Privacy Bulletins

Our normal data collection practices are described in the FAQ. Whenever we need to temporarily change (increase) our data collection, we will describe here what we're doing and what the impact is.

2015-06-01: Privacy Policy update

What we're doing
We are updating our Privacy Policy. This includes merging into it the answer to the FAQ question "What information does Psiphon collect?".
Why we're doing it
The Privacy Policy page is now the only place users need to check for Psiphon's privacy and data collection policies. It has been updated to reflect use of advertisements, analytics, and logging for some of our websites.
When we're doing it
This is in effect by at least 2015-06-01T00:00Z.

2014-04-17: Enable S3 bucket logging

What we're doing
We are enabling access logging for one website Amazon S3 "bucket" (i.e., storage container). (For technical reasons, we run dozens of copies of the website in different S3 buckets.)
Why we're doing it
We are doing this to determine how many accesses there are to the "remote server list" stored in the bucket. This will help to give us an idea of how many users are failing to connect.
When we're doing it
Logging will be enabled from 2014-04-17T15:00Z to 2014-04-18T15:00Z.
What user data will be collected
The logging will collect IP addresses, user agents, and timestamps of access to one website. When that data is processed, we will have a count of users divided by geographic region that have accessed the file in question.
How long the data will be retained
The data will be retained no more than one week. We will be keeping the count of users longer -- possibly indefinitely.
How many users are affected
We don't know for sure yet how many users will be affected (that's why we're doing this), but we suspect it will be fewer than 10,000 users.
Who besides Psiphon Inc. will see this data
The access logs are also stored in an Amazon S3 bucket, so Amazon will have access to the logs. (However, Amazon serves the files, so they can already access this information.)