Personal Data We Collect and Why
Comments
- When users leave comments, we collect the data shown in the comments form, IP address, and browser user agent for spam detection.
- An anonymized string is created from the email address (hash) for Gravatar checking. The Gravatar Privacy Policy is linked.
- After approval, the user’s profile picture appears with their comment.
Media
- Avoid uploading images with embedded location data (EXIF GPS). Visitors can extract location data from images.
Contact Forms
- Data from contact forms is not saved; it is only emailed.
Cookies
- Users may opt to save their name, email, and website in cookies for convenience when commenting. These last a year.
- Temporary cookies are set for login page visits.
- Login cookies are created upon logging in, lasting for two days; “Remember Me” option extends it to two weeks.
- Editing or publishing an article saves a separate cookie with no personal data, expiring after a day.
Embedded Content
- Articles may include embedded content from other websites, which may collect data and user interactions as if the user visited those sites directly.
Analytics
- Data may be shared with analytics services such as Google Analytics and Facebook.
Data Retention
- Comments and their metadata are retained indefinitely for easier approval of follow-up comments.
- Registered users can edit or delete their personal information, except for usernames. Admins can view and edit all user information.
User Rights
- Users can request to receive an exported file of their personal data or request deletion of their data, excluding data required for administrative, legal, or security purposes.
Data Sharing
- Visitor comments may be checked through an automated spam detection service.
Summary
This document outlines how personal data is collected through comments, media uploads, cookies, and contact forms, along with user rights regarding their data and the sharing of that data. It emphasizes the importance of privacy and security while using the site.