EFF Privacy Policy

ARCHIVED 2025-05-01, DATE APPROXIMATE · VERSION 20250501_rev01 · COMPARED WITH 20220802_rev01

Full text changes — 20220802_rev01 to 20250501_rev01

COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED

20	20	- defending against attacks to the site,
21	21
22	22	- handling a spike in traffic or other abnormal, short-term circumstances, or
23	23
24	24	- research projects (in anonymized form) that serve our overall mission to defend freedom online.
25	25
26		In those and similar situations we will delete the information as soon as it is apparent that the information is no longer needed for the purpose for which it was retained. For more information on EFF's position on data logging and techniques we use to anonymize, obfuscate, aggregate and delete information, see our [Best Practices for Online Service Providers](https://www.eff.org/wp/osp).
	26	In those and similar situations we will delete the information as soon as it is apparent that the information is no longer needed for the purpose for which it was retained. For more information on EFF's position on data logging and techniques we use to anonymize, obfuscate, aggregate and delete information, see our [Best Practices for Online Service Providers](https://www.eff.org/pages/online-privacy-nonprofits).
27	27
28	28	How EFF Internal Analytics Works: EFF endeavors to gather sufficient information for analyzing our website and how visitors move within it without compromising the privacy of our visitors. EFF's internal analytical logging involves logging for up to seven days a single byte of the IP address, as well as the referrer page, time stamp, page requested, user agent, language header, website visited, and a hash of all of this information. After seven days we keep only aggregate information from these logs. We also geolocate IP addresses before anonymizing them and store only the country.
29	29
30	30	Cookies: We do not use persistent ID cookies on this site except where you click "remember me" or are logged in, as you can be for the Action Center. We use session cookies on certain portions of the website. Session cookies expire when you close your browser. You can use [Tor](https://www.torproject.org/) if you wish to keep your connection information anonymous, but please note that you can still be identified to EFF if you log in.
31	31
32	32	Voluntarily Submitted Information: In addition, EFF collects and retains information you voluntarily submit to us. It is up to you whether to submit information to us, and how much information to provide. If you choose to become an EFF member, use the EFF Shop, otherwise donate to EFF or use our Action Center, we may ask for identifying information such as your name, email address, mailing address and phone number and will retain that information. For online donors and shoppers, we also ask for your credit card number or other payment information. For the Action Center, we maintain aggregate information about participation in the action campaigns, and, if you agree, we will also maintain account-specific records of your use of the Action Center. If you use the EFF Shop, you are asked to provide personal information, such as a shipping address, necessary to complete your transaction.