Privacy Policy

Our Commitment to Your Privacy:

Your privacy is very important. Accordingly, we have developed this policy in order for you to understand how we collect, use, communicate, disclose, and make use of your voluntarily submitted personal information. By accessing our website you are hereby agreeing to both our terms and conditions and those of our privacy policy. The following outlines our commitment to your privacy.

• We will collect the least amount of information needed from you in order to provide you with specific services through the usage of our website, all of which you are submitting voluntarily. Some of this information is non-identifiable personal information, and the other type would be considered personally identifiable information. We strive to protect your rights and confidentiality over both. Our reasoning to retain your information is only to provide you with content, services, and other options as available in regards to our website, our projects, or those we support in solidarity.
• To fulfill some of your specific requests we may request your name, address, and other personally identifiable details, such as payment details. Submission of this information is completely voluntary, but it may required to utilize the features made available and is only done so at your request. Your payment information may be requested to fulfill a donation or shop order, however it is not stored upon our  own website. We use PayPal currently as a merchant terminal, see below for details about PayPal.
• We will only retain your personally identifiable information as long as necessary to both fulfill the service your are requesting, and to ensure the accuracy of our fulfillment and service of which we have provided to you and will work to ensure that traces of your information are removed securely when no longer relevant to the fulfillment of your requests.
• We will protect personally identifiable information by reasonable security safeguards against loss or theft, as well as unauthorized access, disclosure, copying, use or modification. Not only do we perform routine maintenance and updates upon our website, we also have daily malware and security scanning, brute force protection, and Secure Socket Layer (SSL) encryption enabled upon our website to protect information and access to our features.

We are committed to operating in accordance with these principles in order to ensure that the confidentiality of personal information is protected and maintained.

Who We Are:

Our website address is: https://www.paperrevolution.org.
You can find out all about who we are and more by visiting our about page.

What Personal Data We Collect & Why We Collect It:

Contact, Donation, & Volunteer Forms

When you complete a contact, volunteer, or any other form on the site we collect the data requested and submitted upon completion and submission of that form. We may also collect your IP address and browser user agent string to help spam detection. Upon submission we may send you correspondence related to the form by which you submitted.

Comments & Website Activity (Social Platform)

When you leave comments on the site we collect the data shown in the comments form, and also your IP address and browser user agent string to help spam detection.

We also collect other website activity within our social media platform that may include connections, group additions and creations, comments, and other activity types. We do this to provide our social platform experience and attempt to make various privacy options readily available for the customization of your preferred privacy settings.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/.

After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images or other media onto the website, you should avoid uploading images with embedded location data (EXIF GPS) included. This information may still be available to website visitors who can  then download and extract any location data from images on the website.

Cookies

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Your Email Address (Riseup.net Listserve)

Upon submission of your email address you may be subscribed to our listserve, which is where we will maintain your email address for future updates and communications. We use RiseUp.net as our listserve provider, they are a third-party service provider and by voluntary submission of your email address you are also bound to their privacy policy. See their privacy policy here.

To opt-out of our listserve or otherwise unsubscribe, please follow the link within the footer of our listserve emails.

Embedded Content From Other Websites

Articles on this site may include embedded conten:t (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

How Long We Retain Your Data:

If you leave a comment, the comment and its meta-data are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information with discretion and mostly, to ensure accuracy or help troubleshoot with website experience or request fulfillment issues.

What Rights You Have Over Your Data:

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where We Send Your Data & Who We Share It With:

All of the information you provide is submitted voluntarily. Some of it you make readily available to us and third-party applications and the rights you have over that data vary in regards to the service you are allowing. For instance, in order to watch a YouTube video upon our website, you are granting them access to your non-identifiable personal information, and are therefore also bound by their user agreements. Visitor comments may be checked through an automated spam detection service.

Alternately, when you submit a form, register for a website service, make a donation, or make a purchase upon our website – you  may requested for further information about. We may share this information with third-parties, but only if they are directly related to the fulfillment of your request, such as those parties by which we are featuring in our support or shop features. We do this only to fulfill specific needs, but otherwise will never exchange, sell, or share any personally identifiable information with other third-party services or organizations, unless otherwise specified below.

What About Third-Party Applications & Services:

In order to provide specific services or to gauge online engagements we may seek the use of third-party applications and service providers. These services may occasionally collect and temporarily retain non-identifiable personal information about our website visitors in order to provide you with the services requested. We do take measures to protect and keep personally identifiable information separate from any third-party services provided,  or have otherwise secured or limited information access unless otherwise specified. Some services (such as donation support) does require the sharing of information as noted. We will never exchange, rent, sell, or otherwise disclose your personally identifiable information to any third-party service or organization.

You can find out more about data collection, usage, retention and how it is shared through third-party applications & services below in accordance with each application’s policies.

Easy Digital Downloads

We use Easy Digital Downloads (EDD) to collect information about you during the checkout process on our store. This information may include, but is not limited to, your name, billing address, shipping address, email address, phone number, credit card/payment details and any other details that might be requested from you for the purpose of processing your orders.

Handling this data also allows us to:
– Send you important account/order/service information.
– Respond to your queries, refund requests, or complaints.
– Process payments and to prevent fraudulent transactions. We do this on the basis of our legitimate business interests.
– Set up and administer your account, provide technical and/or customer support, and to verify your identity.

Additionally we may also collect the following information:
– Location and traffic data (including IP address and browser type) if you place an order, or if we need to estimate taxes and shipping costs based on your location.
– Product pages visited and content viewed while your session is active.
– Your comments and product reviews if you choose to leave them on our website.
– Account email/password to allow you to access your account, if you have one.
– If you choose to create an account with us, your name, address, and email address, which will be used to populate the checkout for future orders.

The information collected through the EDD application is not shared with EDD or any of their affiliates.

iThemes Security

What personal data we collect and why we collect it:

Cookies

Visiting the login page sets a temporary cookie that aids compatibility with some alternate login methods. This cookie contains no personal data and expires after 1 hour.

Security Logs

The IP address of visitors, user ID of logged in users, and username of login attempts are conditionally logged to check for malicious activity and to protect the site from specific kinds of attacks. Examples of conditions when logging occurs include login attempts, log out requests, requests for suspicious URLs, changes to site content, and password updates. This information is retained for 60 days.

Who we share your data with:

This site is scanned for potential malware and vulnerabilities by Sucuri’s SiteCheck. We do not send personal information to Sucuri; however, Sucuri could find personal information posted publicly (such as in comments) during their scan. For more details, please see Sucuri’s privacy policy.

How long we retain your data:

Backups of security log details are retained for 9 days.

Security logs are retained for 60 days.

Where we send your data:

This site is part of a network of sites that protect against distributed brute force attacks. To enable this protection, the IP address of visitors attempting to log into the site is shared with a service provided by ithemes.com, this is the only user information shared to this third-party service.  For privacy policy details, please see the iThemes Privacy Policy.

Smush

Smush sends images to the WPMU DEV servers to optimize them for web use. This includes the transfer of EXIF data. The EXIF data will either be stripped or returned as it is. It is not stored on the WPMU DEV servers.

Google/YouTube

Google and YouTube services may collect your non-identifiable personal information upon our website to provide you with services such as YouTube video content, Google Translate services, and other features. Like other third-party services and embedded content, this means Google may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content (Google Translate), including tracking your interaction with the embedded content if you have an account and are logged in to that website.

We also use Google’s Webmaster Tools to both index our website, and monitor it’s functionality from within Google’s service platform. We do this for search-engine optimization (SEO) purposes and to provide you with a better website experience. This service does not collect personally identifiable information on our website visitors, unless you are already arriving upon our website through a Google service by which you have signed into.

For more details, please see Google’s privacy policy.

You can opt out of Google’s advertising tracking cookie or use a browser plugin to opt out of all Google Analytics tracking software.

PayPal [Merchant Terminal Services]

We currently use PayPal as our merchant terminal. If you choose to submit a donation or purchase something through our shop we use their services to finalize and pay for your order. This means you will provide your credit card number, directly to PayPal. PayPal’s privacy policy will apply to the information you provide on the PayPal website.

For more details, please see PayPal’s privacy policy.

Our Contact Information:

You can contact us with your questions, comments, or concerns by emailing us at:

contact [at] PaperRevolution.org

-or you can visit our contact page and complete the form located there.

As of [June 16th, 2020], Paper Revolution has not received any National Security Letters or FISA court orders,
and we have not been subject to any gag order by a FISA court,or any other similar court of any government. 
Paper Revolution has never placed any backdoors in our hardwareor software and has not received any 
requests to do so. Paper Revolution has never disclosed any user communications to any third party.

Paper Revolution intends to update this report approximately twice per year.