|
|
(8 intermediate revisions by 6 users not shown) |
Line 1: |
Line 1: |
| :''A version of this policy was created by Andrew J. Myers (Dessan) on May 10, 2006. Suggested changes are still welcome on the [[DJBWiki_talk:Privacy_policy|talk page]]. | | {{DJBWiki policies}} |
| | :''A version of this policy was created by Andrew J. Myers (Dessan) on May 10, 2006. Suggested changes are still welcome on the talk page. |
|
| |
|
| :''Following adoption of suggested changes, this policy will be linked from the footer of every page.'' | | :''Following adoption of suggested changes, this policy will be linked from the footer of every page.'' |
Line 5: |
Line 6: |
| :''Please do not make major changes to this page without discussion.'' | | :''Please do not make major changes to this page without discussion.'' |
|
| |
|
| | | == Summary == |
| == Summary == | |
| | |
| If you only read the DJBWiki project websites, no more information is collected than is typically collected in server logs by web sites in general. | | If you only read the DJBWiki project websites, no more information is collected than is typically collected in server logs by web sites in general. |
|
| |
|
| If you contribute to the DJBWiki projects, you are '''publishing''' every word you post publicly. If you write something, assume that it will be retained forever. This includes articles, user pages and talk pages. Some limited exceptions are described below. | | If you contribute to the DJBWiki projects, you are '''publishing''' every word you post publicly. If you write something, assume that it will be retained forever. This includes articles, user pages and talk pages. Some limited exceptions are described below. |
|
| |
|
| ==Publishing on the wiki and public data == | | == Publishing on the wiki and public data == |
| | | Simply visiting the web site does not expose your identity publicly (but see [#Private_logging private logging] below). |
| Simply visiting the web site does not expose your identity publicly (but see [[#Private logging|private logging]] below). | |
|
| |
|
| When you edit any page in the wiki, '''you are publishing a document'''. This is a public act, and you are identified publicly with that edit as its author. | | When you edit any page in the wiki, '''you are publishing a document'''. This is a public act, and you are identified publicly with that edit as its author. |
|
| |
|
| === Identification of an author === | | === Identification of an author === |
| | |
| When you publish a page in the wiki, you may be logged in or not. | | When you publish a page in the wiki, you may be logged in or not. |
|
| |
|
Line 30: |
Line 27: |
| If you use a company mail server from home or telecommute and use a DSL or cable Internet connection, it is likely to be very easy for your employer to identify your IP address and find all of your IP based DJBWiki project contributions. Using a user name is a better way of preserving your privacy in this situation. However, remember to log out or disconnect yourself after each session using a pseudonym on a shared computer, to avoid allowing others to use your identity. | | If you use a company mail server from home or telecommute and use a DSL or cable Internet connection, it is likely to be very easy for your employer to identify your IP address and find all of your IP based DJBWiki project contributions. Using a user name is a better way of preserving your privacy in this situation. However, remember to log out or disconnect yourself after each session using a pseudonym on a shared computer, to avoid allowing others to use your identity. |
|
| |
|
| === Cookies === | | === Cookies === |
| | |
| The wiki will set a temporary session cookie (PHPSESSID) whenever you visit the site. If you do not intend to ever log in, you may deny this cookie, but you cannot log in without it. It will be deleted when you close your browser session. | | The wiki will set a temporary session cookie (PHPSESSID) whenever you visit the site. If you do not intend to ever log in, you may deny this cookie, but you cannot log in without it. It will be deleted when you close your browser session. |
|
| |
|
| More cookies may be set when you log in, to avoid typing in your user name (or optionally password) on your next visit. These last up to 30 days. You may clear these cookies after use if you are using a public machine and don't wish to expose your username to future users of the machine. (If so, clear the browser cache as well.) | | More cookies may be set when you log in, to avoid typing in your user name (or optionally password) on your next visit. These last up to 30 days. You may clear these cookies after use if you are using a public machine and don't wish to expose your username to future users of the machine. (If so, clear the browser cache as well.) |
|
| |
|
| === Passwords === | | === Passwords === |
| | |
| Many aspects of the DJBWiki projects' community interactions depend on the reputation and respect that is built up through a history of valued contributions. User passwords are the only guarantee of the integrity of a user's edit history. All users are encouraged to select strong passwords and to never share them. No one shall knowingly expose the password of another user to public release either directly or indirectly. | | Many aspects of the DJBWiki projects' community interactions depend on the reputation and respect that is built up through a history of valued contributions. User passwords are the only guarantee of the integrity of a user's edit history. All users are encouraged to select strong passwords and to never share them. No one shall knowingly expose the password of another user to public release either directly or indirectly. |
|
| |
|
| == Private logging == | | == Private logging == |
| | |
| Every time you visit a web page, you send a lot of information to the web server. Most web servers routinely maintain access logs with a portion of this information, which can be used to get an overall picture of what pages are popular, what other sites link to this one, and what web browsers people are using. It is not the intention of the DJBWiki projects to use this information to keep track of legitimate users. | | Every time you visit a web page, you send a lot of information to the web server. Most web servers routinely maintain access logs with a portion of this information, which can be used to get an overall picture of what pages are popular, what other sites link to this one, and what web browsers people are using. It is not the intention of the DJBWiki projects to use this information to keep track of legitimate users. |
|
| |
|
Line 48: |
Line 42: |
| Here's a sample of what's logged for one page view: | | Here's a sample of what's logged for one page view: |
|
| |
|
| 64.164.82.142 - - [21/Oct/2003:02:03:19 +0000]
| | <pre>64.164.82.142 - - [21/Oct/2003:02:03:19 +0000] |
| "GET /wiki/draft_privacy_policy HTTP/1.1" 200 18084
| | "GET /wiki/draft_privacy_policy HTTP/1.1" 200 18084 |
| "http://www.darkjedibrotherhood.com/wiki/DJBWiki:Main_page"
| | "[http://www.darkjedibrotherhood.com/wiki/DJBWiki:Main_page]" |
| "Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en-us) AppleWebKit/85.7 (KHTML, like Gecko) Safari/85.5"
| | "Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en-us) AppleWebKit/85.7 (KHTML, like Gecko) Safari/85.5" |
| | | </pre> |
| Log data may be examined by developers in the course of solving technical problems, in tracking down badly-behaved web spiders that overwhelm the site, or very rarely to correlate usernames and network addresses of edits in investigating abuse of the wiki. | | Log data may be examined by developers in the course of solving technical problems, in tracking down badly-behaved web spiders that overwhelm the site, or very rarely to correlate usernames and network addresses of edits in investigating abuse of the wiki. |
|
| |
|
| === Policy on release of data derived from page logs === | | === Policy on release of data derived from page logs === |
| | |
| It is the policy of DJBWiki that personally identifiable data collected in the server logs will not be released by the developers who have access to it, except as follows: | | It is the policy of DJBWiki that personally identifiable data collected in the server logs will not be released by the developers who have access to it, except as follows: |
|
| |
|
Line 64: |
Line 57: |
| # Where the information pertains to page views generated by a spider or bot and its dissemination is necessary to illustrate or resolve technical issues. | | # Where the information pertains to page views generated by a spider or bot and its dissemination is necessary to illustrate or resolve technical issues. |
| # Where the user has been vandalising articles or persistently behaving in a disruptive way, data may be released to assist in the targeting of IP blocks, or to assist in the formulation of a complaint to relevant Internet Service Providers | | # Where the user has been vandalising articles or persistently behaving in a disruptive way, data may be released to assist in the targeting of IP blocks, or to assist in the formulation of a complaint to relevant Internet Service Providers |
| # Where it is reasonably necessary to protect the rights, property or safety of the Dark Jedi Brotherhood, its users or the public.<!-- this line borrowed from Google--> | | # Where it is reasonably necessary to protect the rights, property or safety of the Dark Jedi Brotherhood, its users or the public. |
| | |
| DJBWiki policy does not permit public distribution of such information under any circumstances, except as described above. | | DJBWiki policy does not permit public distribution of such information under any circumstances, except as described above. |
|
| |
|
| == Sharing information with third parties == | | == Sharing information with third parties == |
| | | All text added to DJBWiki projects is available for reuse under the terms of the GFDL. |
| All text added to DJBWiki projects is available for reuse under the terms of the GFDL. <!--with the current exception of wikinews--> | |
|
| |
|
| DJBWiki will not sell or share private information, such as email addresses, with third parties, unless you agree to release this information, or it is required by law to release the information. | | DJBWiki will not sell or share private information, such as email addresses, with third parties, unless you agree to release this information, or it is required by law to release the information. |
|
| |
|
| ==Security of information== | | == Security of information == |
| | The Dark Jedi Brotherhood makes no guarantee against unauthorized access to any information you provide. This information will be available to all developers with access to the servers. |
|
| |
|
| The Dark Jedi Brotherhood makes no guarantee against unauthorized access to any information you provide. This information will be available to all [[DJBCoding:Developers|developers]] with access to the servers.
| | == E-mail, mailing lists and IRC == |
| | | === Wikimail === |
| == E-mail, mailing lists and IRC== | | You may provide your e-mail address in your [[Special:Preferences|preferences]]. This enables other logged-in users to send email to you through the wiki (unless you disable this in your preferences). Your address will not be revealed to them unless you respond, or possibly if the email bounces. The email address may be used by the [[DJB]] to communicate with users on a wider scale. |
| | |
| === Wikimail === | |
| | |
| You may provide your e-mail address in your [[{{ns:-1}}:Preferences|preferences]]. This enables other logged-in users to send email to you through the wiki (unless you disable this in your preferences). Your address will not be revealed to them unless you respond, or possibly if the email bounces. The email address may be used by the [[DJB]] to communicate with users on a wider scale. | |
|
| |
|
| If you do not provide an email address, you will not be able to reset your password if you forget it. However, you may contact one of the DJBWiki developers to enter a new mail address in your preferences. | | If you do not provide an email address, you will not be able to reset your password if you forget it. However, you may contact one of the DJBWiki developers to enter a new mail address in your preferences. |
Line 88: |
Line 76: |
| You can remove your email address from your preferences at any time to prevent it being used. | | You can remove your email address from your preferences at any time to prevent it being used. |
|
| |
|
| | | === Information email addresses === |
| === Information email addresses === | |
| | |
| Mail to webmaster AT darkjedibrotherhood DOT org. | | Mail to webmaster AT darkjedibrotherhood DOT org. |
|
| |
|
| === IRC === | | === IRC === |
| | | IRC channels are not officially part of DJBWiki proper. By participating in an IRC channel, your IP address will be exposed to other participants. Different channels have different policies on whether logs may be published. |
| [[IRC channels]] are not officially part of DJBWiki proper. By participating in an IRC channel, your IP address will be exposed to other participants. Different channels have different policies on whether logs may be published.
| |
|
| |
|
| == User data == | | == User data == |
| Data on users, such as the times at which they edited and the number of edits they have made are publicly available via "user contributions" lists, and occasionally in aggregated forms published by other users. | | Data on users, such as the times at which they edited and the number of edits they have made are publicly available via "user contributions" lists, and occasionally in aggregated forms published by other users. |
|
| |
|
| === Removal of user accounts === | | === Removal of user accounts === |
| | |
| Once created, user accounts will not be removed. It may be possible for a developer to change the username on an account, but you will need to request this yourself. The Dark Jedi Brotherhood does not guarantee that a name will be changed on request. See Right to vanish for further details. | | Once created, user accounts will not be removed. It may be possible for a developer to change the username on an account, but you will need to request this yourself. The Dark Jedi Brotherhood does not guarantee that a name will be changed on request. See Right to vanish for further details. |
|
| |
|
| Whether specific user information is deleted is dependant on the deletion policies of the project that contains the information. | | Whether specific user information is deleted is dependent on the deletion policies of the project that contains the information. |
| | |
| ==Deletion of content==
| |
|
| |
|
| | == Deletion of content == |
| Removing text from DJBWiki projects does not really delete it. In normal articles, anyone can look at a previous version and see what was there. If an article is "deleted", any sysop/administrator, meaning almost anyone trusted not to abuse the deletion capability, can see what was deleted. Only a developer can permanently delete information from the DJBWiki projects and there is no guarantee this will happen except in response to legal action. | | Removing text from DJBWiki projects does not really delete it. In normal articles, anyone can look at a previous version and see what was there. If an article is "deleted", any sysop/administrator, meaning almost anyone trusted not to abuse the deletion capability, can see what was deleted. Only a developer can permanently delete information from the DJBWiki projects and there is no guarantee this will happen except in response to legal action. |
|
| |
|
| |
| [[Category:Policies]]
| |
- A version of this policy was created by Andrew J. Myers (Dessan) on May 10, 2006. Suggested changes are still welcome on the talk page.
- Following adoption of suggested changes, this policy will be linked from the footer of every page.
- Please do not make major changes to this page without discussion.
Summary
If you only read the DJBWiki project websites, no more information is collected than is typically collected in server logs by web sites in general.
If you contribute to the DJBWiki projects, you are publishing every word you post publicly. If you write something, assume that it will be retained forever. This includes articles, user pages and talk pages. Some limited exceptions are described below.
Publishing on the wiki and public data
Simply visiting the web site does not expose your identity publicly (but see [#Private_logging private logging] below).
When you edit any page in the wiki, you are publishing a document. This is a public act, and you are identified publicly with that edit as its author.
Identification of an author
When you publish a page in the wiki, you may be logged in or not.
If you are logged in, you will be identified by your user name. This may be your real name if you so choose, or you may choose to publish under a pseudonym, whatever user name you selected when you created your account.
If you have not logged in, you will be identified by your network IP address. This is a series of four numbers which identifies the Internet address from which you are contacting the wiki. Depending on your connection, this number may be traceable only to a large Internet service provider, or specifically to your school, place of business, or home. It may be possible that the origin of this IP address could be used in conjunction with any interests you express implicitly or explicitly by editing articles to identify you even by private individuals.
It may be either difficult or easy for a motivated individual to connect your network IP address with your real-life identity. Therefore if you are very concerned about privacy, you may wish to log in and publish under a pseudonym. When using a pseudonym, your IP address will not be available to the public, but it will be stored on the wiki servers for a relatively short amount of time. Thus it will be available to developers and may be released under certain circumstances (see below).
If you use a company mail server from home or telecommute and use a DSL or cable Internet connection, it is likely to be very easy for your employer to identify your IP address and find all of your IP based DJBWiki project contributions. Using a user name is a better way of preserving your privacy in this situation. However, remember to log out or disconnect yourself after each session using a pseudonym on a shared computer, to avoid allowing others to use your identity.
Cookies
The wiki will set a temporary session cookie (PHPSESSID) whenever you visit the site. If you do not intend to ever log in, you may deny this cookie, but you cannot log in without it. It will be deleted when you close your browser session.
More cookies may be set when you log in, to avoid typing in your user name (or optionally password) on your next visit. These last up to 30 days. You may clear these cookies after use if you are using a public machine and don't wish to expose your username to future users of the machine. (If so, clear the browser cache as well.)
Passwords
Many aspects of the DJBWiki projects' community interactions depend on the reputation and respect that is built up through a history of valued contributions. User passwords are the only guarantee of the integrity of a user's edit history. All users are encouraged to select strong passwords and to never share them. No one shall knowingly expose the password of another user to public release either directly or indirectly.
Private logging
Every time you visit a web page, you send a lot of information to the web server. Most web servers routinely maintain access logs with a portion of this information, which can be used to get an overall picture of what pages are popular, what other sites link to this one, and what web browsers people are using. It is not the intention of the DJBWiki projects to use this information to keep track of legitimate users.
These logs are used to produce the site statistics pages; the raw log data is not made public, and is normally discarded after about two weeks.
Here's a sample of what's logged for one page view:
64.164.82.142 - - [21/Oct/2003:02:03:19 +0000]
"GET /wiki/draft_privacy_policy HTTP/1.1" 200 18084
"[http://www.darkjedibrotherhood.com/wiki/DJBWiki:Main_page]"
"Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en-us) AppleWebKit/85.7 (KHTML, like Gecko) Safari/85.5"
Log data may be examined by developers in the course of solving technical problems, in tracking down badly-behaved web spiders that overwhelm the site, or very rarely to correlate usernames and network addresses of edits in investigating abuse of the wiki.
Policy on release of data derived from page logs
It is the policy of DJBWiki that personally identifiable data collected in the server logs will not be released by the developers who have access to it, except as follows:
- In response to a valid subpoena or other compulsory request from law enforcement
- With permission of the affected user
- To the Grand Master of The Dark Jedi Brotherhood, his legal counsel, or his designee, when necessary for investigation of abuse complaints.
- Where the information pertains to page views generated by a spider or bot and its dissemination is necessary to illustrate or resolve technical issues.
- Where the user has been vandalising articles or persistently behaving in a disruptive way, data may be released to assist in the targeting of IP blocks, or to assist in the formulation of a complaint to relevant Internet Service Providers
- Where it is reasonably necessary to protect the rights, property or safety of the Dark Jedi Brotherhood, its users or the public.
DJBWiki policy does not permit public distribution of such information under any circumstances, except as described above.
Sharing information with third parties
All text added to DJBWiki projects is available for reuse under the terms of the GFDL.
DJBWiki will not sell or share private information, such as email addresses, with third parties, unless you agree to release this information, or it is required by law to release the information.
Security of information
The Dark Jedi Brotherhood makes no guarantee against unauthorized access to any information you provide. This information will be available to all developers with access to the servers.
E-mail, mailing lists and IRC
Wikimail
You may provide your e-mail address in your preferences. This enables other logged-in users to send email to you through the wiki (unless you disable this in your preferences). Your address will not be revealed to them unless you respond, or possibly if the email bounces. The email address may be used by the DJB to communicate with users on a wider scale.
If you do not provide an email address, you will not be able to reset your password if you forget it. However, you may contact one of the DJBWiki developers to enter a new mail address in your preferences.
You can remove your email address from your preferences at any time to prevent it being used.
Information email addresses
Mail to webmaster AT darkjedibrotherhood DOT org.
IRC
IRC channels are not officially part of DJBWiki proper. By participating in an IRC channel, your IP address will be exposed to other participants. Different channels have different policies on whether logs may be published.
User data
Data on users, such as the times at which they edited and the number of edits they have made are publicly available via "user contributions" lists, and occasionally in aggregated forms published by other users.
Removal of user accounts
Once created, user accounts will not be removed. It may be possible for a developer to change the username on an account, but you will need to request this yourself. The Dark Jedi Brotherhood does not guarantee that a name will be changed on request. See Right to vanish for further details.
Whether specific user information is deleted is dependent on the deletion policies of the project that contains the information.
Deletion of content
Removing text from DJBWiki projects does not really delete it. In normal articles, anyone can look at a previous version and see what was there. If an article is "deleted", any sysop/administrator, meaning almost anyone trusted not to abuse the deletion capability, can see what was deleted. Only a developer can permanently delete information from the DJBWiki projects and there is no guarantee this will happen except in response to legal action.