Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
privacy [2008/07/07 17:27]
sean removed
privacy [2018/08/20 23:17] (current)
dstillman New privacy policy
Line 1: Line 1:
-Zotero ​is an open source project committed to providing the best research tool available anywhere. Our philosophy is that what you put into Zotero remains your stuff, and one of our founding principles is to make it as easy as possible to take your stuff where you want it, to share it how you like, or to choose not to share it at all.+====== ​Zotero ​Privacy Policy ======
  
-We are a nonprofit organization and have no financial interest in your private information. However, to provide optimal service, it is helpful for us to collect some data from time to time. In addition, some of Zotero’s advanced features require you to supply us with information;​ for example, Zotero backup and synchronization requires you to transmit your Zotero library data with our server. You should note that participation in these services is up to you and can be adjusted at any time in Zotero Preferences.+===== Overview =====
  
-====== Data we collect ======+Zotero is an open-source project committed to providing the best research tool available anywhere. Our philosophy is that what you put into Zotero is yours, and one of our founding principles is to make sure you remain in control of your data and can share it how you like — or choose not to share it at all.
  
-    ​Zotero automatically records information when you voluntarily provide such information through our websites or in emailincluding the date and time of your requests or the originating email address of your message. +**We are an independentnonprofit organization ​and have no financial interest in your private ​information.** We fund further development by offering additional online storage space to people who find the software useful, not by selling data.
-    * Zotero collects anonymized and aggregated ​information ​regarding broken translators. +
-    ​Zotero collects personal information when you register for Zotero server service.+
  
-====== Uses ======+===== Data We Collect ​=====
  
 +Zotero is designed as a local program that saves data to your own computer by default, and it doesn’t require sharing any data with us to be usable. However, some of Zotero’s advanced features require you to supply us with information.
  
-    ​Zotero does not share your data with third parties+  ​We collect the information you voluntarily provide (e.g., ​your name and email address) if you create a Zotero account and use optional Zotero services. Zotero can be used without creating an account. 
-    When you register for Zotero ​server serviceZotero may use your data to provide ​better user experience, including ​customizing content ​for you+  * We collect the library ​data you upload if you choose to synchronize your library ​with the Zotero servers. Syncing is entirely optional and is disabled by default
-    * Zotero ​may also use anonymous ​and aggregated user information for auditingresearch ​and analysis ​to operate ​and improve ​Zotero ​technologies ​and services.+  We collect the attachment files you upload if you choose to use Zotero ​file syncing. File syncing is optionaland you can choose ​to sync files in your personal library using WebDAV server instead. 
 +  * We keep a record of the most recent IP addresses used to access your synchronized library in order to let you verify the security of your account and allow you to [[/​settings/​keys|revoke access]] in your Zotero settings. 
 +  * We log visits to our website, including ​IP address and browser, in order to prevent abuse and to diagnose technical issues. We retain these access logs for 90 days
 +  We log requests made to our servers by Zotero ​or third-party software, including IP address ​and client ​information, in order to prevent abuse, diagnose technical issues, and assess usage. We retain these logs for up to 90 days. You can [[#​disabling_automatic_requests|opt out]] of all requests to our servers. 
 +  * We collect error reports that you submit. See [[#​support_interactions|Support Interactions]]. 
 +  * If you attempt to save something to Zotero and the save fails, we collect information about the failure, including the URL, browser, and version information,​ so that we can more quickly fix site compatibility issues. We store this information for up to one week. No additional personally identifying information (e.g., username or IP address) is stored, ​and reports are generally only viewed in aggregate. This error reporting can be disabled in the Zotero and Zotero Connector preferences.
  
-====== Your choices ======+===== Library Statistics ​=====
  
-    * We offer you choices when we ask for personal informationwhenever reasonably possibleYou can find more information about your choices in the privacy notices ​or FAQs for specific services. +Zotero anonymizes and aggregates synchronized user and group library data to generate statistics on readership. This anonymized and aggregated data only includes publicly available metadata (e.g.publication title and author)This data is never sold or made available in any forms other than ones offered publicly. We may also use this anonymized and aggregated user information ​for auditing, research, ​and analysis ​to operate ​and improve Zotero services.
-    * We make good faith efforts to provide you access to your personal ​information ​upon request ​and to let you correct such data if it is inaccurate ​and delete it, when reasonably possible.+
  
 +===== Security of Stored Data =====
  
-====== Privacy Policy ======+See [[:​security|Security of Zotero Data]].
  
-You can read more about our full privacy policy ​in the following pages+===== Disabling Automatic Requests ===== 
-  * [[General Privacy Policy]] + 
-  * [[Zotero ​Server Privacy Policy]] +You can disable all automatic communication with Zotero servers from the Zotero and Zotero Connector preferences:​ 
- + 
 +  * **Syncing:​** Sync preferences → leave unconfigured or disable automatic syncing 
 +  * **Automatic PDF metadata retrieval:​** General preferences → disable "​Automatically retrieve metadata for PDFs". //Note: We do not log any information ​about the contents of PDF metadata requests.//​ 
 +  * **Broken site translator reporting:​** disable "​Report broken site translators"​ in the Advanced pane of Zotero and the Zotero Connector 
 +  * **Translator/​style update checking:** Advanced preferences → disable "​Automatically check for updated translators and styles"​ 
 +  * **Zotero update checking:** Advanced → Config Editor → set ''​app.update.auto''​ to false. //Note: Automatic update checking is strongly recommended for security and stability reasons.//​ 
 + 
 +If automatic syncing or automatic translator/​style updates is enabled, Zotero will maintain a persistent connection to Zotero servers when it is open in order to provide immediate updates. You can disable this connection by disabling both of those options or by setting ''​extensions.zotero.streaming.enabled''​ to false in the Config Editor. 
 + 
 +If you use the Zotero Connector without having Zotero open, the Connector will make a daily request to Zotero servers for information on available site translators. It will then download translators for the sites you visit. For example, if you load a <​html><​i>​New York Times</​i></​html>​ article, the Connector will download Zotero’s <​html><​i>​New York Times</​i></​html>​ translator and cache it. If Zotero doesn’t have a translator for a specific site, no request will be made. No information on the specific pages you visit is transmitted,​ and subsequent requests won’t be made for the same translator until you restart your browser or the translator is updated. You can avoid these requests by keeping Zotero open while you browse the web. 
 + 
 +===== Storage Purchases ===== 
 + 
 +We send two pieces of personal data to our payment processor at the time of purchase: 
 + 
 +  * your Zotero username, in order to associate your payment with your Zotero account 
 +  * your email address, so that the payment processor can send you a payment receipt 
 + 
 +Zotero does not collect or store your credit card, banking, or other payment information. When you enter your full name, billing address, and account numbers to complete a Zotero purchase, this information passes directly to our payment processor, and it never touches Zotero servers. 
 + 
 +===== Support Interactions ===== 
 + 
 +Most Zotero support occurs ​in the public Zotero Forums. If you would like to remove forum posts you have made, you may clear them yourself at any time, though we encourage you to leave your posts up for the benefit of others. If you’d prefer your forum posts to appear under a different name, you can change your forums username from your account settings. 
 + 
 +You may be asked to submit an error report or debug output to help us troubleshoot problems. These reports contain technical information about your computer, such as your operating system and installed browser extensions, and may include incidental personal information such as URLs of sites you visited before or while generating the report. You can review the output of these reports before submitting them. We don’t store any personal information (username, IP address) that links the report to you, and we generally don’t look at reports unless they are referenced by a Report ID or Debug ID in the Zotero Forums. Reports are stored for up to one year. 
 + 
 +If you email us, we collect your email address and any other information you provide, and we may store your messages indefinitely to provide context for any future support requests you make. 
 + 
 +===== Third-Party Services Used ===== 
 + 
 +  * All Zotero server data is stored in the United States in Amazon Web Services. See [[:security|Security of Zotero Data]] for more information. 
 +  * Certain operations you perform in Zotero may trigger requests to public third-party services such as Crossref or the Library of Congress for metadata retrieval. These third parties may log your IP address and search terms (e.g., DOI or ISBN) according to their privacy policies, but no other identifying information is provided. 
 +  * Some fonts on Zotero’s websites are licensed from myfonts.com. In order to verify Zotero’s compliance with this license, myfonts.com collects your IP address and the URL of the accessed Zotero webpage. 
 +  * When an account is registered, we use Google reCAPTCHA to verify that it is not an automated registration attempt. 
 +  * Payment processing is provided by [[https://​stripe.com|Stripe]]. 
 +  * When buyers are unable to use Stripe, we process payments with [[https://​www.paypal.com|PayPal]]. 
 + 
 +===== Deleting Your Data ===== 
 + 
 +You may delete your Zotero ​account to remove information you voluntarily provided when you registered to use Zotero services and to remove the library data you provided if you chose to synchronize your library with Zotero servers. To delete your account, visit your [[/​settings|Zotero settings]] and click “Permanently Delete Account”. ​ 
 + 
 +===== Backed-up Data ===== 
 + 
 +We make regular automated backups to protect against accidental loss of user data. These backups are intended for disaster recovery and would be accessed only in the event of significant data loss. Backups may be retained for up to 6 months. 
 + 
 +===== Legally Compelled Disclosure ===== 
 + 
 +We may be legally required to comply with requests for data from law enforcement or government agencies. 
 + 
 +===== Changes ===== 
 + 
 +We may update our privacy policies over time. Up-to-date information,​ including details of new features, will always be available from this page. 
 + 
 +===== Questions ===== 
 + 
 +If you have any questions or concerns regarding Zotero’s privacy policies, please ask us in the [[https://​forums.zotero.org|Zotero Forums]] or email [[mailto:​privacy@zotero.org|privacy@zotero.org]].
privacy.txt · Last modified: 2018/08/20 23:17 by dstillman