NeuroWiki:Privacy policy

This page “NeuroWiki:Privacy policy” is NeuroWiki's current policy

• Policy text is used to describe the current rules or policies of NeuroWiki;
• Users are expected to adhere to the content described on this page;
• The Site Owner of NeuroWiki reserves the final interpretation right for all provisions.

NeuroWiki Privacy Policy

Last revised: ApramMon, 28 Apr 2025 10:43:44 +00002025-04-28T10:43:44+00:0010 10, 2025

Basic Principles

1. **Data Minimization**: Collect only the data necessary for service operation.
2. **Zero Log Retention**: No logging of behavior data directly linked to user identity.
3. **End-to-End Encryption**: All data transmissions use TLS 1.3 protocol.
4. **User Sovereignty**: Provide full control over user data.

Scope of Data Collection

Data Type	Purpose of Collection	Retention Period
Username and hashed password	Account authentication	Until account deletion
Email address	Password reset	Until user-initiated deletion
Public edit records	Content traceability	Permanent (stored anonymously)
IP address	Security protection	Indefinite

Special Notes

• **Editing Behavior**:

 - All edits are permanently recorded in the page history.
 - Editor usernames are publicly visible.

• **Cookies**:

 - Only functional cookies are used (e.g., session maintenance, preference settings).
 - Disabling cookies will prevent login and editing functionality.
 - Third-party service cookies require explicit user consent.

Data Sharing

1. User data will never be sold or rented to third parties.
2. Limited disclosures may occur only under the following circumstances:

  * Upon receiving a valid judicial warrant from a Hong Kong court.
  * To prevent severe personal injury or significant property damage.
  * With an electronically signed user authorization.

User Rights

1. **Right to Access**: Obtain a copy of personal data. 2. **Right to Rectification**: Correct inaccurate information (excluding usernames). 3. **Right to Erasure**: Permanently remove account data. 4. **Right to Object**: Refuse the processing of non-essential data.

Protection of Minors

• Users under the age of 13 are prohibited from registering.
• Guardians may request the deletion of minor-related data:

  - Legal proof of guardianship is required.
  - Processing time ≤7 working days.

Cross-Border Data Transfers

1. The main data center is located in Tseung Kwan O, Hong Kong.
2. Content distribution is achieved via edge caching:

  * Cached data does not include any user personal information.
  * The transfer process complies with CCPA and GDPR standards.