Privacy Policy

Information We Collect

Information you provide voluntarily:

• Account registration information (name, email address, organizational affiliation)
• Search queries and research topics
• Saved documents and collections
• Communications with HSDL staff (Ask a Librarian inquiries)
• Feedback and survey responses

Information collected automatically:

• IP address and approximate geographic location
• Browser type, version, and operating system
• Pages visited, search queries performed, and time spent on pages
• Referring website or link that brought you to HSDL
• Device type and screen resolution

How We Use Your Information

We use the information we collect for the following purposes:

• Service delivery — To provide access to the HSDL collection, process search queries, and manage your account
• Service improvement — To analyze usage patterns, improve search relevance, and enhance the user experience
• Security — To detect and prevent unauthorized access, protect against abuse, and maintain system integrity
• Communication — To respond to your inquiries, send service-related notices, and notify you of policy changes
• Compliance — To meet federal record-keeping requirements and respond to lawful requests

Cookies & Tracking Technologies

HSDL uses cookies and browser storage to provide core functionality and understand how the service is used.

Essential cookies: Required for authentication, session management, and security. These cannot be disabled without losing access to account features.

Analytics: We may use analytics tools to understand aggregate usage patterns. This data is used solely to improve the service and is not shared with third-party advertisers.

Local storage: HSDL uses your browser's localStorage to store preferences such as search history, saved documents, and display settings. This data remains on your device and is not transmitted to our servers unless you are signed in and choose to sync.

Information Sharing

HSDL does not sell, rent, or trade your personal information. We may share information in the following limited circumstances:

• Within DHS, CHDS, and NPS — To fulfill our mission and provide the service
• Law enforcement — When required by law, regulation, or valid legal process (such as a court order or subpoena)
• Security incidents — To investigate potential violations of our Terms of Use or to protect the safety of our users and systems
• Aggregate data — We may share de-identified, aggregate statistical data for research or reporting purposes

We do not share your information with commercial third parties for marketing or advertising purposes.

Data Security

HSDL is operated by the Naval Postgraduate School and adheres to federal information security standards, including the Federal Information Security Modernization Act (FISMA).

We implement appropriate technical and organizational safeguards, including:

• Encryption of data in transit (TLS/HTTPS) and at rest
• Role-based access controls limiting who can view personal information
• Regular security assessments and vulnerability scanning
• Incident response procedures for potential data breaches
• Secure authentication mechanisms with session management

While we take reasonable precautions to protect your information, no system can guarantee absolute security. We encourage you to use strong, unique passwords and to report any suspected security issues.

Your Rights & Choices

Under the Privacy Act of 1974 and other applicable laws, you have the following rights regarding your personal information:

• Access — You may request a copy of the personal information we hold about you
• Correction — You may request correction of inaccurate or incomplete information
• Deletion — You may request deletion of your account and associated personal information, subject to federal record-keeping requirements
• Cookie opt-out — You can configure your browser to block or delete cookies, though this may affect site functionality
• Search history — You can clear your local search history at any time through the account panel or browser settings

To exercise any of these rights, contact us using the information provided in the Contact section below.

Children's Privacy

HSDL is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13 in compliance with the Children's Online Privacy Protection Act (COPPA).

If we become aware that we have inadvertently collected personal information from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us immediately.

External Links

HSDL may contain links to external websites operated by other government agencies, academic institutions, or other organizations. We are not responsible for the privacy practices or content of those third-party sites.

When you follow a link to an external site, you are subject to that site's privacy policy. We encourage you to review the privacy policies of any site you visit.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Post a notice on the HSDL homepage for a reasonable period
• Notify registered users via email for significant changes that affect how personal information is handled

We encourage you to review this page periodically to stay informed about how we protect your information.

Contact Information

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us: