Data privacy is central to the Foundation's mission so we’re pleased to disclose how we collect, store and use personal information. In addition, we hope this policy will be an inspiration for others.

Please note that this policy specifically covers OpenSSL Foundation’s operations and not the OpenSSL Library, the OpenSSL Corporation, or any other OpenSSL Project.

What information do we collect for the Foundation itself?

• We collect information you provide through forms on our website or interactions with staff.
• We collect contact information from people who support the Foundation financially.
• We may collect data that you voluntarily share via surveys.
• We will always ask permission before making recordings or using technology to transcribe conversations.
• We may retain server logs which include IP address information.

What do we use your information for?

Broadly speaking, we use information we collect in accordance with our mission and values. In particular, we strive to “build a safer internet — one that serves the public interest and upholds privacy and security as foundational rights.”

• We send a newsletter to people who opt into receiving it. There is a link at the bottom of each newsletter to opt out or you can use this link to unsubscribe.
• We may send other limited communications from time to time, such as a fundraising appeal or an announcement about an upcoming event.
• We use survey feedback to help us fulfill our mission.
• In order to maintain a healthy community, we analyze visitor data and occasionally contact individuals directly regarding their contributions.
• IP address information is retained in the event it’s needed for forensic purposes.
• Whenever possible, we will aggregate statistics in order to protect individuals’ data.

How do we protect your information?

OpenSSL Foundation selects vendors that align with our values and reevaluates them from time to time.

Staff use appropriate security measures when processing and storing data.

What is our data retention policy?

We retain data only as long as it serves a business need. Upon your written request, we will gladly remove personal data from our databases, if possible.

Do we use third-party tracking cookies?

No.

Do we disclose any information to other organizations?

We do not sell, share, or trade your personally identifiable information with other organizations.

Changes to our Privacy Policy

If we decide to change our privacy policy, we will post those changes on this page.

This document is CC BY-SA 4.0. It was last updated on January 7, 2026.

‍

‍

‍