Privacy & Security

Effective date: Classified. Last updated: When we got around to it.

Overview

Duffel Labs is committed to protecting your personal information with the same diligence the Department of Defense applies to protecting its other IT systems. We recognize this is not particularly reassuring.

This page describes what information we collect, how we use it, and the measures we take to ensure it is handled in accordance with applicable laws, regulations, and a general sense of obligation.

Information We Collect

When you visit Duffel Labs, we automatically collect standard server log data, including your IP address, browser type, referring URL, and time of visit. This is the same data collected by virtually every website on the internet. We mention it here because a policy page with nothing on it looks suspicious.

If you subscribe to notifications via email, we collect the email address you provide. We do not collect your rank, MOS, duty station, GT score, or the number of days remaining on your enlistment, though we understand why you might assume otherwise.

Our interactive tools (the Pentagon Buzzword Generator, Navy SEAL Book Generator, DD-214 Fortune Teller, and Veteran Benefits Finder) process inputs locally in your browser. Generated briefings, book titles, fortunes, and benefits queries are not stored on our servers. The Pentagon has enough jargon without us archiving more of it.

Cookies

Duffel Labs uses cookies to support basic site functionality and analytics. These cookies do not contain personally identifiable information and cannot be used to determine your identity, your unit, or whether you are on a profile.

Third-party analytics services may place their own cookies. We have about as much control over this as a PFC has over the training schedule.

How We Use Your Information

Information collected through Duffel Labs is used exclusively for the following purposes:

Operating and improving the site and its tools. Delivering email notifications you have opted into. Generating aggregate, anonymized usage statistics (e.g., total briefings generated). Complying with applicable legal requirements.

We do not sell, rent, trade, or otherwise transfer your personal information to third parties. We do not share your information with recruiters, regardless of how close you are to your ETS date.

Data Retention

Server log data is retained for 90 days and then deleted. Email addresses are retained for as long as you remain subscribed. You may unsubscribe at any time by using the link provided in any notification email, or by submitting a written request to our Privacy Office, which is a laptop in a coffee shop.

Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your information. All data in transit is encrypted via TLS. Our infrastructure is hosted by reputable third-party providers who maintain SOC 2 compliance and have never, to our knowledge, been the subject of a Government Accountability Office audit.

Duffel Labs does not process, store, or transmit Controlled Unclassified Information (CUI), Classified National Security Information, or For Official Use Only (FOUO) material. If you are entering actual classified information into the Pentagon Buzzword Generator, please stop.

Third-Party Links

Duffel Labs may link to external websites, including official government resources, military service branch sites, and veteran benefits portals. Once you leave our site, you are subject to the privacy policies of those external sites. We are not responsible for their practices, their 508 compliance, or how long it takes their pages to load on NIPR.

Children's Privacy

Duffel Labs is not directed at children under 13 and does not knowingly collect information from minors. If you are under 13, you should not be using this site. If you are 17 and considering enlisting, the Veteran Benefits Finder may be of future interest.

Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or port your personal data. To exercise any of these rights, contact us at [email protected]. We will respond to verified requests within 30 days, which by government standards qualifies as instantaneous.

Changes to This Policy

We may update this policy from time to time to reflect changes in our practices, legal requirements, or the general entropy of the internet. Material changes will be posted on this page. We will not hold a formation to brief you on them.

Contact

Questions, concerns, or FOIA requests regarding this policy may be directed to [email protected]. Response times may vary based on operational tempo.