Privacy policy

The Internet Identity Workshop (IIW) is produced by the IIW Foundation, which is the data controller for this website. IIW is a twice-yearly unconference held at the Computer History Museum in Mountain View, California.

For anything in this policy, including any request about your data, contact us at iiw@iiwfoundation.org.

Newsletter. If you submit the signup form, your email address goes directly to Mailchimp, along with a tag recording which list you chose. We use it to send occasional announcements about IIW and related events, and nothing else. Every email includes an unsubscribe link, and you can also just email us and we’ll remove you.

Event registration. Registration is handled entirely by Eventbrite, including payment. We never see or store your payment details. We do receive the attendee list for the event you registered for, which we use to run it: badges, catering numbers, and event communications.

Photography. IIW is photographed, and we publish galleries to Flickr and use selected photos on this site. If you attend, you may appear in them. If you’d rather not, tell us at the event or email us afterwards and we’ll remove the images.

Server logs. The site is hosted on GitHub Pages, which keeps standard web server logs including IP addresses. We don’t have access to these logs and don’t use them.

Session notes and proceedings. IIW is an open workshop. Notes from sessions are collected and published in our Books of Proceedings, which are freely downloadable from this site. If you convene or speak in a session, your name and what you said may appear in them. That is the point of the event, and it has been the tradition since 2005, but it is worth stating plainly.

We think it’s worth being specific, because the absence of these is unusual enough to be worth stating:

• No analytics of any kind. No Google Analytics, no Plausible, no Fathom, nothing.
• No advertising networks, no ad pixels, no conversion tracking.
• No cross-site tracking, no fingerprinting, no data brokers.
• No web fonts fetched at runtime. Fonts are downloaded at build time and served from our own domain, so Google never sees your visit.
• We never sell, rent, or trade personal information.

This site sets no cookies of its own. It stores a single value in your browser’s local storage, under the key theme, which remembers whether you chose light or dark mode. It contains no identifier, never leaves your device, and clearing your browser data removes it.

Third parties may set their own cookies. In practice this means Vimeo, on pages containing an embedded video, and any third-party site you click through to.

Loading this site causes your browser to contact the following services. We’ve linked each one’s privacy policy, since your data is governed by theirs once it reaches them.

Depending on where you live, you may have the right to access the personal data we hold about you, correct it, delete it, object to how we use it, or receive a copy in a portable format. If you’re in the European Economic Area or the UK, these rights come from the GDPR. If you’re a California resident, they come from the CCPA and CPRA, which also give you the right not to be discriminated against for exercising them.

We honour these requests regardless of where you live. Email iiw@iiwfoundation.org and we’ll respond within 30 days. We don’t require you to create an account or verify your identity through a third party to ask.

Because we hold so little, most requests resolve quickly: usually your newsletter subscription, your registration record, or a photograph.

Our lawful basis for the newsletter is your consent, which you can withdraw at any time. For running an event you registered for, it is the performance of a contract with you. For publishing proceedings and photographs, it is our legitimate interest in documenting an open community workshop, balanced against your right to ask us to remove them.

We are based in the United States and our service providers are too, so data you give us is processed there. If you are in the EEA or the UK, this means your data is transferred outside your home jurisdiction. Our providers rely on Standard Contractual Clauses or equivalent safeguards for those transfers; details are in their own privacy policies, linked above.

Newsletter subscriptions are kept until you unsubscribe. Registration records are kept for as long as we need them for accounting and to run the event, and are held by Eventbrite under their retention terms. Books of Proceedings and photo galleries are published as a permanent public record of the community, which is why the removal route above matters.

IIW is a professional workshop intended for adults. We don’t knowingly collect personal information from anyone under 16. If you believe a child has given us information, email us and we’ll delete it.

If we change this policy we’ll update the date at the top. If a change materially affects how we handle your data, we’ll say so in the newsletter rather than quietly editing the page.

Questions, requests, or corrections: iiw@iiwfoundation.org. If you’re in the EEA or UK and you think we’ve handled your data badly, you also have the right to complain to your national data protection authority.

Back to the home page