Differences

This shows you the differences between two versions of the page.

--- privacy [2018/11/27 03:39] – [Permissions Warnings] Clarify the destination of data saved from the Connector dstillman
+++ privacy [2020/10/21 03:59] – [Third-Party Services Used] dstillman
@@ Line 33: / Line 33: @@
   * **Syncing:** Sync preferences → leave unconfigured or disable automatic syncing
-  * **Automatic PDF metadata retrieval:** General preferences → disable "Automatically retrieve metadata for PDFs". //Note: We do not log any information about the contents of PDF metadata requests.//
+  * **Automatic PDF metadata retrieval:** General preferences → disable "Automatically retrieve metadata for PDFs"
+    * We do not log any information about the contents of PDF metadata requests.
+  * **Open-access PDF retrieval:** General preferences → disable "Automatically attach associated PDFs and other files when saving items"
+    * If a PDF can't be saved for an item with a DOI, Zotero will send the DOI to Zotero servers to check for open-access versions. We do not log the contents of these requests. Disabling this preference will disable all automatic attachment saving.
   * **Broken site translator reporting:** disable "Report broken site translators" in the Advanced pane of Zotero and the Zotero Connector
   * **Translator/style update checking:** Advanced preferences → disable "Automatically check for updated translators and styles"
-  * **Zotero update checking:** Advanced → Config Editor → set ''app.update.auto'' to false. //Note: Automatic update checking is strongly recommended for security and stability reasons.//
+  * **Zotero update checking:** Advanced preferences → Config Editor → set ''app.update.auto'' to false
+    * Automatic update checking is strongly recommended for security and stability reasons.
+  * **Retracted item checking:** Advanced preferences → Config Editor → set ''retractions.enabled'' to false
+    * Retraction checks are performed [[/blog/retracted-item-notifications/#designed-for-privacy|without sharing]] the items you have in your database.
+  * **Proxy authentication checking:** Advanced → Config Editor → set ''extensions.zotero.triggerProxyAuthentication'' to false.
+    * At Zotero startup, HEAD requests are made to a test file on Amazon S3 and selected publisher websites (controlled by ''extensions.zotero.proxyAuthenticationURLs'') to trigger a proxy authentication prompt if and only if Zotero detects that a proxy is required to connect to the internet. If you disable this option and require an authenticated proxy, Zotero network connections will fail.
-If automatic syncing or automatic translator/style updates is enabled, Zotero will maintain a persistent connection to Zotero servers when it is open in order to provide immediate updates. You can disable this connection by disabling both of those options or by setting ''extensions.zotero.streaming.enabled'' to false in the Config Editor.
+If automatic syncing or automatic translator/style updates are enabled, Zotero will maintain a persistent connection to Zotero servers when it is open in order to provide immediate updates. You can disable this connection by disabling both of those options or by setting ''extensions.zotero.streaming.enabled'' to false in the Config Editor.
 If you use the Zotero Connector without having Zotero open, the Connector will make a daily request to Zotero servers for information on available site translators. It will then download translators for the sites you visit. For example, if you load a <html><i>New York Times</i></html> article, the Connector will download Zotero’s <html><i>New York Times</i></html> translator and cache it. If Zotero doesn’t have a translator for a specific site, no request will be made. No information on the specific pages you visit is transmitted, and subsequent requests won’t be made for the same translator until you restart your browser or the translator is updated. You can avoid these requests by keeping Zotero open while you browse the web.
@@ Line 75: / Line 83: @@
   * All Zotero server data is stored in the United States in Amazon Web Services. See [[:security|Security of Zotero Data]] for more information.
   * Certain operations you perform in Zotero may trigger requests to public third-party services such as Crossref or the Library of Congress for metadata retrieval. These third parties may log your IP address and search terms (e.g., DOI or ISBN) according to their privacy policies, but no other identifying information is provided.
+  * When you save items to or update items in Zotero, Zotero may, depending on your settings, connect to the associated sites to download metadata or save PDFs or snapshots. This is equivalent to loading those sites in your browser, and similar privacy implications apply. See [[kb:zotero_and_firewalls|Zotero and Firewalls]] for access requirements.
   * Some fonts on Zotero’s websites are licensed from myfonts.com. In order to verify Zotero’s compliance with this license, myfonts.com collects your IP address and the URL of the accessed Zotero webpage.
   * When an account is registered, we use Google reCAPTCHA to verify that it is not an automated registration attempt.