Privacy Policy
Last Updated: January 21, 2026
Introduction
Welcome to the OpenTDF Documentation website (the "Site"). This Privacy Policy explains how we collect, use, and protect information when you visit our documentation site at https://docs.opentdf.io.
OpenTDF is an open-source project sponsored by Virtru. This documentation site is governed by this Privacy Policy. For information about Virtru's services and data handling practices, please see Virtru's Privacy Policy.
Information We Collect
Analytics Data
When you consent to cookies, we collect anonymous usage data through Google Analytics, including:
- Page Views: Which documentation pages you visit
- Navigation Patterns: How you navigate through our documentation
- Geographic Location: Your approximate location (country/region level only, with IP anonymization enabled)
- Device Information: Browser type, operating system, screen resolution
- Referral Source: The website or search engine that referred you to our site
- Session Duration: How long you spend on our documentation
- Search Queries: Terms you search for within our documentation (if applicable)
Important: We use IP anonymization for all analytics data, which means your full IP address is never stored or processed.
Information You Provide
If you interact with links to external services (such as GitHub Discussions or our GitHub repository), those services have their own privacy policies. We do not collect personally identifiable information directly through this documentation site.
How We Use Your Information
We use the collected analytics data solely to:
- Improve Documentation: Understand which sections are most useful and which need improvement
- Enhance User Experience: Optimize navigation and content structure based on usage patterns
- Identify Popular Content: Focus our efforts on the most visited and valuable documentation
- Monitor Site Performance: Ensure the documentation site loads quickly and functions properly
We do not:
- Sell your personal information (consistent with Virtru's commitment)
- Use your data for advertising purposes
- Share your personal information with third parties except:
- Service providers necessary for site operation (e.g., Google Analytics, hosting providers)
- When required by law or legal process
- Track you across other websites beyond analytics on this site
Cookies and Tracking Technologies
What are Cookies?
Cookies are small text files stored on your device that help us understand how you use our site.
Types of Cookies We Use
-
Essential Cookies (Always Active)
- Cookie Consent Cookie: Remembers your cookie preferences
- These cannot be disabled as they are necessary for the site to function
-
Analytics Cookies (Optional - Require Consent)
- Google Analytics cookies: Track usage patterns and site performance
- You can accept or decline these cookies via the cookie consent banner
Managing Your Cookie Preferences
- You can change your cookie preferences at any time by clearing your browser cookies and revisiting our site
- Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer
- Note that disabling cookies may affect your experience on our site
Google Analytics
We use Google Analytics, a web analytics service provided by Google LLC. Google Analytics uses cookies to help us analyze how users interact with our documentation.
Data Processed by Google Analytics:
- User interactions with the site
- Approximate geographic location
- Device and browser information
- Referral sources
Google's Use of Data: Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services related to website activity and internet usage.
Google Analytics Privacy: You can learn more about how Google uses data at https://policies.google.com/technologies/partner-sites
Opt-Out: You can opt out of Google Analytics by:
- Declining cookies via our cookie consent banner
- Installing the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout
Data Retention
- Analytics Data: Google Analytics retains data for 26 months by default
- Cookie Consent: Your cookie preference is stored locally in your browser for 365 days
- We do not retain any personally identifiable information on our servers
Your Rights
Depending on your location, you may have the following rights regarding your data:
For EU/UK Residents (GDPR)
- Right to Access: Request a copy of data we have about you
- Right to Rectification: Request correction of inaccurate data
- Right to Erasure: Request deletion of your data
- Right to Restrict Processing: Request limitation on how we process your data
- Right to Data Portability: Request transfer of your data
- Right to Object: Object to processing of your data
- Right to Withdraw Consent: Withdraw cookie consent at any time
For California Residents (CCPA)
- Right to Know: Request information about data collection and sharing
- Right to Delete: Request deletion of your data
- Right to Opt-Out: Opt out of data "sales" (Note: We do not sell your data)
- Right to Non-Discrimination: Exercise your rights without discrimination
Children's Privacy
Our documentation site is not directed to children under the age of 13 (or 16 in some jurisdictions). We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.
Third-Party Links
Our documentation may contain links to external websites, including:
- GitHub repositories and discussions
- Sponsor websites (e.g., Virtru)
- Partner websites
- Tutorial resources
These third-party sites have their own privacy policies. We are not responsible for the privacy practices of external sites.
International Data Transfers
Our site is hosted and operated in the United States. If you access our site from outside the United States, your data may be transferred to, stored, and processed in the United States. By using our site, you consent to this transfer.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:
- Updating the "Last Updated" date at the top of this policy
- Displaying a notice on our website (for significant changes)
We encourage you to review this Privacy Policy periodically.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
- Email: privacy@virtru.com
- Mail: Virtru Corporation, 1801 Pennsylvania Ave, 5th Floor, Washington DC 20006
- GitHub Discussions: https://github.com/orgs/opentdf/discussions
- GitHub Issues: https://github.com/opentdf/docs/issues
Legal Basis for Processing (GDPR)
For users in the EU/UK, we process your data based on:
- Consent: Analytics cookies are processed only with your explicit consent
- Legitimate Interests: Essential cookies and site functionality are based on our legitimate interest in operating and securing our documentation site
Data Protection Officer
For privacy-related inquiries, including those related to GDPR compliance, please contact:
- Email: privacy@virtru.com
- Mail: Virtru Corporation, 1801 Pennsylvania Ave, 5th Floor, Washington DC 20006
Compliance
This Privacy Policy is designed to comply with:
- EU General Data Protection Regulation (GDPR)
- California Consumer Privacy Act (CCPA)
- UK Data Protection Act 2018
- Other applicable data protection laws
Summary
What we collect: Anonymous usage data (only with your consent)
Why we collect it: To improve our documentation
How long we keep it: Up to 26 months (analytics) or 365 days (cookie consent)
Your choices: You can decline cookies or delete them at any time
Your rights: Access, delete, or correct your data (where applicable)
Thank you for trusting OpenTDF with your privacy. We are committed to protecting your data and being transparent about our practices.