EFF Privacy Policy
DATED 2011-06-22 · VERSION 20111006_rev01 · COMPARED WITH 20110721_rev01 · ARCHIVE SNAPSHOT
Full text changes — 20110721_rev01 to 20111006_rev01
COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED
| 11 | 11 | After 48 hours, EFF anonymizes, obfuscates, aggregates and/or deletes unneeded technical information. Circumstances in which EFF may need to retain technical information longer than 48 hours include when we believe it is reasonably necessary for conducting site testing, diagnosis of technical problems, and defending against attacks on the site. In those instances we will delete the information as soon as it is apparent the information is no longer needed for the purpose for which it was kept. For more information on EFF's position on data logging and techniques we use to anonymize, obfuscate, aggregate and delete information, see our [Best Practices for Online Service Providers](http://www.eff.org/wp/osp). |
| 12 | 12 | |
| 13 | 13 | We do not use persistent cookies on this site unless you log into the Action Center or use "Remember Me" or other similar functionality. We may use session cookies from time to time. Session cookies expire when you close your browser. You can set your browser to refuse cookies, and use Tor if you wish to keep your IP number and other technical information anonymous. |
| 14 | 14 | |
| 15 | 15 | In addition, EFF collects and retains information you submit to us. It is up to you whether to submit information to us, and how much information to provide. If you choose to become an EFF member or register for the EFF Action Center, we ask for your name, title, email address, city, state, postal code, country of residence, and phone number, and we may invite you to select a password. For online donors and shoppers, we also ask for your credit card number. We also maintain records of our members' use of the Action Center, and you may wish to indicate your particular interests in your Action Center profile. If you use the EFF Shop, you are asked to provide personal information, such as a shipping address, necessary to complete your transaction. |
| 16 | 16 | |
| 17 | If you enable the Decentralized Observatory feature of HTTPS Everywhere, we will collect copies of the certificates of SSL/TLS servers that you connect to. | |
| 17 | If you enable the Decentralized Observatory feature of HTTPS Everywhere, we will collect copies of the certificates of SSL/TLS servers that you connect to. In order to help locate man-in-the-middle attacks, the Decentralized Observatory may also log [which ISP](https://secure.wikimedia.org/wikipedia/en/wiki/Autonomous_system_/(Internet/)) you observed the certificate through, although you can disable this behavior in the Observatory settings window. | |
| 18 | 18 | |
| 19 | 19 | We may ask for additional personal information when you provide feedback or comments, or otherwise communicate with us. We are pleased to receive anonymous donations, but please note that your personal information is required if you choose to donate using our online form. |
| 20 | 20 | |
| 21 | 21 | If you choose to subscribe to EFFector, our free electronic newsletter, we collect your email address, and, if you choose to provide it, a zip or postal code. |
| 22 | 22 | |
| 23 | 23 | From time to time, we may ask for personal information on other portions of the site, such as asking you to sign a petition, participate in a contest, or provide prior art for a patent busting project. |
| 55 | 55 | While EFF endeavors to provide the highest level of protection for your information, we may disclose personally identifiable information about you to third parties in limited circumstance, including: (1) with your consent; or (2) when we have a good faith belief it is required by law, such as pursuant to a subpoena or other judicial or administrative order. |
| 56 | 56 | |
| 57 | 57 | If we are required by law to disclose the information that you have submitted, we will attempt to provide you with notice (unless we are prohibited) that a request for your information has been made in order to give you an opportunity to object to the disclosure. We will attempt to provide this notice by email, if you have given us an email address, or by postal mail if you have entered a postal address. If you do not challenge the disclosure request, we may be legally required to turn over your information. |
| 58 | 58 | |
| 59 | 59 | In addition, we will independently object to requests for access to information about users of our site that we believe to be improper. |
| 60 | 60 | |
| 61 | If you enable the Decentralized Observatory feature of HTTPS Everywhere, we publish the copies of the certificates of SSL/TLS servers that you connect to. These certificates generally do not identify you, and we will take reasonable steps to try to avoid collecting certificates that may be used to identify you. | |
| 61 | If you enable the Decentralized Observatory feature of HTTPS Everywhere, we publish the copies of the certificates of SSL/TLS servers that you connect to. These certificates generally do not identify you, and we will take reasonable steps to try to avoid collecting certificates that may be used to identify you. In some instances, we may also publish information about which ISPs' networks these certificates were observed on. | |
| 62 | 62 | |
| 63 | 63 | ## Updating or Removing Your Information |
| 64 | 64 | |
| 65 | 65 | You may choose to correct, update, or delete the membership information you have submitted to us by sending an email requesting changes to [membership@eff.org](mailto:membership@eff.org). Furthermore, if we inadvertently collect more personal information than intended, we endeavor to delete the extraneous information. However, please understand that deleted information may continue to persist on backup media. |
| 66 | 66 | |
| 67 | 67 | ## Changes to Our Policies |