- We do not ask for sensitive personal information such as government IDs, financial account details, health information or precise location.
- We do not run advertising trackers on the website, and we do not use the information from our website measurement tools to show you ads.
- The website does not set cookies of its own, except a temporary security cookie (about 10 minutes) that exists only while someone is installing the Slack app, to protect that sign-in, and is then deleted. The website measurement tool (see section 4), the embedded signup form and the bot protection behind it may use cookies or similar technology.
3. How we use information
- To provide the Services: show jokes, run the Slack app, post scheduled jokes and respond to your commands.
- To send you the emails you signed up for. You can unsubscribe at any time with the link in every email.
- To keep the Services secure, prevent abuse and fix problems.
- To answer your messages and requests.
- To understand, in aggregate, how the Services are used so we can improve them.
- To meet legal obligations and protect our rights.
4. Who we share information with
We share information only with the service providers below, who handle it to help us run the Services.
| Provider | What they do | Information involved |
|---|---|---|
| Cloudflare | Hosts the website, protects it from attacks, and hosts the Slack app and its database | Visit data; Slack app data described in section 2 |
| SendFox | Collects email subscriptions, sends our emails and manages the list | Your email address and subscription status |
| Google (Tag Manager and Analytics) | Measures, in aggregate, which pages are visited and how the website is used, so we can improve it. Tag Manager loads the measurement tool on every page of the website | Page visited, referring site, approximate location from the IP address, browser and device type, and cookie or similar identifiers, under Google's own privacy policy. Not loaded for browsers that send a Global Privacy Control signal |
| Cloudflare (Web Analytics) | Privacy-focused measurement of website traffic and performance, run by our host. It does not use cookies or track people across sites | Page visited, referring site, country, browser and device type, and page load timings |
| PostHog | Product analytics: which pages and features are used, so we can improve the website | Page visited, referring site, approximate location from the IP address, browser and device type, and a random identifier stored in your browser, under PostHog's own privacy policy. Not loaded for browsers that send a Global Privacy Control signal |
| Google (reCAPTCHA) | Bot protection on the signup form. It loads on pages that show the form, which includes joke pages | Device and interaction data, under Google's own privacy policy |
| Slack | The platform the Slack app runs on, when you choose to use it | Slack's own handling of your workspace, under Slack's policies |
We may also disclose information:
- when the law requires it, for example in response to a valid legal request;
- to protect the safety, rights or property of our users, the public or ourselves;
- as part of a merger, acquisition or sale of the business, in which case we will tell you if your information becomes subject to a different policy;
- with your direction or consent.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. In the past 12 months we have not sold or shared personal information in either of those ways.
5. How long we keep information
| Information | How long |
|---|---|
| Email subscription | Until you unsubscribe or ask us to delete it |
| Messages you send us | As long as needed to answer you and keep a reasonable record |
| Slack workspace details, access token, schedules and ratings | Until the app is removed from the workspace, then deleted immediately. If Slack revokes the app's access without telling us, within 30 days |
| Slack delivery log (which joke went to which channel) | 90 days, or until the app is removed |
| Slack activity dates (used for aggregate usage counts) | 120 days, or until the app is removed |
| Short-term technical records (duplicate-request checks, rate limits) | Up to 7 days |
| Anonymous usage counts | Indefinitely, because they contain no personal information |
| Hosting and security logs kept by Cloudflare | According to Cloudflare's own retention periods |
6. Your California privacy rights
If you live in California, the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA) gives you rights over your personal information. The law applies to businesses above certain size thresholds, and we may be below them. We honor these rights for California residents either way.
Categories of personal information we collect
In the past 12 months we have collected the following categories, for the purposes in section 3:
- Identifiers: email address, IP address, Slack workspace and user IDs, and workspace name.
- Internet or network activity: the pages requested on the website and how the Slack app was used.
- Professional information: a Slack workspace name, which may be the name of an employer or organization.
We did not collect sensitive personal information, biometric information or geolocation. We do not knowingly collect information about anyone under 16. We obtained the information from you, from your browser and from Slack. We disclosed identifiers and activity data only to the service providers in section 4, for the business purposes described there.
Your rights
- Know. Ask what personal information we collect, use and disclose about you, and request a copy.
- Delete. Ask us to delete personal information we hold about you, subject to legal exceptions.
- Correct. Ask us to fix inaccurate personal information.
- Opt out of sale or sharing. We do not sell or share personal information, so there is nothing to opt out of. We treat a browser's opt-out preference signal (such as Global Privacy Control) as a valid opt-out request; because we do not sell or share, nothing changes when we receive one.
- Limit use of sensitive personal information. We do not collect it.
- No retaliation. We will not deny you the Services, charge you differently or treat you worse for using these rights.
How to make a request
Email [email protected] and tell us what you would like to do. To protect you, we need to confirm that a request really comes from you. For most requests we will ask you to reply from the email address involved, and for Slack app data we may ask for your workspace name. We will not ask for more than we need. We aim to confirm receipt within 10 business days and respond within 45 days. If we need more time, we will tell you why and may take up to 45 more days.
You may use an authorized agent to make a request for you. We will need written proof that you gave them permission, and we may still contact you to confirm. If we decline a request, we will explain why.
California "Shine the Light"
California Civil Code section 1798.83 lets California residents ask which personal information a business shares with other companies for those companies' own direct marketing. We do not share personal information for that purpose.
7. Online tracking disclosures (California Online Privacy Protection Act)
- Do Not Track. We do not track you across other websites, so we do not change what we do when your browser sends a Do Not Track signal.
- Third parties. Our pages load Google Tag Manager, which we use for website measurement (Google Analytics), PostHog for product analytics, and the signup form, which is provided by SendFox and protected by Google reCAPTCHA. Those companies may collect information about your device and activity on our pages, under their own policies. We do not allow any other third parties to collect information about you through our website, and we do not use advertising or ad-targeting tags.
- Opting out of measurement. If your browser sends a Global Privacy Control signal, our pages do not load Google Tag Manager or PostHog at all. You can also block it with a browser setting or extension, or use Google's opt-out tools. The website works the same either way.
- Reviewing and changing your information. Email [email protected]. You can unsubscribe from our emails using the link in any of them.
8. Residents of other states
Some other U.S. states, including Colorado, Connecticut, Oregon, Texas, Utah and Virginia, give residents similar rights to access, correct and delete personal information. You can use the same email address to make a request, and we will treat it the same way.
9. Slack app
- The app is free. We do not show advertising in its messages, and we do not sell its data.
- The app asks Slack for the minimum permissions it needs: to run its command, to post messages, to post to the public channel an administrator chose, and to tell whether a person is a workspace administrator.
- Only workspace administrators and owners, and the person who installed the app, can schedule posts. Nothing posts automatically until one of them confirms a schedule.
- Removing the app from your Slack workspace deletes the information described in section 5 immediately.
- Slack handles your workspace under its own terms and privacy policy.
10. Email
We send email only to people who subscribed. Each email has an unsubscribe link and identifies who we are. If you believe you were subscribed without your agreement, tell us at [email protected] and we will remove you.
11. Security
We protect information with measures such as encryption of Slack access tokens, verification of every request that Slack sends us, access controls, and limiting what we collect and how long we keep it. No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your personal information, we will notify you as the law requires.
12. Children
The website is intended for people 13 and older, and the email list and Slack app are intended for adults. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, email [email protected] and we will delete it.
13. Where information is processed
The Services are intended for people in the United States. Our providers may process information in the United States and in other countries where they operate. If you use the Services from outside the United States, you understand your information will be handled as described here.
14. Changes to this policy
We may update this policy. When we do, we will change the effective date at the top. If a change is significant, we will make a reasonable effort to tell you, for example by a notice on the site or by email to subscribers.
15. Contact
Questions or requests: [email protected]
FAFO Marketing, LLC, operating dadabase.