From 59a396f187a76702f40d4ce1e417c0b1ddfa2363 Mon Sep 17 00:00:00 2001 From: Jonah Aragon Date: Tue, 26 Apr 2022 21:31:01 -0500 Subject: [PATCH] Update privacy-policy.en.md --- docs/about/privacy-policy.en.md | 82 ++++++++------------------------- 1 file changed, 19 insertions(+), 63 deletions(-) diff --git a/docs/about/privacy-policy.en.md b/docs/about/privacy-policy.en.md index 8018416286..ac0cc4f684 100644 --- a/docs/about/privacy-policy.en.md +++ b/docs/about/privacy-policy.en.md @@ -2,41 +2,24 @@ title: "Privacy Policy" icon: material/file-search --- - -## Who is Privacy Guides? - Privacy Guides is a community project operated by a number of active volunteer contributors. The public list of team members [can be found on GitHub](https://github.com/orgs/privacyguides/people). -## How does Privacy Guides collect data about me? - -We collect data: - -* When you browse a website, forum, or other Privacy Guides service. -* When you create an account on a Privacy Guides service. -* When you post, send private messages, or otherwise participate on a Privacy Guides service. - -This data will be collected regardless of browser, device, or app used to access our services. We do not buy or otherwise receive data from data brokers. +## Data We Collect From Visitors -## What data do you collect and why? +The privacy of our website visitors is important to us, so we do not track any individual people. As a visitor to our website: -### We collect data about visits to our websites +- No personal information is collected +- No information such as cookies is stored in the browser +- No information is shared with, sent to or sold to third-parties +- No information is shared with advertising companies +- No information is mined and harvested for personal and behavioral trends +- No information is monetized -When you visit a Privacy Guides website or service, regardless of whether you have an account or not, the website may use cookies, server logs, and other methods to collect the following data: +We run a self-hosted version of [Plausible Analytics](https://plausible.io) to collect some anonymous usage data for statistical purposes. The goal is to track overall trends in our website traffic, it is not to track individual visitors. All the data is in aggregate only. No personal data is collected. -* What pages you visit, -* Your anonymized IP address: We anonymize the last 3 bytes of your IP, e.g. 192.xxx.xxx.xxx. +Data collected includes referral sources, top pages, visit duration, information from the devices (device type, operating system, country and browser) used during the visit and more. -We use this data to: - -* Optimize websites and services, so that they are quick and easy to use, -* Diagnose and debug technical errors, -* Defend websites and services from abuse and technical attacks. - -This data is processed under our [Legitimate Interest](https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/legitimate-interests/when-can-we-rely-on-legitimate-interests/) to provide our services to you in a an efficient and secure manner and to ensure the legal compliance and proper administration of our business. - -Raw data such as pages visited, anonymized visitor IPs, and visitor actions will be retained for 60 days. In special circumstances—such as extended investigations regarding a technical attack—we may preserve logged data for longer periods for analysis. We store aggregate statistics about use of the websites and services we host indefinitely, but those statistics do not include data identifiable to you personally. - -### We collect account data +## Data We Collect From Account Holders On some websites and services we provide, many features may require an account. For example, an account may be required to post and reply to topics on a forum platform. @@ -46,47 +29,22 @@ We use your account data to identify you on the website and to create pages spec We use your email to: -* Notify you about posts and other activity on the websites or services. -* Reset your password and help keep your account secure. -* Contact you in special circumstances related to your account. -* Contact you about legal requests, such as DMCA takedown requests. +- Notify you about posts and other activity on the websites or services. +- Reset your password and help keep your account secure. +- Contact you in special circumstances related to your account. +- Contact you about legal requests, such as DMCA takedown requests. On some websites and services you may provide additional information for your account, such as a short biography, avatar, your location, or your birthday. We make that information available to everyone who can access the website or service in question. This information is not required to use any of our services and can be erased at any time. We will store your account data as long as your account remains open. After closing an account, we may retain some or all of your account data in the form of backups or archives for up to 90 days. -## Who is my data shared with? - -When you use services provided by Privacy Guides your data is processed by our web hosting provider, Aragon Ventures LLC, in order to facilitate their hosting obligations. Aragon Ventures LLC may collect and use your data as described in their privacy statement at [https://aragon.ventures/privacy](https://aragon.ventures/privacy/). +## Contacting Us -Your account data, posts, and other activities on Privacy Guides services is shared with others as mentioned in the section about account data. - -## Where is my data stored? - -The primary datacenter for Privacy Guides is located in Finland. Some websites, services, or backups may reside in datacenters in multiple jurisdictions, including the United States and the European Union. - -## Is Privacy Guides GDPR compliant? - -We respect privacy rights under [Regulation (EU) 2016/679](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=uriserv:OJ.L_.2016.119.01.0001.01.ENG), the European Union’s General Data Protection Regulation (GDPR). Information that GDPR requires us to give can be found throughout this document. - -## What are my data protection rights? - -We would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following: - -* **The right to access** – You have the right to request access to your personal data or copies of your personal data from us. We may charge you a small fee for providing a copy of your data. -* **The right to rectification** – You have the right to request that we correct any information you believe is inaccurate or incomplete. -* **The right to erasure** – You have the right to request that we erase your personal data, under certain conditions. -* **The right to restrict processing** – You have the right to request that we restrict the processing of your personal data, under certain conditions. -* **The right to object to processing** – You have the right to object to our processing of your personal data, under certain conditions. -* **The right to data portability** – You have the right to request that we transfer the data that we have collected to another organization or directly to you under certain conditions. - -## How can I contact the Privacy Guides team about privacy? - -The Privacy Guides team generally does not have access to personal data outside of limited access granted via some moderation panels. Inquiries regarding your personal information should be sent directly to the data controller for these services, Aragon Ventures LLC: +The Privacy Guides team generally does not have access to personal data outside of limited access granted via some moderation panels. Inquiries regarding your personal information should be sent directly to: ``` Jonah Aragon -Services Administrator, Aragon Ventures LLC +Services Administrator jonah@privacyguides.org ``` @@ -94,9 +52,7 @@ For all other inquiries, you can contact any member of our team. For complaints under GDPR more generally, European Union users may lodge complaints with their local data protection supervisory authorities. -## How can I find out about changes to this document? - -This version of our privacy statement took effect April 4th, 2022. +## About This Policy We will post any new versions of this statement [here](privacy-policy.en.md). We may change how we announce changes in future versions of this document. In the meantime we may update our contact information at any time without announcing a change. Please refer to the [Privacy Policy](privacy-policy.en.md) for the latest contact information at any time.