Bill of Rights Institute Data Compliance
The Bill of Rights Institute ensures the safety and accessibility of our digital resources and personal identifiable information. The Institute values the safety and privacy of young individuals using the internet and engaging with our educational content. Our resources, which focus on civics education, are designed for both students and educators. We comply with internet safety laws and strive to accommodate the specific needs of younger users.
Student Use Policies
- No individual under the age of 18 should register on our website without parental consent. To create an account, we require a valid email address from a parent or guardian to verify consent. This step is essential to ensure adherence to laws protecting minors online.
- Auth0 uses an internal access request and provisioning tool to manage resource requests, ensuring proper approval workflows and tracking. The principle of least privilege is followed, and access is regularly audited.
- At the time of account creation, the only personal information we collect from users under the age of 18 is their first name, last name, and email address. This information is used solely for account creation and management purposes. If a student chooses to engage with the Institute in one of its student contests, additional information will be collected from students as relevant to the contest and potential prize distribution.
- Parents have the right to review and manage their child's account information. They can also request to modify or delete their child's information from our records. If a parent chooses not to consent or to withdraw consent, it will result in the deactivation and deletion of the child's account
Data Security Measures for Personal Identifying Information
- The Bill of Rights Institute uses Auth0 to protect all confidential data using strong encryption. We never store passwords in clear text—they are always hashed and salted securely using bcrypt.
- Auth0’s system is subject to regular audit.
- The Auth0 system is supported by OAuth 2.0, OpenID Connect, SAML, WS-Federation and LDAP.
- Read more about Auth0’s system.
Personally Identifying Information
The Bill of Rights Institute collects personal identifiable information (PII) through several actions on our website. These actions include requesting educational materials, creating a user account, submitting comments, and applying for jobs. The information provided is used strictly for the purposes it was collected. For example, if you sign up to receive email alerts, we use your email to send you relevant notifications. If you are an educator, the information about your teaching background helps us tailor our resources to suit your professional needs. We strictly do not share any information collected from our users with any outside companies. All PII is treated with the utmost confidentiality and is used to support our user’s experience with us. The following table explains what information we collect and how it is used:Data Collection by User Type
| Educator's Data | Student's Data | Data Use | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|
|
Users have the right to review and manage the PII stored with us. They can request corrections, updates, or deletion of PII at any time. We employ robust security measures to protect your PII from unauthorized access or misuse. Any third-party vendors who assist in managing our website and services also adhere to our strict privacy guidelines. We may disclose PII if legally required to do so by law enforcement or other governmental authorities, or in cases of fraud prevention or other legal actions as prescribed by law. We may update this privacy statement periodically to reflect changes in our practices or relevant regulations. We encourage you to review it regularly.
Non-Personally Identifiable Information
Bill of Rights Institute gathers certain broad information about the use of its Website, including the number of unique visitors, the frequency with which they visit, and the programs and services preferred. We gather this information so we can learn how many people visit the Website, see which pages are the most and least viewed, determine which features are used most, identify which websites are referring visitors to the Website, and related information. The data helps us determine the extent to which visitors use certain parts of the Website. Thus, we use this information to help us in evolving the Website to better meet the needs of our users. In connection with these activities, we may use some of the below-mentioned tools.
When you sign up to receive email newsletters and updates from the Bill of Rights Institute, we collect only your email address to send you the requested information. The email address you provide is used solely for sending you newsletters and updates from the Bill of Rights Institute. We do not share your email address or any other personal information with affiliates, vendors, or other organizations. Your email address is stored securely and is only accessed by authorized personnel tasked with sending out our newsletters and updates. You have the option to unsubscribe from our email list at any time. Instructions for unsubscribing are included in every email newsletter and update we send, allowing you full control over your subscription preferences.
Use of Facebook Conversion Tracking and Custom Audiences
Bill of Rights Institute may use Facebook Conversion Tracking or Custom Audiences to alert you to educational information. If you do not want to receive this information on Facebook, please use the functionality of Facebook to remove the information you do not want to receive.
Use of Cookies
We use cookies to track usage and to enhance the efficiency of user interaction with the Bill of Rights Institute Website to customize your use of the Bill of Rights Institute Website and help maintain the Bill of Rights Institute Website’s proper operation. Cookies are small files placed on the hard drive of your computer; each website can send its own cookie to your browser if your browser preferences allow it. You can configure your browser to accept all cookies, reject all cookies, or notify you when a cookie is set. (Each browser is different, so check the “Help” menu of your browser to learn how to change your cookie preferences.) You are always free to decline our cookies if your browser permits, although that may prevent you from using certain features on the Bill of Rights Institute Website. Please note that several companies offer utilities designed to help you visit websites anonymously. Generally, we will not allow third parties to place any cookies, web beacons, or other similar devices on the Bill of Rights Institute Website. Bill of Rights Institute may allow third parties to place cookies on the Bill of Rights Institute Website, such as the below-referenced Google Analytics, in order to improve services offered by the Bill of Rights Institute. Bill of Rights Institute is not responsible for any other websites accessible from or linked to this website, including their privacy policies or information collection practices.Use of Google Analytics
Bill of Rights Institute uses Google Analytics to analyze how visitors use the Bill of Rights Institute Website. The information collected (including your browser and operating system, IP address, pages visited on our website, and time spent here) is transmitted to and stored by Google. Google uses this information to evaluate visitors’ use of the Bill of Rights Institute Website in an aggregate manner. Google compiles reports on website activity and provides other related services. Google may transfer this information to third parties that process information on its behalf or as required by law.
We also use Google Analytics to analyze sources of traffic to the Website by keeping track of the IP addresses of our visitors. An IP address is the unique numeric identifier assigned to each computer browser accessing the internet. An IP address, by itself, cannot identify you personally. When combined with other information provided by your Internet Service Provider, however, your IP address can be used to identify the computer originating a page visit.
Responsible Party Contact Information
If you have any questions or concerns about how we have used the information we have collected about you, please contact us by email at support@mybri.org or by mail at:
Bill of Rights Institute
c/o Website Queries
1310 North Courthouse Road
Suite 620
Arlington, VA 22201