Electronic Frontier Foundation EFF Privacy Policy changes — 20150501_rev01

53

51

**Publication by EFF:** If you provide information for publication we may use your name and contact information you have provided to us to provide you with attribution.

54

52

55

53

**Other activities:** We may run surveys, contests, or similar activities through this site. Such information will be used for the purposes for which it was collected. We use the information provided through our online shop to fulfill your order, and address any problems that might arise. We also look at technical information to diagnose problems with or consider improvements to our servers or related technologies and to administer eff.org and other websites we host or provide.

56

54

57

55

## Third-Party Service Providers to EFF

58

56

59

Portions of the eff.org site, including some of our individual action alert webpages, are operated by third-parties, such as grassroots campaign service providers. These service providers may place session cookies on your computer. EFF's service providers may also log standard technical information, such as the numerical Internet Protocol (IP) address of the computer you are using; the browser software you use and your operating system; the date and time you access our site; and the Internet address of the website from which you linked directly to our site. Our service providers may also store and organize the personal information collected through this site on our behalf.

57

Portions of the eff.org site, including some of our individual action alert webpages, are operated by third-parties, such as grassroots campaign service providers. From time to time, EFF will use third party hosting providers, such as cloud hosting services-for example, when the expected volume of traffic is not scalable. EFF also uses a third-party credit card processor. These service providers may place session cookies on your computer. EFF's service providers may also log standard technical information, such as the numerical Internet Protocol (IP) address of the computer you are using; the browser software you use and your operating system; the date and time you access our site; and the Internet address of the website from which you linked directly to our site. Our service providers may also store and organize the personal information collected through this site on our behalf.

60

58

61

EFF also uses a third-party credit card processor and hosting providers.

62

63

59

For all of EFF's service providers, hosting providers and credit card processors and any other providers we may use in the future, the information collected from EFF users remains protected by the terms of our agreements with those providers and we will ensure that the information to be kept confidential and disclosed only to employees who require such access in the course of their assigned duties. EFF also requires all of our third-party service providers to notify EFF if they receive legal process seeking information about visitors to EFF's website.

64

60

65

61

EFF may change the specific third-party providers from time to time, and will transfer stored information to any new provider subject to similar restrictions and agreements. From time to time, EFF may work with third-party consultants or other service providers who may have access to personally identifiable information. In such cases, we will restrict their use of personally identifiable information in accordance with their assigned tasks.

66

62

67

63

## Third-Party Services and APIs

68

64

69

EFF's site also provides links to or interacts with a wide variety of third-party websites, including interactive links to sites like social media, telephone calling services,, mapping services, or video hosting websites, often via application programming interfaces ([APIs](https://en.wikipedia.org/wiki/Api)). EFF is not responsible for, and does not have any control over, the privacy practices or the content of such third parties.

65

EFF's site also provides links to or interacts with a wide variety of third-party websites, including interactive links to sites like social media, telephone calling services, mapping services, or video hosting websites, often via application programming interfaces ([APIs](https://en.wikipedia.org/wiki/Api)). EFF is not responsible for, and does not have any control over, the privacy practices or the content of such third parties.

70

66

71

67

We encourage users to read the privacy policies of any website visited via links from or interactions with the EFF website. Where appropriate, we will provide specific notice of these third-party services at the point of interaction. It is our policy not to include third-party resources when users initially load our web pages, but we may dynamically include them later after giving the user a chance to choose to interact with them. If you believe a third-party resource is automatically loading, please let us know so we can address it.

72

68

73

69

## Disclosure of Your Information

74

70

75

71

While EFF endeavors to provide the highest level of protection for your information, we may disclose personally identifiable information about you to third parties in limited circumstances, including: (1) with your consent; or (2) when we have a good faith belief it is required by law, such as pursuant to a subpoena or other judicial or administrative order.

27	27	How Cryptolog Works: Cryptolog takes the IP address portion of the request getting logged and encrypts it, as well as a chunk of random data (the salt), using a cryptographic hash function. The salt changes every night, which should result in making it very difficult for us, or anyone else, to recover IP addresses from our logs.
28	28
29	29	How EFF Internal Analytics Works: EFF endeavors to gather sufficient information for analyzing our website and how visitors move within it without compromising the privacy of our visitors. EFF's internal analytical logging, which is separate from the Cryptolog logs, involves logging for up to seven days a single byte of the IP address, as well as the referrer page, time stamp, page requested, user agent, language header, website visited, and a hash of all of this information. After seven days we keep only aggregate information from these logs. We also geolocate IP addresses before anonymizing them and store only the country.
30	30
31	31	Cookies: We do not use persistent ID cookies on this site except where you click "remember me" or are logged in, as you can be for the Action Center. We use session cookies on certain portions of the website. Session cookies expire when you close your browser. You can use [Tor](https://www.torproject.org/) if you wish to keep your connection information anonymous, but please note that you can still be identified to EFF if you log in.
32	32
33		We do not use persistent ID cookies on this site. We use session cookies on certain portions of the website. Session cookies expire when you close your browser. You can use if you wish to keep your connection information anonymous.
34
35	33	Voluntarily Submitted Information: In addition, EFF collects and retains information you voluntarily submit to us. It is up to you whether to submit information to us, and how much information to provide. If you choose to become an EFF member, use the EFF Shop, otherwise donate to EFF or use our Action Center, we may ask for identifying information such as your name, email address, mailing address and phone number and will retain that information. For online donors and shoppers, we also ask for your credit card number. If you agree, we will also maintain records of your use of the Action Center. If you use the EFF Shop, you are asked to provide personal information, such as a shipping address, necessary to complete your transaction.
36	34
37	35	We may ask for additional personal information when you provide feedback or comments, or otherwise communicate with us. We are pleased to receive anonymous donations in the mail, but please note that your personal information is required if you choose to donate using our online form.
38	36
39	37	From time to time, we may ask for personal information on other portions of the site, such as asking you to sign a petition, participate in a contest, or provide prior art for a patent busting project.
40	38
53	51	Publication by EFF: If you provide information for publication we may use your name and contact information you have provided to us to provide you with attribution.
54	52
55	53	Other activities: We may run surveys, contests, or similar activities through this site. Such information will be used for the purposes for which it was collected. We use the information provided through our online shop to fulfill your order, and address any problems that might arise. We also look at technical information to diagnose problems with or consider improvements to our servers or related technologies and to administer eff.org and other websites we host or provide.
56	54
57	55	## Third-Party Service Providers to EFF
58	56
59		Portions of the eff.org site, including some of our individual action alert webpages, are operated by third-parties, such as grassroots campaign service providers. These service providers may place session cookies on your computer. EFF's service providers may also log standard technical information, such as the numerical Internet Protocol (IP) address of the computer you are using; the browser software you use and your operating system; the date and time you access our site; and the Internet address of the website from which you linked directly to our site. Our service providers may also store and organize the personal information collected through this site on our behalf.
	57	Portions of the eff.org site, including some of our individual action alert webpages, are operated by third-parties, such as grassroots campaign service providers. From time to time, EFF will use third party hosting providers, such as cloud hosting services-for example, when the expected volume of traffic is not scalable. EFF also uses a third-party credit card processor. These service providers may place session cookies on your computer. EFF's service providers may also log standard technical information, such as the numerical Internet Protocol (IP) address of the computer you are using; the browser software you use and your operating system; the date and time you access our site; and the Internet address of the website from which you linked directly to our site. Our service providers may also store and organize the personal information collected through this site on our behalf.
60	58
61		EFF also uses a third-party credit card processor and hosting providers.
62
63	59	For all of EFF's service providers, hosting providers and credit card processors and any other providers we may use in the future, the information collected from EFF users remains protected by the terms of our agreements with those providers and we will ensure that the information to be kept confidential and disclosed only to employees who require such access in the course of their assigned duties. EFF also requires all of our third-party service providers to notify EFF if they receive legal process seeking information about visitors to EFF's website.
64	60
65	61	EFF may change the specific third-party providers from time to time, and will transfer stored information to any new provider subject to similar restrictions and agreements. From time to time, EFF may work with third-party consultants or other service providers who may have access to personally identifiable information. In such cases, we will restrict their use of personally identifiable information in accordance with their assigned tasks.
66	62
67	63	## Third-Party Services and APIs
68	64
69		EFF's site also provides links to or interacts with a wide variety of third-party websites, including interactive links to sites like social media, telephone calling services,, mapping services, or video hosting websites, often via application programming interfaces ([APIs](https://en.wikipedia.org/wiki/Api)). EFF is not responsible for, and does not have any control over, the privacy practices or the content of such third parties.
	65	EFF's site also provides links to or interacts with a wide variety of third-party websites, including interactive links to sites like social media, telephone calling services, mapping services, or video hosting websites, often via application programming interfaces ([APIs](https://en.wikipedia.org/wiki/Api)). EFF is not responsible for, and does not have any control over, the privacy practices or the content of such third parties.
70	66
71	67	We encourage users to read the privacy policies of any website visited via links from or interactions with the EFF website. Where appropriate, we will provide specific notice of these third-party services at the point of interaction. It is our policy not to include third-party resources when users initially load our web pages, but we may dynamically include them later after giving the user a chance to choose to interact with them. If you believe a third-party resource is automatically loading, please let us know so we can address it.
72	68
73	69	## Disclosure of Your Information
74	70
75	71	While EFF endeavors to provide the highest level of protection for your information, we may disclose personally identifiable information about you to third parties in limited circumstances, including: (1) with your consent; or (2) when we have a good faith belief it is required by law, such as pursuant to a subpoena or other judicial or administrative order.
89	85	## Security
90	86
91	87	EFF employs industry standard security measures to protect the loss, misuse, and alteration of the information under our control. EFF has turned on [HTTPS](https://en.wikipedia.org/wiki/HTTP_Secure) by default.
92	88
93	89	Although we make good faith efforts to store information collected by EFF in a secure operating environment, we cannot guarantee complete security. Information collected by EFF will be maintained for a length of time appropriate to our needs. However, we generally do not retain credit card information unless you choose to have us make automatic monthly withdrawals from your account for your donation.
94	90
	91	_Updated_ _April 7, 2015 to reflect: 1) changes to the types of third-party service providers which may be used by EFF websites; 2) that third-party service providers may be used by any EFF site, not just those on the eff.org domain; and 3) to fix some typographical errors._
	92
95	93	_Updated_ _June 12, 2014 to reflect: 1) changes to reflect EFF's new Action Center, including the consequences for logging in or clicking "remember me," the identifying information we retain about logged in users and how to manage your account; 2) information use by purchasers in our Shop; 3) a specific section addressing EFF's use of Third Party Services and API's._
96	94
97	95	_Also recently updated May 1, 2014 to reflect: 1) introduction of EFF's separate Technology Projects Privacy Policy; 2) specifying that we will try to give prior notice to users when someone seeks their data from us and that we have actually challenged requests for access to our user information; 3) clarifying that we will ensure that information we give to third parties is protected, even if that is not through a specific agreement (it may, for example, be because the third party does not engage in logging)._
98	96
99	97	### Previous Privacy Policies
100	98
108	106
109	107	- [Oct 19 2011 - Jul 23 2012](https://www.eff.org/policy/2011/10/19)
110	108
111	109	- [Jul 24, 2012 - Apr 30, 2014](https://eff.org/policy/2012/07/24)
112	110
113	111	- [Apr 31, 2014 - Jun 12, 2014](https://eff.org/policy/2014/04/31)
	112
	113	- [Jun 13, 2014 - Apr 7, 2015](https://eff.org/policy/2014/06/13)

EFF Privacy Policy

Full text changes — 20150213_rev01 to 20150501_rev01