<META xmlns="http://www.w3.org/2002/01/P3Pv1">
<POLICY-REFERENCES>
    <POLICY-REF about="#global">
      <INCLUDE>/*</INCLUDE>
      <EXCLUDE>/p3psearch/*</EXCLUDE>
      <EXCLUDE>/mailman/*</EXCLUDE>
      <EXCLUDE>/twiki/*</EXCLUDE>
      <EXCLUDE>/start/*</EXCLUDE>
      <COOKIE-INCLUDE/>
    </POLICY-REF>

    <POLICY-REF about="#p3psearch">
      <INCLUDE>/p3psearch/*</INCLUDE>
      <COOKIE-INCLUDE name="prefs" value="[0-1]*"/>
    </POLICY-REF>

    <POLICY-REF about="#mailman">
      <INCLUDE>/mailman/*</INCLUDE>
      <INCLUDE>/twiki/*</INCLUDE>
    </POLICY-REF>

</POLICY-REFERENCES>
<POLICIES xmlns="http://www.w3.org/2002/01/P3Pv1">
    <!-- Generated by IBM P3P Policy Editor version Beta 1.12 built 2/27/04 1:19 PM -->

    <!-- Expiry information for this policy -->
    <EXPIRY max-age="86400"/>


<POLICY
    name="global"
    discuri="http://cups.cs.cmu.edu/privacy.html"
    opturi="http://cups.cs.cmu.edu/privacy.html"
    xml:lang="en">
    <!-- Description of the entity making this policy statement. -->
    <ENTITY>
    <DATA-GROUP>
<DATA ref="#business.name">CMU Usable Privacy and Security Lab</DATA>
<DATA ref="#business.contact-info.online.email">webmaster@cups.cs.cmu.edu</DATA>
<DATA ref="#business.contact-info.online.uri">http://cups.cs.cmu.edu/</DATA>
<DATA ref="#business.contact-info.postal.organization">CMU Usable Privacy and Security Lab</DATA>
<DATA ref="#business.contact-info.postal.street">CyLab
5000 Forbes Avenue</DATA>
<DATA ref="#business.contact-info.postal.city">Pittsburgh</DATA>
<DATA ref="#business.contact-info.postal.stateprov">PA</DATA>
<DATA ref="#business.contact-info.postal.postalcode">15213</DATA>
<DATA ref="#business.contact-info.postal.country">USA</DATA>
    </DATA-GROUP>
    </ENTITY>

    <!-- Disclosure -->
    <ACCESS><contact-and-other/></ACCESS>


    <!-- Disputes -->
    <DISPUTES-GROUP>
        <DISPUTES resolution-type="service" service="http://mailto:webmaster@cups.cs.cmu.edu" short-description="Email Contact">
            <LONG-DESCRIPTION>Email address for contacting us to resolve disputes.</LONG-DESCRIPTION>
            <REMEDIES><correct/></REMEDIES>
        </DISPUTES>
    </DISPUTES-GROUP>

    <!-- Statement for group "Global Policy" -->
    <STATEMENT>
        <EXTENSION optional="yes">
            <GROUP-INFO xmlns="http://www.software.ibm.com/P3P/editor/extension-1.0.html" name="Global Policy"/>
        </EXTENSION>

    <!-- Consequence -->
    <CONSEQUENCE>
As you browse our web site, our webserver collects data sent automatically by your web browser. This data is used to provide you with the web pages you request, as well as for system administration and research. If you play a game or participate in another activity on our web site we will collect information about your interactions with the game or activity and use it for our research. We may set a cookie when you play a game or participate in some activities so that we know that you have previously participated if you return to our web site to participate again. These cookies, web browsing, and activity information will not be identified with you personally, although it may be linked to your computer's IP address.</CONSEQUENCE>

    <!-- Use (purpose) -->
    <PURPOSE><admin/><current/><develop/></PURPOSE>

    <!-- Recipients -->
    <RECIPIENT><ours/></RECIPIENT>

    <!-- Retention -->
    <RETENTION><indefinitely/></RETENTION>

    <!-- Base dataschema elements. -->
    <DATA-GROUP>
    <DATA ref="#dynamic.http"/>
    <DATA ref="#dynamic.clickstream"/>
    <DATA ref="#dynamic.miscdata"><CATEGORIES><computer/></CATEGORIES></DATA>
    <DATA ref="#dynamic.miscdata"><CATEGORIES><navigation/></CATEGORIES></DATA>
    <DATA ref="#dynamic.miscdata"><CATEGORIES><interactive/></CATEGORIES></DATA>
    <DATA ref="#dynamic.cookies"><CATEGORIES><computer/><interactive/><navigation/><state/></CATEGORIES></DATA>
    </DATA-GROUP>
</STATEMENT>

    <!-- Statement for group "Survey and User Study Policy" -->
    <STATEMENT>
        <EXTENSION optional="yes">
            <GROUP-INFO xmlns="http://www.software.ibm.com/P3P/editor/extension-1.0.html" name="Survey and User Study Policy"/>
        </EXTENSION>

    <!-- Consequence -->
    <CONSEQUENCE>
If you sign up for one of our surveys or online user studies we will collect your survey responses and information about your activities during the study. This information will be anonymized and used for research purposes only. If you choose to provide your name and contact information, we will use it only to follow-up with you on matters related to the study, for example, to send you a follow-up survey or to let you know that you have won a prize. Some of our studies use cookies to identify you as a study participant.</CONSEQUENCE>

    <!-- Use (purpose) -->
    <PURPOSE><admin/><current/><develop/><pseudo-analysis required="opt-in"/><pseudo-decision required="opt-in"/></PURPOSE>

    <!-- Recipients -->
    <RECIPIENT><ours/></RECIPIENT>

    <!-- Retention -->
    <RETENTION><indefinitely/></RETENTION>

    <!-- Base dataschema elements. -->
    <DATA-GROUP>
    <DATA ref="#dynamic.miscdata"><CATEGORIES><physical/></CATEGORIES></DATA>
    <DATA ref="#dynamic.miscdata"><CATEGORIES><online/></CATEGORIES></DATA>
    <DATA ref="#dynamic.miscdata"><CATEGORIES><interactive/></CATEGORIES></DATA>
    <DATA ref="#dynamic.miscdata"><CATEGORIES><demographic/></CATEGORIES></DATA>
    <DATA ref="#dynamic.miscdata"><CATEGORIES><preference/></CATEGORIES></DATA>
    <DATA ref="#dynamic.cookies"><CATEGORIES><computer/><demographic/><interactive/><navigation/><preference/><state/></CATEGORIES></DATA>
    <DATA ref="#dynamic.miscdata"><CATEGORIES><computer/></CATEGORIES></DATA>
    <DATA ref="#dynamic.miscdata"><CATEGORIES><navigation/></CATEGORIES></DATA>
    </DATA-GROUP>
</STATEMENT>

<!-- End of policy -->
</POLICY>



<POLICY name="p3psearch" discuri="http://cups.cs.cmu.edu/privacy.html" opturi="http://cups.cs.cmu.edu/privacy.html" xml:lang="en">
    <!-- Description of the entity making this policy statement. -->
    <ENTITY>
    <DATA-GROUP>
<DATA ref="#business.name">CMU Usable Privacy and Security Lab</DATA>
<DATA ref="#business.contact-info.online.email">webmaster@cups.cs.cmu.edu</DATA>
<DATA ref="#business.contact-info.online.uri">http://cups.cs.cmu.edu/p3psearch/search</DATA>
<DATA ref="#business.contact-info.postal.organization">CMU Usable Privacy and Security Lab</DATA>
<DATA ref="#business.contact-info.postal.street">CyLab
5000 Forbes Avenue</DATA>
<DATA ref="#business.contact-info.postal.city">Pittsburgh</DATA>
<DATA ref="#business.contact-info.postal.stateprov">PA</DATA>
<DATA ref="#business.contact-info.postal.postalcode">15213</DATA>
<DATA ref="#business.contact-info.postal.country">USA</DATA>
    </DATA-GROUP>
    </ENTITY>

    <!-- Disclosure -->
    <ACCESS><nonident/></ACCESS>


    <!-- Disputes -->
    <DISPUTES-GROUP>
        <DISPUTES resolution-type="service" service="http://mailto:webmaster@cups.cs.cmu.edu" short-description="Contact Email">
            <LONG-DESCRIPTION>Email address for contacting us to resolve
						disputes.</LONG-DESCRIPTION>
            <REMEDIES><correct/></REMEDIES>
        </DISPUTES>
    </DISPUTES-GROUP>

    <!-- Statement for group "p3psearch" -->
    <STATEMENT>
        <EXTENSION optional="yes">
            <GROUP-INFO xmlns="http://www.software.ibm.com/P3P/editor/extension-1.0.html" name="p3psearch"/>
        </EXTENSION>

    <!-- Consequence -->
    <CONSEQUENCE>Our policy for our PrivacyFinder service differs from our
		global policy in that we require search terms to be submitted. These search
		terms are only used for fulfilling your queries and conducting further
		research. This data is stored in our webserver logs for one week. After one
		week, all information other than search terms is deleted. Search terms are
		archived for research purposes and can in no way be mapped back to an
		individual or their computer.</CONSEQUENCE>

    <!-- Use (purpose) -->
    <PURPOSE><admin/><current/><develop/><tailoring/></PURPOSE>

    <!-- Recipients -->
    <RECIPIENT><ours/></RECIPIENT>

    <!-- Retention -->
    <RETENTION><stated-purpose/></RETENTION>

    <!-- Base dataschema elements. -->
    <DATA-GROUP>
    <DATA ref="#dynamic.clickstream"/>
    <DATA ref="#dynamic.http"/>
    <DATA ref="#dynamic.cookies" optional="yes"><CATEGORIES><preference/></CATEGORIES></DATA>
    <DATA ref="#dynamic.searchtext"/>
    </DATA-GROUP>
</STATEMENT>

<!-- End of policy -->
</POLICY>


<POLICY
    name="mailman"
    discuri="http://cups.cs.cmu.edu/privacy.html"
    opturi="http://cups.cs.cmu.edu/privacy.html"
    xml:lang="en">
    <!-- Description of the entity making this policy statement. -->
    <ENTITY>
    <DATA-GROUP>
<DATA ref="#business.name">CMU Usable Privacy and Security Lab</DATA>
<DATA ref="#business.contact-info.online.email">webmaster@cups.cs.cmu.edu</DATA>
<DATA ref="#business.contact-info.online.uri">http://cups.cs.cmu.edu/</DATA>
<DATA ref="#business.contact-info.postal.organization">CMU Usable Privacy and Security Lab</DATA>
<DATA ref="#business.contact-info.postal.street">CyLab
5000 Forbes Avenue</DATA>
<DATA ref="#business.contact-info.postal.city">Pittsburgh</DATA>
<DATA ref="#business.contact-info.postal.stateprov">PA</DATA>
<DATA ref="#business.contact-info.postal.postalcode">15213</DATA>
<DATA ref="#business.contact-info.postal.country">USA</DATA>
    </DATA-GROUP>
    </ENTITY>

    <!-- Disclosure -->
    <ACCESS><contact-and-other/></ACCESS>


    <!-- Disputes -->
    <DISPUTES-GROUP>
        <DISPUTES resolution-type="service" service="http://mailto:webmaster@cups.cs.cmu.edu" short-description="Email Contact">
            <LONG-DESCRIPTION>Email address for contacting us to resolve disputes.</LONG-DESCRIPTION>
            <REMEDIES><correct/></REMEDIES>
        </DISPUTES>
    </DISPUTES-GROUP>

    <!-- Statement for group "Global Policy" -->
    <STATEMENT>
        <EXTENSION optional="yes">
            <GROUP-INFO xmlns="http://www.software.ibm.com/P3P/editor/extension-1.0.html" name="Global Policy"/>
        </EXTENSION>

    <!-- Consequence -->
    <CONSEQUENCE>
As you browse our web site, our webserver collects data sent automatically by your web browser. This data is used to provide you with the web pages you request, as well as for system administration and research. This web browsing information will not be identified with you personally, although it may be linked to your computer's IP address.</CONSEQUENCE>

    <!-- Use (purpose) -->
    <PURPOSE><admin/><current/><develop/></PURPOSE>

    <!-- Recipients -->
    <RECIPIENT><ours/></RECIPIENT>

    <!-- Retention -->
    <RETENTION><indefinitely/></RETENTION>

    <!-- Base dataschema elements. -->
    <DATA-GROUP>
    <DATA ref="#dynamic.http"/>
    <DATA ref="#dynamic.clickstream"/>
    <DATA ref="#dynamic.miscdata"><CATEGORIES><computer/></CATEGORIES></DATA>
    <DATA ref="#dynamic.miscdata"><CATEGORIES><navigation/></CATEGORIES></DATA>
    <DATA ref="#dynamic.miscdata"><CATEGORIES><interactive/></CATEGORIES></DATA>
    </DATA-GROUP>
</STATEMENT>

    <!-- Statement for group "Mailing List and Twiki Policy" -->
    <STATEMENT>
        <EXTENSION optional="yes">
            <GROUP-INFO xmlns="http://www.software.ibm.com/P3P/editor/extension-1.0.html" name="Mailing List and Twiki Policy"/>
        </EXTENSION>

    <!-- Consequence -->
    <CONSEQUENCE>
If you sign up for one of our mailing lists or the CUPS Twiki, we will collect your email address, and optionally your name, and ask you to pick a password. This information will be used to send you email messages posted to the mailing list you subscribed to and to manage your subscription or access the Twiki. This information and the contents of your messages and Twiki postings will be shared with other subscribers and Twiki users.</CONSEQUENCE>

    <!-- Use (purpose) -->
    <PURPOSE><admin/><current/></PURPOSE>

    <!-- Recipients -->
    <RECIPIENT><ours/><public/></RECIPIENT>

    <!-- Retention -->
    <RETENTION><indefinitely/></RETENTION>

    <!-- Base dataschema elements. -->
    <DATA-GROUP>
    <DATA ref="#user.name" optional="yes"/>
    <DATA ref="#dynamic.miscdata"><CATEGORIES><online/></CATEGORIES></DATA>
    <DATA ref="#dynamic.miscdata"><CATEGORIES><content/></CATEGORIES></DATA>
    </DATA-GROUP>
</STATEMENT>

<!-- End of policy -->
</POLICY>

</POLICIES>
</META>