Privacy policy
Revision as of 19:13, 19 August 2008 by MGodwin (talk | contribs) (Incorporating notification requirement passed at April 2008 Board meeting)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
العربية azərbaycanca تۆرکجه беларуская (тарашкевіца) български روچ کپتین بلوچی বাংলা​bosanski català нохчийн کوردی čeština català​Cymraeg Deutsch Deutsch (Sie-Form) Zazaki​Ελληνικά emiliàn e rumagnòl English Canadian English British English Esperanto español​euskara فارسی suomi français Nordfriisk Frysk​galego Avañe'ẽ עברית हिन्दी hrvatski magyar​Bahasa Indonesia italiano 日本語 ქართული​ភាសាខ្មែរ 한국어 Ripoarisch Кыргызча​Lëtzebuergesch Ligure lietuvių Basa Banyumasan македонски മലയാളം Bahasa Melayu မြန်မာဘာသာ مازِرونی Napulitano norsk bokmål नेपाली Nederlands nl-formal Diné bizaad​occitan ਪੰਜਾਬੀ Plautdietsch polski پښتو​português português do Brasil română русский​Scots سنڌي ၽႃႇသႃႇတႆး සිංහල Soomaaliga​shqip српски / srpski svenska Kiswahili தமிழ்​తెలుగు тоҷикӣ ไทย Türkçe удмурт українська​اردو Tiếng Việt მარგალური ייִדיש Yorùbá 粵語中文 中文(简体) 中文(繁體)
This policy is approved by the Wikimedia Foundation Board of Trustees.
It may not be circumvented, eroded, or ignored by Wikimedia Foundation officers or staff nor local policies of any Wikimedia project.
Wikimedia policies
Wikimedia wikis
Board and staff members
Other
This policy has now been updated to include this April 2008 resolution​.
This version of the Privacy policy was approved in June 2006 by the Board of Trustees. Discussion and proposed changes are welcome on the talk page at Meta.
It is requested that this notice is translated and linked from the footer (MediaWiki:Copyright) of every page.
Contents
1Summary
2Publishing on the wiki and public data
2.1Identification of an author
2.2Cookies
2.3Passwords
3Private logging
3.1Policy on release of data derived from page logs
4Sharing information with third parties
5Security of information
6E-mail, mailing lists and IRC
6.1E-mail
6.2Mailing lists
6.3Information email addresses
6.4IRC
7User data
7.1Removal of user accounts
8Deletion of content
Summary
If you only read the Wikimedia project websites, no more information is collected than is typically collected in server logs by web sites in general.
If you contribute to the Wikimedia projects, you are publishing every word you post publicly. If you write something, assume that it will be retained forever. This includes articles, user pages and talk pages. Some limited exceptions are described below.
Publishing on the wiki and public data
Simply visiting the web site does not expose your identity publicly (but see private logging below).
When you edit any page in the wiki, you are publishing a document​. This is a public act, and you are identified publicly with that edit as its author.
Identification of an author
When you publish a page in the wiki, you may be logged in or not.
If you are logged in, you will be identified by your user name. This may be your real name if you so choose, or you may choose to publish under a pseudonym, whatever user name you selected when you created your account.
If you have not logged in, you will be identified by your network IP address. This is a series of four numbers which identifies the Internet address from which you are contacting the wiki. Depending on your connection, this number may be traceable only to a large Internet service provider, or specifically to your school, place of business, or home. It may be possible that the origin of this IP address could be used in conjunction with any interests you express implicitly or explicitly by editing articles to identify you even by private individuals.
It may be either difficult or easy for a motivated individual to connect your network IP address with your real-life identity. Therefore if you are very concerned about privacy, you may wish to log in and publish under a pseudonym.
When using a pseudonym, your IP address will not be available to the public except in cases of abuse, including vandalism of a wiki page by you or by another user with the same IP address. In all cases, your IP address will be stored on the wiki servers and can be seen by Wikimedia's server administrators and by users who have been granted "​CheckUser​" access. Your IP address, and its connection to any usernames that share it may be released under certain circumstances (see below).
If you use a company mail server from home or telecommute and use a DSL or cable Internet connection, it is likely to be very easy for your employer to identify your IP address and find all of your IP based Wikimedia project contributions. Using a user name is a better way of preserving your privacy in this situation. However, remember to log out or disconnect yourself after each session using a pseudonym on a shared computer, to avoid allowing others to use your identity.
Cookies
The wiki will set a temporary session cookie (PHPSESSID) whenever you visit the site. If you do not intend to ever log in, you may deny this cookie, but you cannot log in without it. It will be deleted when you close your browser session.
More cookies may be set when you log in, to avoid typing in your user name (or optionally password) on your next visit. These last up to 30 days. You may clear these cookies after use if you are using a public machine and don't wish to expose your username to future users of the machine. (If so, clear the browser cache as well.)
Passwords
Many aspects of the Wikimedia projects' community interactions depend on the reputation and respect that is built up through a history of valued contributions. User passwords are the only guarantee of the integrity of a user's edit history. All users are encouraged to select strong passwords and to never share them. No one shall knowingly expose the password of another user to public release either directly or indirectly.
Private logging
Every time you visit a web page, you send a lot of information to the web server. Most web servers routinely maintain access logs with a portion of this information, which can be used to get an overall picture of what pages are popular, what other sites link to this one, and what web browsers people are using. It is not the intention of the Wikimedia projects to use this information to keep track of legitimate users.
These logs are used to produce the site statistics pages; the raw log data is not made public, and is normally discarded after about two weeks.
Here's a sample of what's logged for one page view:
64.164.82.142 - - [21/Oct/2003:02:03:19 +0000] "GET /wiki/draft_privacy_policy HTTP/1.1" 200 18084 "
http://en.wikipedia.org/wiki/Wikipedia:Village_pump​" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en-us) AppleWebKit/85.7 (KHTML, like Gecko) Safari/85.5"
Log data may be examined by developers in the course of solving technical problems and in tracking down badly-behaved web spiders that overwhelm the site. IP addresses of users, derived either from those logs or from records in the database are frequently used to correlate usernames and network addresses of edits in investigating abuse of the wiki, including the suspected use of malicious "sockpuppets" (duplicate accounts), vandalism, harassment of other users, or disruption of the wiki.
Policy on release of data derived from page logs
It is the policy of Wikimedia that personally identifiable data collected in the server logs, or through records in the database via the CheckUser feature, may be released by the system administrators or users with CheckUser access, in the following situations:
  1. In response to a valid subpoena or other compulsory request from law enforcement
  2. With permission of the affected user
  3. To the chair of Wikimedia Foundation, his/her legal counsel, or his/her designee, when necessary for investigation of abuse complaints.
  4. Where the information pertains to page views generated by a spider or bot and its dissemination is necessary to illustrate or resolve technical issues.
  5. Where the user has been vandalising articles or persistently behaving in a disruptive way, data may be released to assist in the targeting of IP blocks, or to assist in the formulation of a complaint to relevant Internet Service Providers
  6. Where it is reasonably necessary to protect the rights, property or safety of the Wikimedia Foundation, its users or the public.
Wikimedia policy does not permit public distribution of such information under any circumstances, except as described above.
Sharing information with third parties
Except where otherwise specified, all text added to Wikimedia projects is available for reuse under the terms of the GFDL, except for Wikinews, where the text is available under a Creative Commons License.
Wikimedia will not sell or share private information, such as email addresses, with third parties, unless you agree to release this information, or it is required by law to release the information. When required by law to release such information, the Foundation will notify, when possible, those members of the community whose personally identifiable data has been sought through, or produced as a result of, civil or criminal legal process, except when such notification is forbidden by state or federal law in the United States of America.
Security of information
The Wikimedia Foundation makes no guarantee against unauthorized access to any information you provide. This information may be available to anyone with access to the servers. A partial list of those people can be found in the developers list.
E-mail, mailing lists and IRC
E-mail
You may provide your e-mail address in your Preferences and enable other logged-in users to send email to you through the wiki. Your address will not be revealed to them unless you respond, or possibly if the email bounces. The email address may be used by the Wikimedia Foundation to communicate with users on a wider scale.
If you do not provide an email address, you will not be able to reset your password if you forget it. However, you may contact one of the Wikimedia server administrators to enter a new mail address in your preferences.
You can remove your email address from your preferences at any time to prevent it being used.
Mailing lists
If you subscribe to one of the project mailing lists, your address will be exposed to any other subscriber. The list archives of most of Wikimedia's mailing lists are public, and your address may find itself quoted in messages. The list archives are also archived by Gmane and other services. Mails are usually not deleted or modified, but it may be done in extreme cases.
Information email addresses
Some email addresses (see below) may forward mail to a team of volunteers trusted by the Foundation to use a ticket system such as OTRS to view them and answer them. Mail sent to the system is not publicly visible, but is visible to this group of Wikimedia volunteers. By sending a mail to one of these addresses, your address may become public within this group. The ticket system team may discuss the contents of your mail with other contributors in order to best answer your query.
Addresses that direct to the ticket system system include:
Mail to board members' private addresses may also be forwarded to the OTRS team.
IRC
IRC channels are not officially part of Wikimedia proper. By participating in an IRC channel, your IP address may be exposed to other participants. Different channels have different policies on whether logs may be published.
User data
Data on users, such as the times at which they edited and the number of edits they have made are publicly available via "user contributions" lists, and in aggregated forms published by other users.
Removal of user accounts
Once created, user accounts will not be removed. It may be possible for a username to be changed (depending on the policies of your local wiki). The Wikimedia Foundation does not guarantee that a name will be changed on request.
Whether specific user information is deleted is dependant on the deletion policies of the project that contains the information.
Deletion of content
Removing text from Wikimedia projects does not permanently delete it. In normal articles, anyone can look at a previous version and see what was there. If an article is "deleted", any user with "administrator" access on the wiki, meaning almost anyone trusted not to abuse the deletion capability, can see what was deleted. Information can be permanently deleted by those people with access to the servers, but there is no guarantee this will happen except in response to legal action.
Categories: PolicyEnglish
This page was last edited on 19 August 2008, at 19:13.
Text is available under the Creative Commons Attribution-ShareAlike License; additional terms may apply. See Terms of Use for details.
Privacy policy
About Wikimedia Foundation Governance Wiki
Disclaimers
Mobile view
Developers
Statistics
Cookie statement
Log inPageDiscussionReadFeedbackView historyVisit the main pageHomeOfficial websiteContact usWikimedia BlogQuestions for Wikimedia?DonateVolunteeringWikimedia ShopBylawsValuesPoliciesResolutionsAnnual ReportFinancial reports and Form 990Fundraising reportsMovement affiliatesGive feedbackRecent changesWhat links hereRelated changesSpecial pagesPermanent linkPage informationCite this pageCreate a bookDownload as PDFPrintable version