Susquehanna University respects your privacy and will protect the information you share with the university through any means of communication. This statement explains how Susquehanna University collects, safeguards and may use the information you entrust to the university via the Susquehanna University World Wide Web site, comprising but not limited to the hosts www.susqu.edu, search.susqu.edu, webmail.susqu.edu, blackboard.susqu.edu, and websu.susqu.edu.
Susquehanna's Web hosts collect and store information sent by your Web browser. This information includes:
- The Internet Protocol (IP) address associated with the device in use, such as a personal computer, hand-held device or the firewall or proxy server of the user's network
- The date and time the Web browser made the request
- The address (URL) of the page or file requested
- The address (URL) of the "referring page," the page the browser loaded immediately before the request
- "User agent" information, which usually includes information about the browser software and operating system the computer or device is currently running
- General technical data about Susquehanna's server health and activity at the time of the request
This information does not reveal personally identifiable information but allows Susquehanna to analyze trends in how university systems are being used. This information, including reports generated from the information, is stored indefinitely by the university. Reports may occasionally be shared with third party vendors for further analysis. By having this information available, Susquehanna is able to improve the performance and user experience of the Susquehanna Web site.
Secure Web services
When using Web services provided by Susquehanna, you may be asked to authenticate or log on, using a user name and password. Susquehanna provides user names and initial passwords to campus community members. Susquehanna provides user names and initial passwords to friends of the university for certain services upon completion of a registration process. Users will be required to change their initial password and may also be required to change it periodically thereafter. Passwords are stored in an encrypted or scrambled format while residing on university systems.
Information transferred between your Web browser and university systems during the use of Web services is encrypted. To provide this capability, Susquehanna uses a network protocol known as Secure Socket Layer (SSL), a certificate-based 128-bit encryption protocol that establishes a secure Internet session and ensures that the information you submit is accessible only to you and university systems. You can determine whether or not Web pages are secure by looking at the address (URL) of the Web page being viewed. An "s" at the end of "http" (https:) indicates that you are attached to a secure server with SSL technology. This prevents unauthorized individuals from eavesdropping on your private information while you communicate with Susquehanna.
Susquehanna Web services require the use of a "session cookie" to facilitate the establishment of a session. A session cookie stores unique identification data that allow Susquehanna to confirm that you are the only person university systems are communicating with during this session. This cookie only exists for as long as you are logged on to the session. Without the session cookie, you will not be able to use the Web services provided by Susquehanna. If you prefer to not accept cookies in general, you can specify an exception in your Web browser settings for the domain "susqu.edu". A "log off" button is provided to terminate your session and further protect your private information.
Susquehanna may collect information from a user, with the user's permission, for the purpose of providing various services or improving the overall content and user experience of the Web site. This information may be shared with other persons or departments within the university to provide a requested service but will not be shared with any third party without your express consent. The only exceptions would be in order to conduct normal university business (for example: providing credit card information to a payment processor to complete a payment transaction) or when Susquehanna is legally required to disclose information in response to a court issued subpoena or legally permissible inquiry by a governmental agency or regulator. Susquehanna does not distribute or sell lists of e-mail addresses for commercial purposes but may occasionally provide lists to third party affiliates who are rendering services on behalf of the university.
Susquehanna's Web content may link to content located on Internet servers not owned or affiliated with Susquehanna. These third party Web sites are neither monitored nor controlled by Susquehanna. As a result, this policy does not extend to those sites.
Circumstances beyond the university's control
While Susquehanna strives to protect its users' personal information and privacy, it cannot guarantee the security of any information you disclose online, and you do so at your own risk. Susquehanna's policy does not extend to anything that is inherent in the operation of the Internet and therefore beyond the university's control and is not to be applied in any manner contrary to applicable law or governmental regulation.
Right to change policy
Susquehanna reserves the right at its discretion to make changes to this policy at any time. Changes will be posted to the Susquehanna Web site prior to becoming effective.
Approved December 2005, Web Steering Committee.