Recently, I was visiting the forum’s privacy policy.
We do not sell, trade, or otherwise transfer to outside parties your personally identifiable information. This does not include trusted third parties who assist us in operating our site, conducting our business, or servicing you, so long as those parties agree to keep this information confidential. We may also release your information when we believe release is appropriate to comply with the law, enforce our site policies, or protect ours or others rights, property, or safety. However, non-personally identifiable visitor information may be provided to other parties for marketing, advertising, or other uses.
As one can see, while the forum doesn’t “sell” user information, it says that “This does not include trusted third parties who assist us in operating our site, conducting our business, or servicing you”
-
Who are the third parties?
-
What is the criteria for a third party to be considered “trusted”?
-
What specific categories of personal and non-personal user data are shared with third parties/advertising partners?
-
The policy states that
"...Retain server logs containing the IP address of all requests to this server no more than 90 days... Retain the IP addresses associated with registered users and their posts no more than 5 years."
Does this data retention policy apply to the third party? (eg: a third party keeping IP addresses for MORE THAN 5 years, even after TorProject Forum has deleted them.)