Skip to main content
Change Risk Intel
Change Risk Intel

Privacy Policy

How Change Risk Intel collects, uses, and protects your information — including Google Analytics, advertising, newsletter signups, and comments.

Last updated

This privacy policy explains how Change Risk Intel (“we”, “us”, the “site”) collects, uses, and protects information about visitors to changeriskintel.com. The site is published by Ennis Studio, based in the United States. This is our own policy — not a stock template — and it is written to reflect exactly what the site actually does today. When we change the site’s data practices, we update this page and bump the “Last updated” date at the top.

If you have questions about anything here, email privacy@changeriskintel.com.

Who this policy covers

This policy covers visitors to the public website only. It does not cover any product, API, or other service published under a separate domain by Ennis Studio.

What we collect and why

Analytics — Google Analytics 4 (GA4)

We use Google Analytics 4 to understand how the site is used in aggregate — for example, which articles get the most traffic, how visitors arrive, and whether pages load quickly enough. GA4 collects information such as pages viewed, referrer, approximate geographic location (city or region level, not street address), device and browser type, and an event stream.

We enable IP anonymization (“IP anonymization” / anonymize_ip: true) so that visitor IP addresses are truncated by Google before being stored. We do not use GA4’s Google Signals cross-device features or advertising-personalization signals.

Advertising — Google AdSense (and, in the future, other display ad networks)

The site is monetized in part by display advertising. When ads are rendered, the ad network — currently Google AdSense, and potentially additional networks such as Ezoic, Media.net, Mediavine, or Raptive as the site grows — may set its own cookies and collect information from your browser in order to serve ads and measure their performance.

Newsletter — Beehiiv

Our email newsletter is delivered via Beehiiv. If you subscribe, we (via Beehiiv) collect your email address and — optionally — any additional fields shown on the signup form. Beehiiv also records standard email engagement events such as opens and clicks so we can see whether the newsletter is useful. You can unsubscribe at any time using the link at the bottom of every email; that unsubscribes you from all newsletters we send.

We do not sell, rent, or share newsletter subscriber lists.

Comments — GitHub Discussions

Where comments are enabled on articles, they are powered by GitHub Discussions. Posting a comment requires you to sign in with a GitHub account; your username, avatar, and the content you post are handled by GitHub under GitHub’s privacy policies. We do not receive your GitHub password.

Contact forms and email

If you email us — for tips, corrections, advertising inquiries, DMCA notices, or anything else — we receive the content of your message and your email address. We use that information to reply and to keep a record of the conversation. For contact forms embedded on the site (for example on the contact page), submissions are processed by our contact-form provider, currently Formspree, which stores submission content and IP metadata for delivery and abuse prevention.

Server logs

Our hosting provider records standard access logs (URL, timestamp, approximate IP, user-agent, referrer) as part of normal operation. These are used for security, abuse prevention, and debugging, and are retained on a rolling short-term basis.

Cookies and similar technologies

The site uses cookies and similar technologies in three categories:

  • Strictly necessary — required for the site to function (for example, remembering your cookie preferences). These are always on.
  • Analytics — GA4 uses cookies to distinguish returning visitors and attribute traffic sources.
  • Advertising — ad networks may set cookies to serve and measure ads; see the advertising section above.

Where required by law, we display a cookie consent banner. In jurisdictions where you have the right to opt out of non-essential cookies, that banner is where you exercise it. You can also block or delete cookies directly in your browser.

For visitors in the European Economic Area, United Kingdom, and other jurisdictions with equivalent laws, our legal bases for processing are:

  • Legitimate interests — running and improving the site, security and abuse prevention, and delivering aggregate analytics.
  • Consent — non-essential cookies, personalized advertising where applicable, and newsletter subscriptions.
  • Contract / pre-contract steps — replying to inquiries you send us.

You have the right to request access to, correction of, or deletion of personal data we hold about you. For California residents, this includes rights under the California Consumer Privacy Act (CCPA) as amended by the CPRA, including the right to know, delete, and opt out of “sale” or “sharing” of personal information. We do not sell personal information as that term is commonly understood; ad-network data-sharing may qualify as “sharing” for purposes of CPRA, and you can opt out via the cookie banner or via Google Ads Settings.

To exercise any of these rights, email privacy@changeriskintel.com from the address you subscribed with, or clearly identify the URL and context. We aim to respond within 30 days.

Data retention

  • Analytics data — retained per the retention setting configured in GA4 (currently 14 months).
  • Newsletter subscribers — retained until you unsubscribe or ask us to delete your record.
  • Comments — retained by GitHub for as long as the discussion is active.
  • Contact-form and email correspondence — retained for a reasonable period for reference and audit, typically up to 24 months, unless a legal obligation requires longer.

International transfers

We are based in the United States. If you access the site from another country, information about your visit will be processed in the United States or in any other country where our service providers (Google, Beehiiv, GitHub, Formspree, our hosting provider) operate. Where required, our providers rely on Standard Contractual Clauses or equivalent safeguards to protect international transfers.

Children

The site is not directed at children under 13 and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal information, email privacy@changeriskintel.com and we will delete it.

Changes to this policy

If we materially change how we handle information, we will update this page and, where appropriate, notify newsletter subscribers by email before the change takes effect. The “Last updated” date at the top of the page always reflects the most recent revision.

Contact