Privacy Policy

12 January 2001

The following policy is for Merit Network, Inc., the company providing Internet access to all Townships gaining Internet access through the Michigan Townships Online effort.

Full Privacy Policy

The policy included here is only a summary of Merit's privacy policy. The full Merit Privacy Policy describes Merit's privacy policies and procedures in more detail than does this summary. The full policy is available on Merit's website. See: http://www.merit.edu/policies/privacy.html

Merit's Privacy Policy (summary)

Philosophy

Merit is committed to protecting the privacy of all users of its networks, host computers, products, and services. Merit wants to contribute and to help others contribute to providing a safe and secure environment for all network users. Merit will always operate its networks, host computers, other systems, products, and services in ways that allow Merit, its members, and affiliates to follow applicable laws and regulations regarding privacy and the collection, storage, and release of sensitive, confidential, or personally identifiable information.

What Information Is and Is Not Collected and How It Is Used

Merit automatically gathers certain usage information, such as the number and frequency of visitors to and the pages and files accessed on Merit's Web sites and pages, Web caches, File Transfer (FTP) sites, and Network News servers, or the amount of traffic sent and received over segments of the networks Merit operates. Merit only uses and keeps such data in the aggregate and this aggregate data is not considered to be confidential. This aggregate data helps Merit determine how its sites, networks, and services are used, so Merit can improve its sites, networks, and services or make projections of future growth. In some cases, the information gathered may be used to bill a member or affiliate or to establish the rate that a member or affiliate should pay.

Merit collects information about each MichNet shared dial-in session and about uses or logins to certain host computers operated by Meriti including the Access or Login ID used to authorize the session, the name of the Network Access Server (NAS) and port or the name of the host computer being accessed, the phone number called (not always available), the phone number that originated the call (not always available), the IP address assigned to the session, the date and time when the session started, its duration, and the total number of packets and bytes sent and received during the session. The collected information is used to produce aggregate network usage reports, to support billings for surcharged network services, to investigate and troubleshoot the operation of the dial-in network, to investigate complaints about possible network abuse and violations of the MichNet Acceptable Use Policy, and occasionally to respond to warrants, subpoenas and other court orders. Merit does not collect information about what was done or what sites were visited during the session.

Merit may specifically ask for or receive information about individuals when they sign up to use a particular service, participate in an on-line e-mail list or forum, attend a conference or other event, ask a question, or request information. In these cases Merit needs the information -- such as an individual's name, e-mail address, billing address, or credit card number -- in order to provide the requested service.

Merit may collect or examine information carried in the user data portion of network packets or information carried in the headers of network packets such as source and destination IP addresses when troubleshooting certain types of network malfunctions, when investigating possible violations of the MichNet Acceptable Use Policy, or occasionally as required by law, but Merit does not routinely collect or examine this information.

Merit members or affiliates may request assistance from Merit in troubleshooting certain types of network malfunctions or in investigating possible violations of the MichNet Acceptable Use Policy or the member's or affiliate's own policies. With the advance written approval of an official representative of the member or affiliate, Merit may elect to collect sensitive, confidential, or personally identifiable information.

Merit does not routinely gather information about the sites visited by individuals or the detailed network usage patterns of individuals or organizations, other than the aggregate statistical information, information about visits to sites and services operated by Merit, and the special circumstances described earlier.

Merit Web sites do not routinely create nor use cookies, but when cookies are used, their use will be disclosed in a written statement that is prominently available on the Web site(s) involved.

Disclosure

Merit never sells, lends, or leases sensitive, confidential, or personally identifiable information to third parties.

Merit will not share or disclose sensitive, confidential, or personally identifiable information to third parties unless required to do so by law or when in Merit's judgment release is required to prevent serious injury or harm that could result from violation of the MichNet Acceptable Use Policy.

Merit may elect to share sensitive, confidential, or personally identifiable information with the official representatives of its members or affiliates, but only when all of the information to be shared relates to use of networks, hosts, or other systems that belong to or involve products or services provided by Merit to the member or affiliate.

Merit may elect to share aggregate statistical information that is based on or derived from sensitive, confidential, or personally identifiable information so long as the aggregate information when used alone or when combined with other information is no longer confidential or sensitive and will not reveal the activities of or information about individuals or detailed information about organizations.

Some personally identifiable information that individuals or organizations furnish to Merit may be disclosed as a normal part of the use of that information. For example, the names and e-mail addresses of individuals subscribed to some of the public e-mail lists that Merit operates are available to the public or to other list subscribers or become known to list subscribers when messages are posted to the list, or the name and work phone number of an official representative of Merit's members and affiliates may be shared with third parties seeking assistance or reporting problems.

Responsibilities of Others

Because the networks, host computers and other systems managed and controlled by Merit are only some of the networks, host computers, or systems that will carry a user's or organization's data when they use the Internet, the privacy of sensitive, confidential, or personally identifiable information is often beyond Merit's control. In the final analysis all network users must understand that they assume substantial responsibility for the security of their information.

Merit strongly urges that particular care be taken to protect any passwords that are used. Passwords should not be divulged to anyone. Network users should always log out of browsers or other online applications at the end of each computer session to ensure that others cannot access their personal information and correspondence, especially if they share a computer with someone else or are using a computer in a public place like a library, school computer laboratory, or Internet cafe. The use of network applications such as ssh and PGP that encrypt data that is sent over the network should be considered and is encouraged.

All network users should be aware that when communicating with others online and disclosing personal information such as their actual name, e-mail address, on a web page, in a newsgroup, chat room, forum, or in an e-mail message, that information may be collected and used by others in ways that they did not intend or approve. Care should always be exercised when disclosing confidential, sensitive, or personal information either electronically or by more traditional means.

Questions or Comments

Questions or comments about this policy may be addressed to the Merit Help Desk at 734-615-6110 or send e-mail to privacy@merit.edu. Questions or comments may also be directed to the Merit Advisory Council using the comment form that is available on Merit's Web page or by sending electronic mail to merit-ac@merit.edu.

Michigan Townships Online is a joint effort between Merit Network, Inc. and The Michigan Townships Association. © 2003 Acceptable Use Policy, Privacy Policy, Copyright Infringement,
Home, Sitemap, www@mi-twp.org, help@mi-twp.org