Privacy Policy

Hugging Face · agreement dated March 28, 2023 · Official agreement

Read the agreement

10 of 54 cards in Data Access & Collection

Data Access & Collection · Context

"Personal Information" means any information that can identify an individual, alone or combined

The Policy says the Company occasionally collects Personal Information from Users. It defines Personal Information as any information that can, alone or associated with other information, be used to identify an individual, for instance through a name, a username, an email address, an IP address, a photograph or others. The list of examples is introduced with "for instance", so it is not stated to be complete.

Supporting quotations

The Company occasionally collects Personal Information from Users. “Personal Information” means any information that can, alone or associated with other information, be used to identify an individual, for instance by reference of a name, a username, an email address, an IP address, a photograph or others.

Data Access & Collection · Company practice

The Company collects account setup details such as email, password, username and full name

The Company collects information that Users provide directly while using the Services. For setting up an account on the Website this includes email address, password, username and full name, plus optional information such as an avatar, your interests, or usernames for your third-party social networks. The Policy introduces the information collected as information "some of which might be Personal Information", and the lists are introduced with "such as", so they are not stated to be exhaustive.

Supporting quotations

The Company collects the following information, some of which might be Personal Information.
The Company collects information directly provided by Users as part of using the Services, such as:
information provided as part of setting up an account on the Website: email address, password, username, full name, and other optional information such as an avatar, your interests, or usernames to your third-party social networks,

Qualifications & exceptions

  • An avatar, interests and social-network usernames are described as optional; email address, password, username and full name are not described as optional in this passage.

Data Access & Collection · Company practice

The Company collects content you post on the Website and communications between you and the Company

Among the information the Company collects directly are other information and materials that you decide to post on the Website (the examples given are the discussion forum "or other") and communications between you and the Company made as part of using the Services.

Supporting quotations

other information and materials that you decide to post on the Website (e.g., the discussion forum, or other),
communications between you and the Company, as part of using the Services.

Qualifications & exceptions

  • Posted materials are collected where the user decides to post them on the Website.

Data Access & Collection · Company practice

The Company may collect information from third parties that help deliver the Services or process information

The Company says it may collect information from third parties that help it deliver the Services or process information.

Supporting quotations

We may collect Information from third parties that help us deliver the Services or process information.

Qualifications & exceptions

  • The sentence says "may", so collection from third parties is permitted rather than stated as certain.

Not stated here

  • The passage does not identify which third parties provide information or what kinds of information they provide.

Data Access & Collection · Company practice

The Company automatically records session, IP address, cookie and device information

The Company automatically records information from your use of the Services. The examples given are information about your use of the Services and your session (date and location), your IP address, information from cookies (especially login information and preferences), and information about your device (type, model, version, operating system and browser). The list is introduced with "such as", so it is not stated to be complete.

Supporting quotations

The Company automatically records information from your use of the Services such as:
information about your Use of the Services, your session (date, location), your IP address,
information from cookies, especially your login information, your preferences,
information about your device: type, model, version, operating system, browser

Data Access & Collection · Company practice

Cookies are used only for stated purposes; disabling them means you cannot access and use the Services

The Company says it uses cookies only for delivering, updating, monitoring and improving the Services, and for maintaining security by detecting, preventing and responding to threats or incidents. It may collect Information through those cookies. If you do not wish to accept the cookies and decide to disable them, the Policy says you will not be able to access and use the Services.

Supporting quotations

We use cookies only for the purposes of delivering, updating, monitoring, improving the Services, and maintaining security on our Services by detecting, preventing and responding to any type of threats or incidents.
We may collect Information through those cookies. If you do not wish to accept these cookies and you decide to disable them, you will not be able to access and use the Services.

Qualifications & exceptions

  • The purposes are stated as the only purposes for cookies ("only for the purposes of").
  • This passage states the consequence of disabling cookies without distinguishing between particular cookies.

Not stated here

  • The Policy does not list individual cookies or say which of them are required. The "Do Not Track" section says the Company does not use cookies when a "do not track" mechanism is in place; this passage does not say how that fits with the statement that disabling cookies blocks access.

Data Access & Collection · Company commitment

The Company says it honors "do not track" signals: no tracking, cookies or advertising when one is in place

The Policy gives as background that California enacted A.B. 370 on September 27, 2013, amending the California Online Privacy Protection Act to require website operators to disclose how they respond to "Do Not Track Signals" and whether third parties collect personally identifiable information about users on online services. The Company then states that it honors "do not track" signals and does not track, use cookies, or use advertising when a "do not track" mechanism is in place.

Supporting quotations

On September 27, 2013, California enacted A.B. 370, amending the California Online Privacy Protection Act to require website operators to disclose how they respond to "Do Not Track Signals"; and whether third parties collect personally identifiable information about users when they use online services.
The Company honors "do not track" signals and does not track, use cookies, or use advertising when a “do not track” mechanism is in place.

Qualifications & exceptions

  • The commitment applies when a "do not track" mechanism is in place.

Not stated here

  • The Policy does not define "track" or say what counts as a "do not track" mechanism, and does not say how this commitment fits with the cookie use described in the Cookies section.

Data Access & Collection · Company commitment

The Services are not directed to children under 13; the Company directs under-13 users not to use them

The Policy says the Services are neither directed to nor structured to attract children under 13. The Company says it does not intend to collect Personal Information from anyone it knows to be under 13, and that it will direct potential users under 13 not to use the Services.

Supporting quotations

The Services are neither directed to nor structured to attract children under the age of 13 years. Accordingly, the Company does not intend to collect Personal Information from anyone it knows to be under 13 years of age. The Company will direct potential users under 13 years of age not to use the Services.

Qualifications & exceptions

  • The non-collection statement is about intent and about people the Company "knows" to be under 13.

Not stated here

  • The passage does not describe how age is checked or how potential users under 13 are directed away.

Data Access & Collection · Permission or license

The Company may collect your email address to send information and respond to inquiries and requests

The Company says it may collect your email address in order to send information and respond to inquiries and other requests or questions.

Supporting quotations

The Company may collect your email address in order to send information and respond to inquiries and/or other requests or questions.