Privacy Statement
This is the privacy statement of LoafingList.com (“LL”). If you feel that LL is not abiding by this privacy statement, you should immediately contact privacy@loafinglist.com by email and we will try to resolve your concerns.
Information Collection and Use
LL will not sell, share, transfer or rent the information collected on this site other than as disclosed in this statement.
Registration
In order to receive emails and make full use of the site, users must first complete the registration form. During registration, users are required to provide LL with certain contact information, including their name and email address.
Log Files and Cookies
We log the IP addresses of users to analyse trends, administer the site, track users' movements, and gather broad demographic information for aggregate use. Information collected in this way is not stored in a manner which could be traced back to individual users.
In addition to the logging of user IP addresses for the statistical purposes described above, we store the IP addresses of logged in users to assist us in protecting our users against "session hijacking". When a user logs into LL, we generate a unique key, called a session key, which allows us to keep the user logged in when the user navigates between pages on LL.
Session keys are randomly generated and do not contain personally identifiable information of any kind. A user's session key is stored on our servers and in the user's internet browser in the form of a session cookie. When a logged in user navigates to a page on LL, the user's internet browser sends a request to our servers, which should include the session cookie. Our servers check the received cookie against our records, and so know that the request is from a specific logged in user. If an attacker were to intercept a page request containing a session cookie, the attacker could obtain the session key and then request pages masquerading as the legitimate user. To guard against this "session hijacking", our servers record the IP address of a user's computer when the user logs in, and will only allow page requests using the session cookie created during that login if they come from the same IP address as that stored at login. Because a page request made by an attacker will come from a different IP address, storing the IP addresses of authenticated users helps us to prevent attacks of this nature.
We only store our users' IP addresses in a personally identifiable fashion to facilitate session authentication. When a user logs out of LL, the session is immediately terminated and our server deletes its record of the session key and the IP address associated with that session. LL also attempts to delete the session cookie stored on the user's computer. The behaviour of users' browsers is not in the control of LL, and we cannot therefore guarantee that a user's browser will delete a session cookie when requested to do so by our servers.
When a logged in user leaves LL without logging out, a session cookie remains on the user's computer. The session key and IP address associated with that session remain stored on our servers. If the user ticked the "remember me" button at login, the session cookie should remain stored by the user's internet browser for 30 days after his last visit. Our servers also store a session key and the associated IP address for a logged in user who has ticked the "remember me" button at login for a period of 30 days after the user's last visit. If the user did not tick the "remember me" button at login, the session cookie should be deleted by the user's internet browser when it is closed. Because internet browsers to not notify LL when they are closed, we cannot delete a user's session key and associated IP address when he closes his browser. Instead, where a user did not tick the "remember me" button at login, we retain the session key and the associated IP address for a period of 24 hours after the user's last visit.
Links
This web site contains links to other sites. Please be aware that LL is not responsible for the privacy practices or content of such other sites. We encourage our users to be aware when they leave our site and to read the privacy statements of each and every web site that collects personally identifiable information. This privacy statement applies solely to information collected by this web site.
Security
This web site uses technological and operational procedures to protect our users’ information. When you submit personal information via the web site, this is protected both online and offline. All information held by LL relating to its users is stored on servers kept in secure environments located in the UK. LL stores users' passwords in an encrypted format for authentication purposes, but LL has no way to recover users' unencrypted passwords.
When our registration form asks you to enter personal information we use all reasonable efforts to protect user information online and offline. All of our users’ information, not just personal information, has restricted access. Our employees must use password-protected log-in screens to gain entry to restricted information. Furthermore, all LL employees are kept up-to-date on our security and privacy practices. Any time new policies are added, our employees are notified and/or reminded about the importance we place on privacy, and what they can do to ensure your information is protected.
You may at any time request a copy of the data we hold on you by sending an e-mail to privacy@loafinglist.com.
Notification of Changes
If we decide to change our privacy policy, we will post those changes on our homepage so our users are always aware of what information we collect, how we use it, and under what circumstances, if any, we disclose it. You will have a choice as to whether or not we use the information in this different manner. We will use information in accordance with the changed privacy policy unless you notify us that you wish to unsubscribe.
