Question about the "trusted third parties" that are involved in the operation of the Tor Fourm

Recently, I was visiting the forum’s privacy policy.

We do not sell, trade, or otherwise transfer to outside parties your personally identifiable information. This does not include trusted third parties who assist us in operating our site, conducting our business, or servicing you, so long as those parties agree to keep this information confidential. We may also release your information when we believe release is appropriate to comply with the law, enforce our site policies, or protect ours or others rights, property, or safety. However, non-personally identifiable visitor information may be provided to other parties for marketing, advertising, or other uses.

As one can see, while the forum doesn’t “sell” user information, it says that “This does not include trusted third parties who assist us in operating our site, conducting our business, or servicing you”

  1. Who are the third parties?

  2. What is the criteria for a third party to be considered “trusted”?

  3. What specific categories of personal and non-personal user data are shared with third parties/advertising partners?

  4. The policy states that "...Retain server logs containing the IP address of all requests to this server no more than 90 days... Retain the IP addresses associated with registered users and their posts no more than 5 years." Does this data retention policy apply to the third party? (eg: a third party keeping IP addresses for MORE THAN 5 years, even after TorProject Forum has deleted them.)

1 Like

The Forum privacy policy is outdated. It was from when this forum was hosted by Discourse. But, since last year, the Tor Project sysAdmin team is self-hosting it: Self-hosting the Tor Project users forum.

I see. Thank you for the clarification.

Would it be possible for an updated privacy policy to be written? Thanks.

1 Like