Privacy Policy
We are a privacy nonprofit. We hold ourselves to the highest standard when it comes to how we handle your data — which is to say, we collect as little as possible, and we are transparent about everything we do.
Overview
This Privacy Policy explains how ODIPA — Organization for Digital Information Privacy & Awareness ("ODIPA," "we," "us," or "our") collects, uses, and protects information when you visit our website at odipa.org (the "Site") or interact with our programs and services.
As a nonprofit organization whose mission is consumer privacy education and advocacy, we are deeply committed to practicing what we preach. We have deliberately designed our digital infrastructure to minimize data collection, avoid tracking technologies, and respect your privacy by default.
What We Collect
We collect the absolute minimum information necessary to operate our website and communicate with people who reach out to us. Here is a complete breakdown:
We do not collect names, email addresses, IP addresses, location data, device identifiers, behavioral profiles, or any other personally identifiable information through the Site itself.
Analytics — Plausible
We use Plausible Analytics, an open-source, privacy-respecting analytics platform based in the European Union. We chose Plausible specifically because it aligns with our mission.
The aggregate data Plausible provides — such as how many people visited the Site today and which pages are most viewed — helps us understand how to better serve our community. No individual is ever identified.
Third-Party Services
We use a small number of external services to operate the Site. Each is listed here with its privacy posture:
| Service | Purpose | Data Shared | Privacy |
|---|---|---|---|
| Plausible Analytics | Website analytics | Aggregate only — no personal data | ✓ Excellent |
| Azure Static Web Apps | Website hosting | Standard HTTP request logs (IP, timestamp) — retained briefly per Microsoft policy | ~ Standard |
| Google Fonts | Typography | Font file requests only | ~ Standard |
| Unsplash | Stock photography | Image requests only | ~ Standard |
We do not use Google Analytics, Meta Pixel, LinkedIn Insight Tag, or any other behavioral tracking or advertising technology.
Your Rights
Depending on your location, you may have the following rights regarding your data. Because we collect so little, most of these are simple to exercise:
Data Security
Our Site is hosted on Microsoft Azure Static Web Apps, which provides enterprise-grade infrastructure with TLS/HTTPS encryption in transit, DDoS protection, and global CDN delivery. We have configured the following security headers on all responses:
Despite these measures, no transmission over the internet is 100% secure. We encourage you to take steps to protect your own data, including using a strong password manager, enabling two-factor authentication on sensitive accounts, and staying informed through ODIPA's free educational programs.
Children's Privacy
Our Site is not directed to children under the age of 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at privacy@odipa.org and we will promptly delete it.
Policy Changes
We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page and, for material changes, provide prominent notice on the Site.
We encourage you to review this policy periodically. Your continued use of the Site after any changes constitutes your acceptance of the updated policy.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
We are committed to responding to all privacy-related inquiries within 5 business days.