<p>security in-a-box</p>
<p>digital security tools and tactics</p>__('Expand navigation')<ul>
<li>Tactics<ul>
<li> Protect your device from malware and phishing attacks</li>
<li> Protect your information from physical threats</li>
<li> Create and maintain strong passwords</li>
<li> Protect the sensitive files on your computer</li>
<li> Recover from information loss</li>
<li> Destroy sensitive information</li>
<li> Keep your digital communication private</li>
<li> Remain anonymous and bypass censorship on the Internet</li>
<li>[Unmaintained] Protect yourself and your data when using social networking sites</li>
<li> Use your smartphone as securely as possible</li>
</ul>
</li>
</ul>
<ul>
<li>Linux<ul>
<li> Basic security for Linux</li>
<li> KeePassXC for Linux - Secure password manager</li>
<li> VeraCrypt for Linux - Secure file storage</li>
<li> Firefox and Security Add-Ons for Linux - Secure Web Browser</li>
<li>[Out-of-date] Thunderbird, Enigmail and OpenPGP for Linux - Secure Email</li>
<li> Tor Browser for Linux - Online anonymity and circumvention</li>
</ul>
</li>
</ul>
<ul>
<li>Windows<ul>
<li> Basic security for Windows</li>
<li> KeePassXC for Windows - Secure Password Manager</li>
<li> VeraCrypt for Windows - Secure File Storage</li>
<li> Firefox and Security Add-Ons for Windows - Secure Web Browser</li>
<li>[Out-of-date] Thunderbird, Enigmail and OpenPGP for Windows - Secure Email</li>
<li> Tor Browser for Windows - Online anonymity and censorship circumvention</li>
<li>[Out-of-date] CCleaner for Windows - secure file deletion and session cleanup</li>
</ul>
</li>
</ul>
<ul>
<li>Mac<ul>
<li> Basic security for Mac</li>
<li> KeePassXC for Mac OS X - Secure password manager</li>
<li> VeraCrypt for Mac OS X - secure file storage</li>
<li> Firefox and Security Add-Ons for Mac OS X - Secure Web Browser</li>
<li>[Out-of-date] Thunderbird, Enigmail and OpenPGP for macOS - Secure Email</li>
<li> Tor Browser for Mac OS X - Online anonymity and circumvention</li>
</ul>
</li>
</ul>
<ul>
<li>Android<ul>
<li> Basic security for Android</li>
<li> Signal for Android</li>
<li> KeePassDX - Mobile Password Manager for Android</li>
<li>[Out-of-date] KeePassDroid for Android</li>
</ul>
</li>
</ul>
<ul>
<li>iOS<ul>
<li> Basic security for iOS</li>
<li> Signal for iOS</li>
</ul>
</li>
</ul>
<ul>
<li>Web<ul>
<li> Mailvelope - OpenPGP encryption for webmail</li>
<li>[Out-of-date] Riseup - secure email service</li>
<li>[Out-of-date] Social networking platforms</li>
</ul>
</li>
</ul>
<ul>
<li>English<ul>
<li>العربية</li>
<li>Bahasa</li>
<li>English</li>
<li>Español</li>
<li>فارسی</li>
<li>Français</li>
<li>Português</li>
<li>Русский</li>
<li>ภาษาไทย</li>
<li>Türkçe</li>
<li>Tiếng Việt</li>
<li>简体中文</li>
<li>[Unmaintained] አማርኛ</li>
<li>[Unmaintained] Burmese</li>
<li>[Unmaintained] ភាសាខ្មែរ</li>
<li>[Unmaintained] Македонски</li>
<li>[Unmaintained] Tibetan</li>
</ul>
</li>
</ul>Data use policyWhy isn't this a "Privacy Policy"?
<p>Many websites link to their “privacy policies” from their homepages, but what they actually tell you is how they plan to use your data.
We believe that it is important to be transparent that this policy is a promise about how we will use the data you leave when you visit this site, but neither this promise nor the promise of any other site gives you full privacy.</p>
<p>The privacy policy is a compulsory legal disclosure of how the website operator collects, retains, and shares personally identifiable information.
In other words, it’s often a list of ways your personal data are not private and under their control.
There are legitimate reasons that people and organisations running websites need to keep data about your visits.
We limit the data that we keep to only the data that we need for maintaining the site and satisfying legal and funding-related reporting requirements.</p>
Visiting Security-in-a-Box
<p>Securityinabox.org is operated by Front Line Defenders, a non-profit operating from Dublin, Ireland and is governed by EU Data law.</p>
<p>When you visit this site, we collect information about your visit of the sort that web browsers and servers typically make available.
If you don’t have Do not Track enabled, we may still collect the following anonymous/anonymised information when you visit our website:</p>
<ul>
<li>the time and date you visited the site</li>
<li>the first page you visit</li>
<li>how many times you click on links</li>
<li>how long you stayed on the site</li>
<li>the last page you visit before leaving</li>
<li>what site brought you to the page (if you followed a link form another page, like on a search engine or social media)</li>
<li>what sites you visited through links on our site</li>
<li>what you download from our site</li>
<li>what keyword or keywords you used if you found the site through a search engine</li>
<li>what browser you use</li>
<li>what operating system you use</li>
<li>what kind of device you use (computer vs smartphone vs tablet)</li>
<li>what brand device you use</li>
<li>what model device you use</li>
<li>your country</li>
<li>your IP address (We anonymise Visitors' IP addresses in our stats: we use this information to protect our servers from misuse.
We do not use this information to identify Security-in-a-Box visitors.)</li>
<li>your screen resolution</li>
<li>language of your browser</li>
<li>number of times you have visited the site</li>
<li>days since the last time you visited the site</li>
</ul>
<p>We do this to better understand how people use the site and so that we can fix problems with the site when they arise.
From time to time, we also release reports that include very general information about who visits this site, like the total number of visitors or which countries or other websites comprise the most visits.</p>
<p>We may collect statistics about the behaviour of visitors to the Security-in-a-Box.
For instance, Security-in-a-Box may reveal how many visitors navigate from one page to another within the toolkit.
We do this so that we can figure out how we can improve the toolkit and develop content that better suits your needs.</p>
<p>We collect this information using open source analytics software that we host ourselves.
This means that even the people who wrote the software do not see any of your information.
This is done through a combination of server logs, javascript, and cookies.
We need the server logs to protect this site and our servers, but you can block javascript using NoScript and turn off or delete cookies and the site will continue to work correctly.
We do not partner with third parties to collect this information, nor do we share information with third parties, with the exception of the release of non-personally-identifying information in formats described above.</p>
I am using a VPN
<p>VPNs can obscure your IP address and your country location, but some data may still be visible.
If you use a VPN while visiting our website, and you haven’t enabled DNT, we would see all of the above information, save your IP address and country location, which would show the IP address and country of the exit point of your VPN.</p>
I am actually using TOR
<p>Just as when you are using a VPN, we can still access the above information, though the changing exit node IP addresses does add a complication.
Furthermore, if we wanted to, we could go back through the exit node IP Addresses which are routinely published by Tor and determine if you are using TOR.
But, that is something that we have never done and would not do.
We will also see similar information if you visit this site through our Onion service .</p>
Using the toolkit and Related Services
<p>Occasionally, we may link to projects from Front Line Defenders, Tactical Tech, or other partners from this site.</p>
<p>In the case of other projects hosted by Front Line Defenders, we may offers the opportunity to engaging in a way that requires collecting personally identifying information, like providing an email address so that we can send you updates that you have decided that you want to receive.
In that case, Front Line Defenders collects such information only as is necessary or appropriate to fulfil the purpose of the visitor’s interaction.
You can always refuse to supply your unique information or withdraw your consent at any time.
This may prevent you from fully engaging in certain activities, but we try hard to make as much of our content available without any kind of barrier.
Any way that you chose to engage with a Front Line Defenders site is voluntary and will not effect your use of Security-in-a-Box.
Through your use of Security-in-a-Box itself, you will not be asked to provide personally identifying information.</p>
<p>Projects and sites hosted by Front Line Defenders and other parters have their own data use policies and you should check the applicable policies if you have question about your data and those sites.</p>
Changes to this Policy
<p>Although most changes are likely to be minor, we may change the Security-in-a-Box Privacy Policy from time to time, in response to legal and technical changes and at our discretion.
We encourage visitors to frequently check this page for any changes to this Data Use Policy.
Your continued use of this site after any change in this Data Use Policy constitutes your acceptance of these change.</p>
Contacts
<p>All questions related to the data use policies of Security-in-a-Box should be directed in writing to the Front Line Defenders (mailto:info@frontlinedefenders.org).</p>
Reusing this Data Use Policy
<p>You are welcome to reuse and be inspired by this Data Use Policy after making sure it complies with the way your website tracks, uses and discloses users information.</p>
<p>
<em>This document was last updated 13 October 2020.</em>
</p>
<p>security in-a-box</p>
<p>digital security tools and tactics</p>
<ul>
<li>About</li>
<li>Contact</li>
<li>Disclaimer</li>
<li>Data Use Policy</li>
<li>Glossary</li>
<li>Twitter</li>
<li>Blog</li>
</ul>
<p>This work is licensed under a Creative Commons Attribution-Share Alike 3.0 Unported License.</p>
<p>Security-in-a-Box is a project of Front Line Defenders and Tactical Tech</p> ↑