What / Where is the privacy policy

[moto]

What / where is the privacy policy for recaptcha ? Is this another
google thing where data is stored for years ??

[reCAPTCHA Support]

Hello,

We believe that privacy is very important, therefore our terms of service lay down strict rules about how we use PII:

Ownership of Data and Information; Carnegie Mellon's Use of Personally-Identifiable Information. All data and information generated from the access and use of the Website and Service, including any image solved (whether or not correct) shall be the property of Carnegie Mellon, and no third party, including you, shall have the right to own such data and information, or use such data or information except as expressly authorized by these Terms and Conditions. By using the Website and Service, you automatically assign to Carnegie Mellon any rights in the data or information generated from the access and use of the Website and Service, including any image solved (whether or not correct) of yours and third party users of your website providing interpretations of images (and you agree to make sure that the third party users of your website assign these rights in the data and information to Carnegie Mellon).

During the course of providing the Service, Carnegie Mellon collects the following data and information. For any API Query/image requested: (i) the URL of your website, (ii) the ID of the image (i.e., the token), (iii) a unique cookie for the third party providing the interpretation, (vi) the date and time of the request for the image, and (v) the third party's IP address. For any image solved (whether or not correct): (i) the information identified in the preceding sentence, (ii) the interpretation entered, and (iii) the determination of whether the interpretation was correct. Carnegie Mellon may use or disclose any of this information and/or your account information to the extent Carnegie Mellon believes it is necessary for Carnegie Mellon to (a) provide the Website and Service, (b) satisfy any applicable law, rule or regulation (including legal process or governmental request), (c) enforce any of these Terms of Service (including investigating any potential breach thereof), (d) detect, prevent, or otherwise address fraud, security or technical issues, or (e) protect against perceived imminent harm to the rights, property or safety of Carnegie Mellon, the users of the Website or Service or the public as required or permitted by law. In addition, Carnegie Mellon may also use or disclose to third parties aggregated, non-personally identifiable information and data (which will not identify your website or a third party individually), such as solved images, in any manner for any purpose.

On 6/5/07, moto <motow...@gmail.com> wrote:

What / where is the privacy policy for recaptcha ?  Is this another
google thing where data is stored for years ??

--
reCAPTCHA: stop spam, read books
http://recaptcha.net

[Graham Perrin]

moto wrote:

> What / where is the privacy policy for recaptcha ? Is this another
> google thing where data is stored for years ??

a) visit <http://groups.google.com/group/recaptcha/about>

b) scroll to the bottom of the page

c) consider the list of Top posters

d) follow the link to Privacy Policy

e) wonder whether the Privacy Policy is harmonious with the list of
Top posters...

Kind regards
Graham

[judas_iscariote]

On Jun 5, 1:04 pm, moto <motowre...@gmail.com> wrote:
> What / where is the privacy policy for recaptcha ? Is this another
> google thing where data is stored for years ??

heh. although recaptcha might have a privacy policy for sure, I really
wonder what are you trying to protect.

so.. let's see what recapctha can store...

1. the IP address of the server that request verification to recaptcha
verify server, IP addresses are **not** secret and will never be, the
IP address of your webserver is already known by the rest of the
world :-D

2. the client IP address, that is also not a secret (it stopped being
a secret since the day it was assigned to your ISP by the NIC
services, maybe much earlier) and is registered by your webserver and
possible by many intermediate hosts.

3 other information as user agent and browser capabilities that are
also no secret at all, if you distrust what the recaptcha javascript
can do..well, you can read the source code here:

http://api.recaptcha.net/js/recaptcha.js

it is available for you and subject to **public** review by experts.

4. the user submitted captcha words, that are not a secret as
well,they just come from books. ;)

5. captcha service can possible get cracked.. yes, bad things happends
everywhere , your site can get attacked as well, features frecuently
brings associated security risks.

Finally and more importantly is up to you to decide if you use or not
a **free** service.

[younours]

There is something else that you get, which is live pings from blog
comments,
paired with the ip address of their poster.

Please, state whether you intend to use this information in any way.

On Jun 5, 8:07 pm, "reCAPTCHA Support" <supp...@recaptcha.net> wrote:
> Hello,
>
> We believe that privacy is very important, therefore our terms of service
> lay down strict rules about how we use PII:
>

> *Ownership of Data and Information; Carnegie Mellon's Use of
> Personally-Identifiable Information.* All data and information generated

[reCAPTCHA Support]

While we do log this information, as is standard industry practice, our terms of service state that we use it under very limited circumstances:

Carnegie Mellon may use or disclose any of this information and/or your account information to the extent Carnegie Mellon believes it is necessary for Carnegie Mellon to (a) provide the Website and Service, (b) satisfy any applicable law, rule or regulation (including legal process or governmental request), (c) enforce any of these Terms of Service (including investigating any potential breach thereof), (d) detect, prevent, or otherwise address fraud, security or technical issues, or (e) protect against perceived imminent harm to the rights, property or safety of Carnegie Mellon, the users of the Website or Service or the public as required or permitted by law. In addition, Carnegie Mellon may also use or disclose to third parties aggregated, non-personally identifiable information and data (which will not identify your website or a third party individually), such as solved images, in any manner for any purpose.

I can't forsee a situation under which the data you mentioned would apply under the above policy.