2018-06-21 21:50:57

privacy policy

What is a privacy policy? The Platform for Privacy Preferences, or P3P specification defines a standard communicable between machines which can be used by websites to declare how they plan to make use of data collected. Modern browsers can be configured to warn users when a website's policies do not agree with the user's preferences. P3P has been around for a few years already, yet remains largely unimplemented.

As for the privacy policy on this site, there's really only a few places I'll ever ask for your data: If you ask for an account on my computer/site, I beleive it's within reason to verify who you are, if you want to view my resume, I ask for an email address (this is mostly a formality, to keep search engines from indexing it, and spam-bots from harvesting my address, but I'm sure you can see how the collected data would be interesting to me), and last, if you want to contact me, I want to know who you are. If you tell me you're safdgadg@sdfsaf.saf, I'm not very likely to pay any attention to you.

So how does my site communicate this to your browser? There is a P3P tag in the source of this and every other page on this site. The default tag for this site is: "NOI NID CUR OUR NOR", which was obtained by answering the following questions at the privacycouncil.com site mentioned in the comment:

   #  http://p3p.privacycouncil.com/public/publicCPGen.jsp
   #    Q1: Do you collect personally identifiable info in cookies? NO
   #    Q2: Do you allow user access to collected data? NO ID DATA IS USED
   #    Q4: For what purpose do you use this data? CURRENT ACTIVITY
   #    Q5: Who is the recipient of the data? OURSELVES
   #    Q6: How long do you retain data? SINGLE TRANSACTION
   #    Q7: Do you have a method of dispute resolution? NO */

If you have an account, and you login, then the answer to Q1 changes.
If you fill out other forms on this site, the answer to Q6 changes.

So why did I go through the trouble? Mostly just because I'm a web developer, & I think P3P is a good thing, and under-implemented. I'm still not sure why the latter is true, I believe it may be the potential for legal liability, but it may also have something to with it coming out at the very tail end of the Internet boom.

More information can be found at http://www.w3.org/P3P/. The w3c also hosts a list of P3P-enabled software.

kennethd @ projecteuler.net  [FSF Associate Member]  Valid HTML 4.0!  Valid CSS!