Xertion:Privacy policy

From Xertion Wiki
Jump to navigation Jump to search

Privacy Policy and Data Retention

This section describes how Xertion makes use of the information you provide when you use the Xertion IRC network and Xertion.org website (hereinafter collectively referred to as ‘Xertion services’).

If you are asked to provide information when using Xertion services, such information will not be used for any purposes other than those described in this section.

Xertion collects and uses certain information about users in order to provide services and enable certain functions.

Xertion may collect the following information:

  • Nickname/account on the Xertion network
  • Last time an account was used
  • IP address/hostname
  • Name and E-mail address
  • IRC channels created

Collecting the above data helps Xertion deliver its services to you.

Specifically, Xertion may use data:

  • To improve the provided services.
  • To enable you to reset your password/recover your account.
  • To contact you in relation to nickname and channel registrations with Xertion services, including automated registration verification.
  • To respond to a specific enquiry made via e-mail or the support system.
  • To analyze traffic for illegal and illegitimate activity (e.g. botnets, spam).
  • To scan connecting hosts for well-know vulnerabilities and open proxies.

Your Xertion account is kept until you delete it, or it is deleted for inactivity. Xertion retains logs of IRC events for the purpose of debugging and restoration for a maximum of 60 days. Xertion's data backups are located off-site on encrypted storage.

Xertion does not log any IRC traffic content, neither from public channels, nor from private messages. Individual users connected to the network are able to log traffic they receive, but we ask all users to act responsibly with that data. Specifically, publishing IRC channel log files must not be done without consent of the channel owners.

Xertion uses DNS blacklists to check for well-known sources of illegal and illegitimate activity. IP addresses of incoming connections are forwarded to the blacklist nameserver. In addition, any addresses that we have found to be sources of such activity are submitted for inclusion in these blacklists. Blacklists currently in use at Xertion are:

  • DroneBL (dnsbl.dronebl.org)
  • EFNetRBL (rbl.efnetrbl.org)
  • DNSBL.im (www.dnsbl.im)

We regularly evaluate new blacklists. The above list will be updated if the blacklist is permanently included after an evaluation period of 14 days.

Please note that the Xertion website and network may contain links to other websites, and Xertion has no control of websites outside of the xertion.org domain. If you provide information to a website or service to which Xertion links, Xertion shall not be responsible for its protection and privacy.

If you have any questions about Xertion policies, or about your data at Xertion, please e-mail admin@xertion.org. Specifically, you can ask Xertion which data we have stored about you, and you may demand this data be deleted.

This policy was last updated on: 8 November 2019.

This Privacy Policy was adapted from the OFTC.net Privacy Policy and is licensed (along with this page) under CC BY-SA-NC 4.0.